Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
File: Dp842O8xOufFpwiU9m6HGjMYA_8.mft (raw, json)
Hash identifier: pkr1AoMsDBJL+3nI1bXLaFJtry2G6kRVHKovCb0pnvs=
Subject key identifier: 26:A5:F1:64:CA:08:9D:A6:A4:36:E4:70:95:F5:55:7C:05:AD:DE:DC
Authority key identifier: 0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF
Certificate issuer: /CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff
Certificate serial: 019E2F97698652D612A3B3B631A16E495575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
Manifest number: 190C
Signing time: Sat 16 May 2026 07:01:52 +0000
Manifest this update: Sat 16 May 2026 07:01:52 +0000
Manifest next update: Sun 17 May 2026 07:01:52 +0000
Files and hashes: 1: Dp842O8xOufFpwiU9m6HGjMYA_8.crl (hash: Jp9IPEHSSFtNx86Y3gcAevea3DmspIZZEP8SZzXA6KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:97:69:86:52:d6:12:a3:b3:b6:31:a1:6e:49:55:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff
Validity
Not Before: May 16 07:01:52 2026 GMT
Not After : May 17 07:01:52 2026 GMT
Subject: CN=26a5f164ca089da6a436e47095f5557c05addedc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:20:59:d4:b2:66:80:f7:29:0b:01:6b:99:5f:
18:a2:df:88:e1:0d:87:74:3b:b0:7d:d3:87:5a:f4:
8a:50:38:35:2c:6e:54:4b:12:37:4c:f1:d7:6c:f8:
14:20:2a:e7:16:06:f0:a4:d0:16:e9:b9:57:66:1b:
09:36:3b:c0:5b:3f:cf:b5:92:c9:46:49:ec:11:9c:
49:f0:d4:6e:8a:45:54:fc:6a:46:ce:40:f0:da:78:
19:73:47:80:36:80:74:48:0b:30:b0:ab:9c:f3:5c:
8a:b9:2a:eb:74:ab:a4:10:e8:0b:cf:ab:51:db:92:
01:b1:a6:93:8c:b4:15:c3:d0:29:f5:43:fd:aa:e0:
fb:37:6b:31:84:85:7f:ad:e3:49:2c:7f:f0:70:f6:
d7:cd:77:34:c8:10:6d:7d:96:cb:b8:1b:35:62:12:
98:14:54:e3:64:32:8c:ac:cb:97:d9:fc:b1:43:bd:
b3:2b:77:61:4b:25:32:93:d3:7c:55:f7:ae:17:0e:
aa:dd:36:39:b6:4b:cb:10:62:ca:81:67:c1:21:f8:
52:f9:4d:49:08:d6:fa:4e:a3:ae:e4:c4:34:ba:94:
88:d3:75:81:a7:b2:bc:e0:55:34:a9:1f:cc:aa:ce:
63:3f:06:83:fa:4d:a1:f2:40:76:f3:a2:07:59:90:
fb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A5:F1:64:CA:08:9D:A6:A4:36:E4:70:95:F5:55:7C:05:AD:DE:DC
X509v3 Authority Key Identifier:
keyid:0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:3a:a1:16:b7:6a:06:5a:c4:de:3f:c2:a2:ab:32:e2:d0:f0:
e5:a9:d9:b3:4b:49:b8:a3:f3:c8:8f:8c:60:63:80:50:ae:ed:
f9:59:63:98:e4:77:4a:87:ce:2a:a0:33:e5:df:17:8b:1b:7d:
64:ca:2b:a2:e7:89:86:98:ba:55:c4:3f:f8:7b:2c:24:73:1c:
e8:f7:f5:17:6d:0d:55:4b:1c:46:88:72:60:e5:65:fe:29:d3:
62:da:19:03:e5:21:0e:5b:8a:71:24:35:24:6f:d2:99:59:ca:
e7:50:e7:5e:ca:c7:91:10:37:d6:5b:43:44:d1:62:a6:52:54:
e7:1d:9a:e8:93:71:57:06:79:74:be:3c:44:48:a3:26:2c:14:
35:e3:f3:7e:58:fa:a8:4f:f2:ab:aa:54:a6:0b:05:6b:c0:28:
97:5e:dc:1b:5a:ec:e5:40:5b:d3:a6:b2:a9:ad:ad:e3:ee:5c:
ac:b5:49:5f:a7:ac:11:e8:c5:3b:f5:be:4e:21:a6:1b:d3:83:
73:67:11:6a:fe:a8:53:40:2b:24:64:f1:d1:0c:6b:77:1c:81:
0e:02:f8:43:7a:09:79:78:2f:21:0c:ce:53:41:ec:27:08:2b:
42:70:3d:1e:21:f9:4a:f8:dc:4d:9e:af:7f:14:08:1b:db:21:
7c:5e:9d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:58 2026 by rpki-client