Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
File: DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft (raw, json)
Hash identifier: N6j+g1HId2JrUeDXCKbd+C4p3D5m9+u9e/HnwD9ygQ0=
Subject key identifier: 51:2F:41:D4:3C:75:9A:8D:14:5D:6E:9D:DF:62:96:32:57:77:06:ED
Authority key identifier: 0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
Certificate issuer: /CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Certificate serial: 019E2A70B04A6645D5B91C697F5CAAFCD23E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
Manifest number: 17FE
Signing time: Fri 15 May 2026 07:01:28 +0000
Manifest this update: Fri 15 May 2026 07:01:28 +0000
Manifest next update: Sat 16 May 2026 07:01:28 +0000
Files and hashes: 1: 2lfnmN1-dLZH09vmQWL0x_KLc8Y.roa (hash: JmmqwM4dV5ZCDyqAq/Au9vdb5ogccNfE+4IrV1SqD54=)
2: DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl (hash: avR7riQ3JPw6N5TDqQNcAPuPv9BUX9Tu0SdgB4LxYM0=)
3: cpBLfVVbG2Bg4TA77UzT5VjhgRE.roa (hash: N0d6jFAymHdRViLXYwxHMPIvLpjH51TdzFY5Ek5D56g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:70:b0:4a:66:45:d5:b9:1c:69:7f:5c:aa:fc:d2:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Validity
Not Before: May 15 07:01:28 2026 GMT
Not After : May 16 07:01:28 2026 GMT
Subject: CN=512f41d43c759a8d145d6e9ddf629632577706ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:08:75:95:76:30:b1:80:ea:a8:24:20:83:
08:7c:a4:0e:1d:60:0f:a7:87:3f:76:68:f8:98:2d:
12:cb:90:1f:fb:49:29:e8:3f:3a:b3:4c:8f:08:ec:
93:10:45:b6:6c:71:16:f5:ff:f1:34:0f:07:af:6b:
3f:f3:60:cb:71:42:bc:10:59:db:d7:90:05:90:30:
51:4d:0b:c6:f3:d3:f4:64:90:51:8d:53:c2:00:69:
39:74:cc:b1:0f:1a:b9:bc:3a:0d:25:67:45:00:bb:
ed:85:e3:25:93:1f:61:25:25:55:e1:7a:3f:eb:4e:
28:65:ea:78:3e:89:c8:c9:23:e5:f3:66:b7:61:48:
5c:5e:8b:4a:6c:41:ed:1d:58:3b:49:08:d4:b2:8c:
24:52:16:4b:cf:28:98:94:6d:39:81:b4:ed:94:cc:
e4:2a:8f:85:19:93:13:1d:60:2f:81:eb:8d:95:e9:
5c:a2:e0:62:ed:eb:04:a7:68:8f:c6:fc:91:65:d7:
dd:d5:b3:90:a4:44:7d:0a:46:2e:11:09:f5:99:55:
f9:b0:3b:38:a4:aa:53:79:84:7d:9c:07:81:a0:b1:
95:19:34:be:4d:a7:f2:0a:30:b1:50:95:8f:cf:e6:
3b:46:55:f8:37:f0:d6:bf:b1:ff:d9:d4:44:71:72:
ff:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2F:41:D4:3C:75:9A:8D:14:5D:6E:9D:DF:62:96:32:57:77:06:ED
X509v3 Authority Key Identifier:
keyid:0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:45:c3:b0:19:ee:c2:0a:39:77:79:77:3e:58:8a:93:24:df:
9b:ca:91:37:43:dc:57:a1:33:f7:24:aa:76:8b:c8:74:19:26:
f9:1d:f6:3a:1f:b9:e6:77:8e:48:d3:78:54:d0:1c:37:5e:5e:
0a:8e:85:98:87:c6:95:52:d8:33:69:38:dd:15:06:dc:02:03:
73:20:4b:b3:8b:7c:e4:ac:51:d2:a7:b7:28:b6:bb:b1:aa:20:
aa:d2:d5:a0:96:7a:1e:7e:98:d2:a5:a2:e2:dc:30:f7:4a:8d:
c5:a7:eb:61:2e:37:85:a5:64:c0:b6:ec:c4:e2:75:a4:ed:7e:
8f:8a:48:10:dd:1c:72:15:65:27:2e:e3:38:7d:42:b0:5d:6c:
f4:37:d0:cb:00:84:95:d1:65:32:e9:84:fe:e3:05:45:f4:c2:
bb:11:3c:ae:4d:05:01:e1:ba:c7:09:45:07:cb:d2:1a:3a:64:
5d:46:ab:ec:d7:ea:c7:7d:cf:05:c6:7e:95:79:e0:c9:0c:64:
fd:64:60:86:16:ea:50:69:1b:90:b9:e8:56:5d:b5:97:c7:37:
d1:35:ec:3c:a7:fb:fa:71:d7:7b:1a:35:88:58:ac:13:31:86:
b8:de:d6:3e:34:67:2d:32:ec:fc:b0:59:3a:b2:82:e5:cf:47:
1d:c0:d4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 14:25:17 2026 by rpki-client