Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/430f08-6332-4dc6-9f2c-20d42e49313e/1/DIXrpeHV0Efz2lfeYnX968At-5g.mft
File: DIXrpeHV0Efz2lfeYnX968At-5g.mft (raw, json)
Hash identifier: JejRD4jsZZYs4sH8Rodq42GDovyzXJq4WdLpw+JqkdA=
Subject key identifier: 5F:91:46:53:8A:0D:68:42:3E:8E:98:55:8B:70:8C:29:9D:BA:DF:D7
Authority key identifier: 0C:85:EB:A5:E1:D5:D0:47:F3:DA:57:DE:62:75:FD:EB:C0:2D:FB:98
Certificate issuer: /CN=0c85eba5e1d5d047f3da57de6275fdebc02dfb98
Certificate serial: 019E91A6029E644D9CF0AD7776E0CE54DC96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIXrpeHV0Efz2lfeYnX968At-5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/430f08-6332-4dc6-9f2c-20d42e49313e/1/DIXrpeHV0Efz2lfeYnX968At-5g.mft
Manifest number: 24
Signing time: Thu 04 Jun 2026 08:00:36 +0000
Manifest this update: Thu 04 Jun 2026 08:00:36 +0000
Manifest next update: Fri 05 Jun 2026 08:00:36 +0000
Files and hashes: 1: DIXrpeHV0Efz2lfeYnX968At-5g.crl (hash: XRUcn7SSpTSrusGX3sNKzngswjLZ6Aj/aCHgMm0uf+I=)
2: lpqlGRFXfBrwzMCV2i6J485j0f4.asa (hash: Fbe8bPedsE7NpHwyHD04dX7lQgH8irN49u1YRKAiP8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/430f08-6332-4dc6-9f2c-20d42e49313e/1/DIXrpeHV0Efz2lfeYnX968At-5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/430f08-6332-4dc6-9f2c-20d42e49313e/1/DIXrpeHV0Efz2lfeYnX968At-5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIXrpeHV0Efz2lfeYnX968At-5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:a6:02:9e:64:4d:9c:f0:ad:77:76:e0:ce:54:dc:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c85eba5e1d5d047f3da57de6275fdebc02dfb98
Validity
Not Before: Jun 4 08:00:36 2026 GMT
Not After : Jun 5 08:00:36 2026 GMT
Subject: CN=5f9146538a0d68423e8e98558b708c299dbadfd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ca:fa:98:0c:c8:10:66:9c:67:4f:d8:17:c8:
88:b2:a6:b1:8f:76:94:32:b8:4d:2f:9c:d6:b1:ed:
f8:70:db:ae:4e:4f:26:ae:68:60:d0:2c:86:9f:ed:
7a:a1:df:85:cd:59:90:25:16:4c:4a:6f:09:0a:01:
1f:b8:4b:02:f9:54:6e:40:b2:e8:e8:50:98:25:2d:
eb:20:10:fb:1b:c5:55:fd:dd:3e:d6:28:fa:8b:26:
ec:97:78:99:b2:92:59:4e:90:fa:21:31:8d:98:3a:
53:49:2b:59:7f:3e:16:ee:de:87:bb:aa:ae:29:16:
c8:d7:c2:28:92:f5:ce:11:ff:8d:87:50:d3:91:a5:
3c:da:83:70:99:9b:29:06:a4:16:d6:16:7b:23:af:
59:55:b2:4b:85:4e:4a:45:18:78:92:db:8a:e2:23:
91:b1:58:bb:24:06:22:5e:ac:32:e9:9c:f4:3a:04:
39:a1:eb:21:d0:26:37:79:ad:13:60:a4:25:5d:12:
85:e4:74:d1:91:48:d6:58:52:cd:71:49:09:d2:d0:
e5:23:1e:21:25:d4:41:6c:be:ae:1d:ea:cc:cb:91:
63:f7:0d:f6:9d:18:90:7a:5e:71:0b:85:05:53:75:
09:ff:fb:4d:18:80:f2:68:53:96:d8:44:16:ab:87:
98:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:91:46:53:8A:0D:68:42:3E:8E:98:55:8B:70:8C:29:9D:BA:DF:D7
X509v3 Authority Key Identifier:
keyid:0C:85:EB:A5:E1:D5:D0:47:F3:DA:57:DE:62:75:FD:EB:C0:2D:FB:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIXrpeHV0Efz2lfeYnX968At-5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/430f08-6332-4dc6-9f2c-20d42e49313e/1/DIXrpeHV0Efz2lfeYnX968At-5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/430f08-6332-4dc6-9f2c-20d42e49313e/1/DIXrpeHV0Efz2lfeYnX968At-5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:7e:46:ef:c1:77:ab:8e:8e:24:69:e0:57:bb:36:32:14:c7:
3f:76:49:f7:c9:3a:33:c7:22:3c:66:9b:c1:18:cf:51:04:b9:
25:f4:5e:3a:8f:66:d3:f7:db:e7:54:dd:23:10:2a:5e:4f:5d:
5f:ee:3d:a8:be:9b:ed:fd:6f:cf:04:02:a2:18:48:e1:f1:b5:
9b:67:e1:b1:f9:16:87:d6:d9:f0:24:4f:e3:d0:8f:bf:41:69:
72:5e:d3:58:6b:3b:8a:6b:94:ff:a3:d8:82:fc:7c:5c:5c:d1:
a4:1f:2e:75:86:fa:37:6c:79:3a:29:2e:71:fc:9a:6a:41:cf:
a8:c8:95:88:5a:d7:d8:11:b5:a0:ac:ad:25:72:75:8e:ab:ad:
49:18:1f:99:43:a9:08:7c:74:13:40:50:59:82:9d:9f:a1:ad:
16:34:8e:ac:de:54:22:51:e0:06:3e:7e:7a:91:35:02:6d:1e:
ba:2d:cd:d2:8c:fb:6e:d5:46:4f:50:ff:ac:8a:9b:c6:92:d8:
c5:ed:8d:4d:34:3c:ef:43:30:cd:7c:4c:92:ef:fb:33:b2:5a:
e3:71:f5:ce:20:ac:88:07:9e:71:9a:9f:d1:f6:8c:76:44:f8:
f9:37:e8:a9:2f:b5:54:5f:73:80:66:41:f6:13:ad:15:2b:6b:
37:db:e1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 17:07:47 2026 by rpki-client