Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.mft
File: Dxd9Rq5RS92RniRMevdK337bqNU.mft (raw, json)
Hash identifier: 8EkuBlA9g8/QCk5BwvNH3IlOx2veXG/roIHblK4/078=
Subject key identifier: 95:85:58:85:9A:34:6C:D4:7B:B9:7A:DC:88:5D:01:04:A9:76:93:E4
Authority key identifier: 0F:17:7D:46:AE:51:4B:DD:91:9E:24:4C:7A:F7:4A:DF:7E:DB:A8:D5
Certificate issuer: /CN=0f177d46ae514bdd919e244c7af74adf7edba8d5
Certificate serial: 019EB6C4F719D054077FFD34CD3C189B7123
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxd9Rq5RS92RniRMevdK337bqNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.mft
Manifest number: 016D
Signing time: Thu 11 Jun 2026 13:00:21 +0000
Manifest this update: Thu 11 Jun 2026 13:00:21 +0000
Manifest next update: Fri 12 Jun 2026 13:00:21 +0000
Files and hashes: 1: 25aFLsrtr-3cg85dYuCtUtJ12DI.roa (hash: Q6BbhiSVhBcdb9sUM5J8K87QWD5MUDWEKTLkdgJwJhY=)
2: Dxd9Rq5RS92RniRMevdK337bqNU.crl (hash: t0sXYu85o4B71CDQSkQtV3OkqYEJyTeGnzwKUb05XMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dxd9Rq5RS92RniRMevdK337bqNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:c4:f7:19:d0:54:07:7f:fd:34:cd:3c:18:9b:71:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f177d46ae514bdd919e244c7af74adf7edba8d5
Validity
Not Before: Jun 11 13:00:21 2026 GMT
Not After : Jun 12 13:00:21 2026 GMT
Subject: CN=958558859a346cd47bb97adc885d0104a97693e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:db:dc:77:b3:46:50:75:60:2e:ae:41:54:81:
f9:12:5c:ec:28:ef:ef:e1:59:89:b1:bf:25:92:0c:
14:8a:29:f3:7c:a1:be:25:01:f5:92:ef:00:15:b3:
26:06:9b:80:a0:03:05:ad:a5:85:08:3a:89:5e:d7:
6b:17:37:ab:c1:0e:55:c7:9b:8b:81:17:fb:a9:e1:
52:aa:0c:f0:fd:39:be:81:00:f2:b8:2e:80:71:28:
16:f0:95:27:ef:20:f1:ea:df:da:09:d0:12:37:2a:
d2:f3:a2:41:2d:ba:b8:18:41:b7:21:26:88:9d:3e:
19:af:8a:97:63:d1:d3:84:6a:7d:bc:bb:d2:d7:e0:
71:7b:1e:e1:c7:38:ad:08:97:33:16:e7:c5:b5:36:
de:76:37:28:f3:4f:9a:b2:16:de:d6:85:76:2d:bf:
81:31:16:1d:a3:8e:46:21:85:38:83:d2:9d:79:9f:
da:fc:c3:ad:70:51:4a:de:a4:00:ce:a4:03:20:77:
ea:94:42:ea:e0:cd:33:a4:42:09:5b:07:87:6d:bb:
c2:3a:5f:5b:a6:3a:8e:56:d6:4b:54:14:28:e9:bd:
40:93:6a:05:6f:2b:3a:b9:c6:22:51:e9:0e:e4:8d:
7a:f5:15:94:d9:e8:ae:46:69:f2:ce:3d:99:84:dc:
68:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:85:58:85:9A:34:6C:D4:7B:B9:7A:DC:88:5D:01:04:A9:76:93:E4
X509v3 Authority Key Identifier:
keyid:0F:17:7D:46:AE:51:4B:DD:91:9E:24:4C:7A:F7:4A:DF:7E:DB:A8:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxd9Rq5RS92RniRMevdK337bqNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ff:69:c6:2a:8b:67:8f:d7:10:13:b3:6d:cf:48:08:86:e9:
d3:5e:e5:55:31:d1:c6:d5:34:04:98:1c:c5:a7:92:7a:05:7b:
80:53:5b:50:9d:1f:e0:ac:36:c9:54:fa:0b:6b:2e:a3:4b:cf:
12:4b:24:9a:48:dc:d2:4b:60:02:4d:6c:ab:a3:f9:9e:01:ba:
6e:66:b9:f5:b2:97:97:fd:a9:cd:c1:1d:e4:31:70:44:09:e2:
47:80:3a:71:08:f6:f3:9b:64:89:e0:06:ee:7c:e2:33:ae:0f:
d9:4e:75:90:d6:c8:15:05:c5:2a:3e:70:b8:18:64:67:60:fa:
2c:9a:7c:ef:5e:20:bf:d1:4d:2a:f8:da:b9:f6:82:6c:0b:ac:
3a:63:8c:9e:fb:76:cf:14:bb:9f:c2:df:86:36:2f:a6:39:e8:
35:a5:a6:86:33:b4:38:ef:54:f3:90:77:ac:62:fd:e0:06:23:
31:5d:41:b8:02:a1:f4:f8:50:4a:38:fc:3d:d9:5d:0f:d0:66:
fb:58:a6:cd:ed:47:84:da:2f:44:8e:fe:02:f1:7a:32:a0:fa:
59:f2:97:97:06:20:3d:67:d1:64:4f:0a:05:16:37:d7:8f:11:
2e:ec:fb:6a:7a:95:65:76:8b:86:cf:58:ec:6d:1f:8a:73:e5:
48:ed:83:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:23:43 2026 by rpki-client