Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
File: DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft (raw, json)
Hash identifier: 4BFG2SxRskP3ld0L47e2GCXPkL3t38AgSnvnFSFOTkM=
Subject key identifier: 6D:55:84:F2:8E:97:A1:55:8E:69:9F:3C:3D:D6:64:5B:4E:9D:00:A4
Authority key identifier: 0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
Certificate issuer: /CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Certificate serial: 019E051A3DC5B7EFCAFF2436878DA9B13F49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
Manifest number: 18FD
Signing time: Fri 08 May 2026 01:01:06 +0000
Manifest this update: Fri 08 May 2026 01:01:06 +0000
Manifest next update: Sat 09 May 2026 01:01:06 +0000
Files and hashes: 1: DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl (hash: I1FfwbsR9oiaCpzLck7JibFUE4GXWVkZkkMe4++pzpI=)
2: xRmmdqH1-j--sEXPtnNY3Z-R5Zo.roa (hash: 3OUa7VjiPRdUyQdSMo547+vkOocCdI86key02w1U7/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 May 2026 21:15:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:05:1a:3d:c5:b7:ef:ca:ff:24:36:87:8d:a9:b1:3f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Validity
Not Before: May 8 01:01:06 2026 GMT
Not After : May 9 01:01:06 2026 GMT
Subject: CN=6d5584f28e97a1558e699f3c3dd6645b4e9d00a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2a:59:24:e7:7a:1d:6c:b5:dd:66:2c:c5:e9:
3b:58:cd:d4:6e:59:be:3a:a3:80:c8:58:00:8f:d9:
20:fc:4d:7e:27:5f:c6:40:d0:e6:a1:d1:0c:0b:8b:
b1:60:7a:c9:e0:41:23:10:3f:64:54:c4:b2:b9:d7:
68:80:a8:be:fb:b3:87:c6:62:aa:cc:0c:97:e3:b8:
a2:20:dd:4b:2c:a6:e9:85:37:35:3a:94:8e:70:b3:
ba:b3:93:ca:fd:cb:b3:95:c5:f9:17:de:a7:0f:b9:
fa:47:74:49:df:5e:01:86:b2:e8:67:f5:55:f8:8b:
10:03:d2:8c:20:98:d8:f5:b2:60:9e:5c:4c:bd:64:
3a:51:3d:0f:d1:40:ac:e0:3e:55:19:75:12:4a:1d:
52:04:85:c8:d4:6d:4f:62:0a:06:7d:c3:fb:bd:6d:
9d:4f:b3:96:13:81:a2:df:6c:6d:78:0e:f8:e3:87:
87:4a:cf:6a:18:9d:7e:b6:e9:b1:5e:38:85:bc:f0:
82:e2:cc:a3:e0:cb:a5:5d:1e:5a:4b:ea:ea:b3:6f:
30:f4:86:44:48:d2:58:dd:c1:a3:c8:1f:79:9f:7d:
b5:04:8f:71:3e:9f:be:af:a6:cc:5c:b8:98:6c:1a:
85:31:05:79:6d:b4:d4:d0:96:5d:88:fa:2c:78:ad:
11:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:55:84:F2:8E:97:A1:55:8E:69:9F:3C:3D:D6:64:5B:4E:9D:00:A4
X509v3 Authority Key Identifier:
keyid:0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:f2:2c:25:36:12:8e:6c:28:d6:2e:33:c9:55:c3:55:0c:ef:
36:6b:53:ed:19:d3:88:11:f1:c2:0f:db:dc:f9:9e:94:f1:6a:
61:82:12:cc:30:86:e5:a7:5a:59:a2:0a:08:31:da:33:5f:40:
f4:43:e0:b8:7c:e7:08:ea:ac:ac:93:34:b6:51:42:e4:a5:9e:
13:14:6a:f9:bd:f6:75:b7:83:e8:29:b9:ed:81:e4:9b:80:81:
72:69:0f:68:02:77:35:5b:f7:a0:61:5b:0e:98:d8:d2:5e:2d:
4f:eb:98:74:b4:1e:12:2c:f4:94:28:27:a0:08:d3:1d:dd:31:
82:c8:09:d7:9c:34:5a:26:7c:d4:7d:55:e9:19:e1:3d:72:71:
e0:92:11:e3:83:50:15:bb:ea:2f:ba:1a:96:cf:9b:8f:48:f2:
f6:87:bc:37:97:cd:3f:68:7a:21:42:4c:7f:d4:a8:f2:88:f5:
88:28:2c:17:92:a4:32:01:44:81:58:c5:f0:10:5b:1d:45:e5:
99:02:4d:f8:4f:95:3d:04:4c:38:65:ed:33:b8:ec:32:39:f0:
1d:c1:12:82:0b:cf:07:9c:a7:94:a1:29:3b:aa:da:37:dc:90:
88:90:9c:2b:c2:ee:ab:51:87:38:16:f2:e6:9e:6d:4d:02:fb:
b6:20:41:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 07:56:28 2026 by rpki-client