Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
File: De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft (raw, json)
Hash identifier: NRSGh+gzjTh48Jsa4RMq/7Ie9s/t232lPauZFBLhn04=
Subject key identifier: 8A:A2:BD:2C:3A:CA:74:69:FA:DB:2B:B7:11:B5:A7:6F:DE:3B:78:A5
Authority key identifier: 0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4
Certificate issuer: /CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4
Certificate serial: 019E3185781FC707936C85CEE7103EF3F6FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
Manifest number: 0CFE
Signing time: Sat 16 May 2026 16:01:30 +0000
Manifest this update: Sat 16 May 2026 16:01:30 +0000
Manifest next update: Sun 17 May 2026 16:01:30 +0000
Files and hashes: 1: De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl (hash: TBaZ6PQerevl7KaFZA3hvkmb3GgbIQkIRH8UOkS/qKo=)
2: SbbT_vemLYhSpPxloUrfpgEATIA.roa (hash: TxqN78AgB7Nz/Wz8KEGfJojT7Yd8MRSlYTLQkCNBIXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:85:78:1f:c7:07:93:6c:85:ce:e7:10:3e:f3:f6:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4
Validity
Not Before: May 16 16:01:30 2026 GMT
Not After : May 17 16:01:30 2026 GMT
Subject: CN=8aa2bd2c3aca7469fadb2bb711b5a76fde3b78a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0f:aa:aa:49:4d:e1:93:7f:c7:a0:b5:ae:41:
c1:12:3e:9b:0a:95:89:61:33:7c:39:72:4c:07:f3:
97:ce:70:6e:e8:fc:b5:ab:01:b8:8e:77:aa:0b:96:
d0:16:be:26:a4:5c:06:28:85:d5:c9:10:5e:4a:51:
d2:b6:ee:9f:82:81:8b:91:26:4a:8b:6c:71:17:c0:
d7:f0:86:1b:2d:70:bc:89:c1:e1:f9:63:fa:ce:4d:
62:e8:de:78:c8:b4:b1:b9:91:a2:ab:89:20:18:51:
1c:34:7b:02:7f:37:b7:1c:7d:09:9c:01:c1:47:de:
bf:62:e1:92:75:67:ed:34:eb:67:f8:73:b7:8d:24:
8c:16:28:71:80:24:b8:62:1e:9b:9e:08:1a:14:9c:
a5:da:2e:18:91:e7:a0:de:8a:91:e5:9f:4e:8e:7a:
60:51:34:42:af:71:52:68:ee:28:15:7d:8a:9a:4e:
43:44:43:5f:b0:ea:ca:76:8c:8b:1d:6e:9e:a7:7f:
c5:e0:fb:54:5c:05:36:0c:aa:5a:d3:cd:a2:03:cb:
8e:44:9d:19:f2:73:ee:97:79:f6:3d:44:2a:60:88:
84:fa:25:44:72:57:2f:37:76:a9:89:38:98:d2:9f:
bb:30:46:fc:4f:9c:94:d7:97:53:7b:43:91:81:13:
8c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A2:BD:2C:3A:CA:74:69:FA:DB:2B:B7:11:B5:A7:6F:DE:3B:78:A5
X509v3 Authority Key Identifier:
keyid:0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:06:cb:ec:d6:a0:95:77:02:34:47:24:f5:53:20:ad:29:08:
88:e4:e0:82:8e:a6:95:7b:38:8a:20:2d:e4:84:45:7c:cd:97:
b5:f5:6d:93:08:7c:67:06:c2:d4:6e:df:a5:c9:26:8a:a3:91:
af:76:08:68:46:f9:ab:a6:4f:b6:f9:34:fe:78:18:7c:3c:8c:
d4:d2:2d:ec:45:c3:8f:9a:19:00:3d:7f:23:94:a7:fa:61:96:
e4:88:e2:37:5a:84:35:78:7b:a0:90:d5:e3:56:32:94:bd:bc:
5e:92:86:9d:c9:8d:18:6c:15:bd:f3:f0:9a:24:38:96:b1:56:
e7:61:1a:0c:76:31:c8:4a:3b:e9:aa:81:a8:82:03:e7:71:8c:
de:34:9a:a2:71:2f:e2:ef:60:f0:0d:9f:b4:a5:8f:8a:25:bc:
96:14:39:08:e3:7b:5f:17:c2:89:0e:12:ca:74:b1:6e:45:a1:
8d:31:49:8c:f8:0f:c5:ce:a8:5f:23:fe:91:c1:52:84:a4:6a:
ce:4c:5f:b2:71:68:f7:88:e7:e8:56:6b:91:87:dc:c8:7f:c3:
39:d8:a8:50:0a:1b:67:e5:9f:21:ae:d6:7c:1f:98:33:8a:25:
3a:72:e9:b7:24:40:b7:de:ec:18:5f:b5:42:66:b7:5f:31:de:
6c:51:0a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:32:20 2026 by rpki-client