Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
File: DSkZIlh_dQ94oZeVy9ibxymvF9U.mft (raw, json)
Hash identifier: x2P23Gb1+NQA+Lj/y73zfOm5WzgDsR+t7yFEsCSUfHs=
Subject key identifier: AE:AD:FE:90:17:81:0E:86:3C:CB:BF:DA:7F:D5:D9:1E:2D:0D:D0:00
Authority key identifier: 0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5
Certificate issuer: /CN=0d291922587f750f78a19795cbd89bc729af17d5
Certificate serial: 019E2BBA36227EB0AFF815FB3D66BF3AD859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
Manifest number: 1585
Signing time: Fri 15 May 2026 13:01:24 +0000
Manifest this update: Fri 15 May 2026 13:01:24 +0000
Manifest next update: Sat 16 May 2026 13:01:24 +0000
Files and hashes: 1: DSkZIlh_dQ94oZeVy9ibxymvF9U.crl (hash: S3kiESw+P1mlWxCNsTLnPjo8UkQR/CL4tY+4M2XAfP4=)
2: HumGUcM3JA5WttmoWk-JTSCdCgM.roa (hash: HnfAs+SxCScsW89JwwIoJO2V9u8mCg1vCQuYyQrU9JY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:ba:36:22:7e:b0:af:f8:15:fb:3d:66:bf:3a:d8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d291922587f750f78a19795cbd89bc729af17d5
Validity
Not Before: May 15 13:01:24 2026 GMT
Not After : May 16 13:01:24 2026 GMT
Subject: CN=aeadfe9017810e863ccbbfda7fd5d91e2d0dd000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fe:4b:95:ed:5c:24:56:38:c8:6e:7d:c2:52:
56:7e:73:82:45:9a:c2:4c:9f:70:ce:69:36:4a:8c:
0b:f3:c6:50:d9:96:2c:15:3f:82:e7:18:32:72:cd:
7f:02:0a:03:99:77:7f:ae:6f:66:1f:0a:51:2e:14:
ab:8c:d6:3e:d7:d4:4b:42:88:6f:ed:bc:de:29:6f:
bb:1c:54:52:82:8f:a3:7a:be:53:0b:7d:17:00:74:
4f:e1:15:02:87:4c:fb:de:20:aa:6c:6c:9a:76:03:
15:3d:cd:14:4f:19:a1:db:d2:6d:74:6e:09:02:04:
b0:fb:86:f8:f1:87:a3:9a:fd:28:73:7b:ed:1c:70:
04:1c:94:4b:f2:34:b7:9b:9e:b3:9e:33:93:10:a1:
7e:bd:c2:43:0f:b9:b8:cc:b1:e4:75:76:43:72:02:
68:4b:2e:ae:c9:46:4a:53:e8:99:ad:2e:5e:69:c4:
be:66:8b:66:c6:16:59:ab:10:45:0c:75:a4:78:84:
13:e2:e6:71:41:53:31:8c:76:94:e6:8e:92:b5:66:
51:09:3d:22:12:18:da:0f:e1:89:52:67:9a:fa:56:
e2:33:cf:0b:c1:59:b1:61:8e:d1:25:55:84:62:59:
59:29:a3:2a:22:9d:0b:fc:f2:97:b3:01:88:80:b3:
57:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AD:FE:90:17:81:0E:86:3C:CB:BF:DA:7F:D5:D9:1E:2D:0D:D0:00
X509v3 Authority Key Identifier:
keyid:0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:43:11:44:c6:90:8b:d3:8c:30:ed:10:72:f6:18:8e:48:ca:
2a:ce:4b:cf:5e:36:39:81:26:7d:c2:e6:eb:c6:6e:46:c7:2c:
b9:1a:17:af:e5:cd:d7:67:7f:a2:82:32:fc:8f:40:34:43:c7:
d8:4d:50:9c:7e:5b:fc:84:ff:6a:14:25:fe:50:6c:26:8f:5b:
68:5c:1d:e2:e1:26:10:3e:28:c2:60:81:1e:5e:17:df:b6:d8:
82:67:45:72:b1:7f:8e:75:1e:3a:09:fe:6b:9b:65:b1:13:82:
2f:3b:58:d0:12:00:d4:73:39:d3:5b:71:e4:1c:31:88:cd:71:
ad:3a:c4:49:6f:26:87:84:d3:9f:fb:40:9b:16:fd:17:60:ce:
16:1b:cc:84:5a:bf:75:93:05:a2:3f:ae:ff:f0:3a:f5:ae:b3:
bc:15:ad:a1:6c:f9:a1:62:7c:eb:2f:fc:05:9c:89:3d:01:b4:
0c:22:3e:5b:09:e0:1e:4b:6e:f1:89:a1:70:51:91:27:65:61:
20:f5:60:9e:48:11:e8:c2:af:56:7f:42:d8:af:12:c6:9e:66:
10:d3:e3:d7:59:0c:48:a6:3a:6b:dd:3c:d9:04:14:9a:c1:c5:
1b:a9:cc:4f:7a:91:46:d7:b2:ea:4a:6b:6d:be:f5:8f:5a:f1:
78:99:c3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 21:08:32 2026 by rpki-client