Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
File: DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft (raw, json)
Hash identifier: PM2/iCa9Yh3ju8nx6WxMsLumu2mRf06/87Z9W7qvs3I=
Subject key identifier: 6E:AE:81:33:78:3C:77:AF:17:38:CF:EA:13:27:37:9D:10:E8:1E:F3
Authority key identifier: 0C:05:35:54:C8:18:67:4C:D5:46:B7:99:DD:44:78:5A:56:4C:56:CB
Certificate issuer: /CN=0c053554c818674cd546b799dd44785a564c56cb
Certificate serial: 019E31854BB88ADFDA395418CCA89804DCE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
Manifest number: 0E9B
Signing time: Sat 16 May 2026 16:01:19 +0000
Manifest this update: Sat 16 May 2026 16:01:19 +0000
Manifest next update: Sun 17 May 2026 16:01:19 +0000
Files and hashes: 1: DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl (hash: ixWiBcCvK8awCogKsYRANKgAJe6al9iS6mjm9z1o3II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:85:4b:b8:8a:df:da:39:54:18:cc:a8:98:04:dc:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c053554c818674cd546b799dd44785a564c56cb
Validity
Not Before: May 16 16:01:19 2026 GMT
Not After : May 17 16:01:19 2026 GMT
Subject: CN=6eae8133783c77af1738cfea1327379d10e81ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6c:3c:a0:ec:59:ef:cf:70:4b:4b:f5:80:a3:
57:ac:be:13:13:36:2b:ef:e1:a7:3b:bb:76:a2:31:
79:a9:8f:f5:33:43:a3:84:e9:d5:fb:4d:a9:27:ed:
26:ea:e2:6d:1c:87:7e:e0:de:f5:4d:3d:2c:c2:45:
21:8c:ac:b2:29:64:31:f1:54:e2:ec:79:17:bc:b9:
f3:a5:8d:dc:62:03:b8:03:6e:47:45:1e:7a:6d:fd:
c9:c5:49:e9:43:19:35:b8:b5:df:ff:8a:09:78:a3:
dc:9a:70:d2:8f:6d:62:0b:fa:b0:1d:3a:f8:ab:95:
49:42:d4:e3:a1:4e:a0:0c:05:19:75:18:51:98:70:
08:22:8f:cf:97:bf:8c:8d:65:97:88:53:a9:c3:27:
f9:7b:54:63:18:b2:b2:2c:b0:d3:a9:84:15:1f:b3:
2b:4b:2a:f4:80:88:6e:8d:71:15:e0:c1:94:5b:2a:
53:c1:44:14:4c:20:3a:e9:7c:4b:b8:74:84:12:56:
9f:50:37:e8:a9:11:0e:0a:c9:1b:b3:f4:8a:00:06:
d8:5f:49:2a:69:0e:70:a5:08:3f:37:cd:9a:3c:7d:
52:98:7c:c6:b8:dc:73:f7:dd:f1:c0:2c:ca:93:c2:
b2:0d:b8:cd:ed:ec:e5:92:db:ea:ae:67:dc:cf:de:
b9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:AE:81:33:78:3C:77:AF:17:38:CF:EA:13:27:37:9D:10:E8:1E:F3
X509v3 Authority Key Identifier:
keyid:0C:05:35:54:C8:18:67:4C:D5:46:B7:99:DD:44:78:5A:56:4C:56:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:38:33:35:1c:70:d0:e4:02:43:f3:10:b6:0f:54:83:59:b1:
69:46:52:81:e9:aa:9c:26:6d:9c:97:bc:00:4f:6f:71:33:fb:
21:fd:da:da:18:56:0c:4d:2c:d3:1d:15:7d:6f:1c:50:3c:7a:
17:be:d0:4d:b0:e2:a0:01:28:f8:a6:aa:27:29:28:ce:b7:7f:
e8:ec:6c:b5:fa:36:bb:54:bb:33:4c:c0:03:a1:4d:f6:4e:d6:
01:ac:f0:17:32:6e:7e:8e:2c:22:7f:fb:ef:ef:fd:d0:3b:6d:
21:ff:93:58:f9:42:37:30:e7:47:08:f8:0b:c8:52:8f:1e:7c:
23:5f:11:c3:94:07:e8:40:5a:6e:ae:3d:40:1f:5a:a2:b8:f7:
ac:0c:da:07:d8:f0:d5:cd:77:d0:97:cf:05:18:31:80:d9:5a:
5d:1c:79:de:2e:4b:67:4f:70:e2:62:6e:c0:23:d9:36:55:d6:
66:52:57:23:7f:bb:e8:8a:40:61:ea:2b:ea:54:5d:66:df:fd:
11:f8:ac:6b:e2:4a:a9:5b:48:6c:aa:1e:fb:4d:f1:48:7e:e2:
a3:e7:ea:3d:8f:6b:9f:77:14:d6:a1:64:d7:b0:58:4b:78:ce:
8c:cc:78:ba:68:2b:e0:2a:38:41:e5:11:b0:c8:b0:b9:00:3a:
16:c1:c1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:56:44 2026 by rpki-client