Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
File: DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft (raw, json)
Hash identifier: aSjrSM0xW3bdmhELOtcpBL5Q7URTxoOhcXO4YJBdk1Y=
Subject key identifier: 2C:8C:F7:42:D3:59:C8:63:20:5B:AF:30:80:89:5B:A4:2C:5F:91:F8
Authority key identifier: 0C:87:4A:5F:52:73:4E:26:0E:7B:FA:4D:45:11:4A:DD:92:77:E3:53
Certificate issuer: /CN=0c874a5f52734e260e7bfa4d45114add9277e353
Certificate serial: 019E28EFDE417426327D8D51644DB148E89C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
Manifest number: 0AF9
Signing time: Fri 15 May 2026 00:01:09 +0000
Manifest this update: Fri 15 May 2026 00:01:09 +0000
Manifest next update: Sat 16 May 2026 00:01:09 +0000
Files and hashes: 1: 96SX2S5aBWouZ5qx7BRgteL4iq8.roa (hash: M3a2yFufjkSiLfAokMv1+05AOpH8jhB4+9skztdJecg=)
2: DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl (hash: UB/ECJr8UMtundv25G5wVuxjzgqgTHDfeDNooILp3nQ=)
3: L6SdCLp_FHvz3o3tKNX0l8WA490.roa (hash: 9JHTUcRidI2GiaDB1BZb9pHbOm8ZJYd9k9gXu4meKKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 00:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:ef:de:41:74:26:32:7d:8d:51:64:4d:b1:48:e8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c874a5f52734e260e7bfa4d45114add9277e353
Validity
Not Before: May 15 00:01:09 2026 GMT
Not After : May 16 00:01:09 2026 GMT
Subject: CN=2c8cf742d359c863205baf3080895ba42c5f91f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1f:ed:17:6f:65:8e:0f:9b:e9:65:28:af:03:
92:84:d1:bc:b7:1c:41:ca:bc:d0:68:45:86:8e:f7:
e2:d2:62:fb:af:3c:a3:c8:6a:4a:5a:55:49:cf:a2:
c7:c9:78:a9:e6:50:6e:2a:56:61:ba:22:fa:d4:42:
41:41:64:77:f3:93:ea:c9:20:4a:f8:5b:7e:99:7a:
b1:76:28:e3:72:2d:97:0a:87:03:46:89:ec:2d:65:
da:a8:fb:fe:e7:e2:6c:6b:dc:7a:88:31:29:55:4d:
06:d6:29:66:ed:cd:7d:3c:55:4f:9b:b3:f4:4e:e0:
a4:12:99:15:cb:14:fd:5e:89:74:b6:96:c0:38:d6:
b0:bc:bb:df:d2:e2:ba:a9:73:b0:0d:b1:e3:5f:77:
94:b9:1b:ab:c3:97:45:9e:d1:50:70:b5:9e:b9:89:
56:9d:76:94:ec:25:b2:7c:ee:03:eb:bc:cb:b0:56:
3d:67:f4:5a:f2:eb:c2:fd:39:d2:fc:d7:93:bf:f1:
cc:4b:80:d4:c6:b9:a1:e4:bb:6b:64:ef:fb:6b:60:
d3:b6:b2:ef:55:17:68:32:9e:02:b6:19:16:bb:4f:
01:fd:2b:f3:93:c8:7a:8b:72:75:c0:c2:3e:bb:c3:
a0:91:46:65:f9:5e:f8:ae:03:21:63:48:7a:80:45:
ab:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:8C:F7:42:D3:59:C8:63:20:5B:AF:30:80:89:5B:A4:2C:5F:91:F8
X509v3 Authority Key Identifier:
keyid:0C:87:4A:5F:52:73:4E:26:0E:7B:FA:4D:45:11:4A:DD:92:77:E3:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:7d:c1:eb:a7:78:50:4b:29:e9:11:73:91:00:88:70:e8:45:
ec:89:8c:24:87:5d:35:07:f9:bb:d3:28:8f:10:75:fc:e0:19:
12:6e:ca:94:cb:ac:2a:9c:6c:7e:ae:38:23:c8:95:21:76:45:
35:e1:8f:52:fe:f2:db:1c:b8:38:c3:78:68:1f:d7:2f:19:7c:
f3:a0:b7:43:2e:55:c0:07:b6:f0:6b:2d:f9:24:ee:7e:e1:3f:
c0:8e:28:cd:2a:d1:db:e5:de:3a:03:4d:78:fa:44:46:92:2b:
2e:8c:fb:b9:e1:53:57:a3:8e:27:d7:bb:56:79:bc:5e:87:30:
d0:49:c6:b1:52:7c:62:cf:05:58:50:96:25:2f:fe:28:ae:af:
a0:6a:05:38:aa:7d:c6:f5:e3:0c:cf:36:ce:d0:ec:03:07:db:
54:b0:18:75:fd:2d:45:f8:4d:8c:7f:e7:b8:8d:5c:90:22:1a:
ae:c4:ba:b5:44:e2:71:55:a2:de:5b:0e:a3:5b:b6:d7:c7:66:
33:e1:5d:c6:a6:e2:99:58:a8:fa:22:76:46:3e:a5:73:77:f7:
1a:6e:8d:40:de:57:56:cc:59:09:4c:0b:09:78:97:ee:08:60:
09:6a:0c:3b:43:33:09:3a:4d:f1:24:03:5b:ee:7d:8a:69:55:
06:65:a1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:03:19 2026 by rpki-client