Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
File: DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft (raw, json)
Hash identifier: LcJmMQgLFCs3Ekeztr5rKWwhvqtDz9W43hL2JjRJydw=
Subject key identifier: FF:6B:A5:2F:C0:74:A9:84:01:10:EF:C1:3A:A4:A8:CA:93:F8:C4:99
Authority key identifier: 0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC
Certificate issuer: /CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
Certificate serial: 019E20FF50E556C1D3CA095E03E89A16D82B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
Manifest number: 1907
Signing time: Wed 13 May 2026 11:01:03 +0000
Manifest this update: Wed 13 May 2026 11:01:03 +0000
Manifest next update: Thu 14 May 2026 11:01:03 +0000
Files and hashes: 1: DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl (hash: NkOIsRfNd3WOYjXELFamlXoK3N/KKWHV3ZMAqCAuL60=)
2: X2dW8Ddau0oR-gekYObrhkFfF_g.roa (hash: CXklzZ2YRKZLcPWGGWuQjQMp/BVjdo/rLeJlfyEGzHE=)
3: vEA8ukjZ43YZlzw8CBVOqmyggo8.roa (hash: tuYAox2HkNBn4tSAkZLkz/3INYGpptZYZBvxGb9Ksys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:50:e5:56:c1:d3:ca:09:5e:03:e8:9a:16:d8:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
Validity
Not Before: May 13 11:01:03 2026 GMT
Not After : May 14 11:01:03 2026 GMT
Subject: CN=ff6ba52fc074a9840110efc13aa4a8ca93f8c499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:06:cf:9d:e9:34:16:bf:ae:a2:dd:eb:23:7d:
c2:29:6a:d4:74:60:17:88:4c:c5:41:77:17:12:74:
84:0c:e4:17:c4:ab:6a:c4:61:d7:05:08:33:dc:31:
57:70:fb:76:2d:2d:a1:84:6e:8d:a4:2e:c4:8c:17:
a6:66:f7:9a:82:d7:bd:70:60:fc:9c:6a:ab:c8:85:
da:70:cc:66:07:f6:f2:3f:75:6e:5f:e8:32:e7:13:
ab:2b:c9:89:f1:39:41:6a:23:c7:65:be:d2:c9:0d:
27:43:95:09:23:86:6a:81:1f:77:78:ac:b0:03:79:
e9:18:5e:b5:4f:8d:59:2d:d4:f0:9c:f3:bf:dc:27:
16:a6:84:4f:eb:c3:a1:30:1b:ed:e7:a0:95:c7:dc:
4e:bb:a2:c8:93:43:99:ed:3c:73:79:23:04:70:c1:
80:da:51:a5:12:58:e5:f2:b6:7b:a5:ee:dc:be:ce:
7e:cd:dc:1e:1d:af:5e:75:fe:3e:fd:47:18:0f:f1:
05:3e:d4:b0:eb:17:55:41:10:d5:04:cf:b6:13:cb:
df:61:c8:82:5b:0a:b5:8d:92:c0:f9:f2:c1:97:51:
07:13:36:d2:13:bd:48:47:0f:d0:3b:f0:50:8d:72:
36:d1:20:1f:b8:0c:c2:f6:05:f9:95:a4:2f:b8:46:
6b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6B:A5:2F:C0:74:A9:84:01:10:EF:C1:3A:A4:A8:CA:93:F8:C4:99
X509v3 Authority Key Identifier:
keyid:0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:85:8b:cf:a3:0c:f6:90:b3:97:eb:5e:ad:87:ac:27:aa:d0:
f1:d7:01:20:a1:f8:73:c9:7a:a8:80:e3:56:98:8c:4a:fb:52:
9c:43:f5:40:58:77:bf:c8:84:ca:da:41:a1:e7:13:86:a3:8d:
35:c2:98:75:4e:8e:fd:33:79:7e:bd:ed:e7:7d:fe:49:88:73:
9a:39:eb:38:ca:8b:a9:0d:3a:f1:92:e0:cf:ed:79:c8:1f:b8:
96:fd:aa:75:db:b7:93:77:71:9b:10:fd:b8:42:eb:d2:d7:22:
35:7b:8e:59:79:fd:f4:9c:53:3e:97:a4:23:62:40:57:3e:7f:
cf:82:14:28:19:6a:b1:41:0d:d7:39:dd:7a:d5:5b:8d:60:3e:
5f:fd:68:f7:4b:3d:2f:20:5c:16:22:6b:7c:fa:b6:49:cf:00:
56:10:70:cf:58:03:bc:d6:72:c8:57:c3:ff:24:a9:27:57:52:
ec:13:22:86:0c:70:3b:22:5f:40:e4:b5:8c:75:93:3d:6b:fe:
67:70:15:cd:92:43:e1:7a:31:a2:33:2c:8b:1e:62:b3:83:ac:
c8:7c:08:d1:4a:3e:44:9c:ee:83:e7:6e:5d:5c:eb:c6:a8:d9:
a1:4a:39:99:bc:b9:c6:48:81:ae:6c:5c:36:45:55:11:95:22:
65:89:98:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:08:26 2026 by rpki-client