Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
File: DX08coAiI1d4gNOPBIyBiRImQDs.mft (raw, json)
Hash identifier: hWs0Dus2mHO9OaJzo/xRuPAwziZ/VI/o5X3J0TFJ0nQ=
Subject key identifier: 88:AF:18:18:1A:0C:73:91:3C:22:22:5B:28:51:09:BA:D0:C6:06:B8
Authority key identifier: 0D:7D:3C:72:80:22:23:57:78:80:D3:8F:04:8C:81:89:12:26:40:3B
Certificate issuer: /CN=0d7d3c72802223577880d38f048c81891226403b
Certificate serial: 019E30A94BA0DE6E2A5FE3B9C42FB45D420B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
Manifest number: 0D71
Signing time: Sat 16 May 2026 12:01:01 +0000
Manifest this update: Sat 16 May 2026 12:01:01 +0000
Manifest next update: Sun 17 May 2026 12:01:01 +0000
Files and hashes: 1: DX08coAiI1d4gNOPBIyBiRImQDs.crl (hash: 3+b2DyKSvPXnKUhOKb0XsnnUfeFoBdqiOmwqy+MPAbU=)
2: rmlQHSPR8QbJ4-lSxSii48UeNZs.roa (hash: xz18D6VTlXYgx+ypy0VFWQBhdsBWNVKOCFQd2upOGqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:4b:a0:de:6e:2a:5f:e3:b9:c4:2f:b4:5d:42:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7d3c72802223577880d38f048c81891226403b
Validity
Not Before: May 16 12:01:01 2026 GMT
Not After : May 17 12:01:01 2026 GMT
Subject: CN=88af18181a0c73913c22225b285109bad0c606b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:74:5a:b6:22:a3:53:61:78:e9:9c:c1:aa:f8:
02:c4:40:68:3c:c4:53:f8:cb:39:a0:5b:f1:e6:86:
01:a8:07:c7:85:06:73:17:f7:26:b7:96:3e:b1:33:
16:23:f0:e5:ce:c3:08:4b:29:cc:8a:6c:d4:d1:4f:
74:09:bd:de:88:d2:05:53:d6:54:76:07:aa:2b:ac:
3b:fa:8c:e0:76:f8:a8:1f:60:73:5c:78:ca:fb:96:
95:0f:c1:5c:81:e2:e5:e0:b2:d3:d1:14:8f:f2:19:
7e:08:e3:6b:99:7b:f5:ea:bd:bc:a3:fe:47:56:26:
66:57:f8:1b:93:0a:d7:15:05:0c:52:98:f4:e2:3d:
e0:79:14:10:c9:47:e5:a0:7e:46:21:8b:28:ab:49:
88:64:ee:c9:f1:48:0a:e8:06:4f:20:b1:6a:9c:11:
0b:6e:34:48:33:59:4b:96:4d:f9:cd:80:cb:ee:a3:
0a:b4:8e:20:10:45:57:9a:0c:bb:54:d9:a3:58:ca:
b2:0c:90:72:0c:96:37:51:b6:64:84:b0:e6:f4:d5:
2a:26:d0:02:20:00:b2:3e:1e:e2:b0:9d:69:5a:bb:
50:98:4d:55:15:cc:89:91:dd:9e:9f:44:52:d3:ae:
26:65:90:f9:3b:f3:0c:b8:b4:bb:6f:c5:65:e8:3d:
26:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:AF:18:18:1A:0C:73:91:3C:22:22:5B:28:51:09:BA:D0:C6:06:B8
X509v3 Authority Key Identifier:
keyid:0D:7D:3C:72:80:22:23:57:78:80:D3:8F:04:8C:81:89:12:26:40:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:c6:a7:76:a5:f7:01:31:93:7e:d2:96:c8:58:dc:ca:33:f8:
2a:02:c9:5f:70:da:f4:62:e4:b7:cf:28:61:d2:59:a0:2c:77:
81:f3:ab:91:0b:15:94:23:ed:49:17:1a:45:eb:c3:e7:d0:88:
ea:0c:6f:68:a7:cc:a4:1a:a8:c7:b2:b8:c4:39:02:81:bd:73:
72:f2:75:ca:fe:28:53:20:0f:22:65:41:84:33:f2:c0:23:e5:
ed:81:01:d8:c5:ec:f3:87:73:05:00:11:f1:d7:12:c3:c5:a9:
c6:a3:73:63:12:ae:8b:94:1f:81:ed:3c:18:48:ee:e0:9c:d6:
4f:70:8d:ae:79:66:3f:4d:a7:ab:28:17:45:c6:f8:fc:89:cb:
8c:29:e8:06:7f:8e:22:b4:a6:72:c4:09:36:84:1a:9e:9c:e6:
5c:d4:ad:e7:27:9f:a5:1d:c8:a9:ca:ec:47:0d:12:fb:89:4b:
66:7d:33:f9:69:9a:be:b4:57:78:1e:2f:31:98:bc:33:f7:ce:
78:b2:a3:2f:2e:68:2a:e6:4b:71:5c:49:2f:60:ec:eb:92:47:
a8:41:2a:0e:78:f8:f7:ed:e2:f0:c3:d3:3b:1c:d9:fd:b5:2c:
e2:9e:64:d0:20:37:ef:9a:8e:ed:70:ae:a9:2f:29:2b:ee:04:
9e:51:7f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:55:08 2026 by rpki-client