Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
File: Di1CDmYchlcQif8LUZZahuDXvHU.mft (raw, json)
Hash identifier: jQC8lWTsGGeHi7HMT8siFV3Fo8L2yScnGQP7WyvdX08=
Subject key identifier: 77:CB:E7:9A:B2:AF:41:24:5E:BD:1C:B3:BC:7F:28:FE:61:69:96:B7
Authority key identifier: 0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
Certificate issuer: /CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Certificate serial: 019E30A9474825F4AD93EB8D9C90BA7A8268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
Manifest number: 1910
Signing time: Sat 16 May 2026 12:01:00 +0000
Manifest this update: Sat 16 May 2026 12:01:00 +0000
Manifest next update: Sun 17 May 2026 12:01:00 +0000
Files and hashes: 1: Di1CDmYchlcQif8LUZZahuDXvHU.crl (hash: V6dGX6fkPuGf9eoh/9VUpl+xlhl5KJs9Fylx0+iustM=)
2: qB9Z-zHdmjEFSIG2vfJGfIMdpA0.roa (hash: MxW4mBfsVBC2g/oHLcgSIPQNdBtdZMBf3Vv3p/+UNxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:47:48:25:f4:ad:93:eb:8d:9c:90:ba:7a:82:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Validity
Not Before: May 16 12:01:00 2026 GMT
Not After : May 17 12:01:00 2026 GMT
Subject: CN=77cbe79ab2af41245ebd1cb3bc7f28fe616996b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:48:26:48:7d:82:8a:8a:fd:0f:c3:c4:be:56:
d0:45:9b:80:27:b7:cd:f9:fd:8d:58:46:52:36:ba:
1e:2b:fa:92:bf:00:83:38:2d:eb:65:0f:df:b6:5e:
b1:d5:37:3e:87:c4:99:9d:d6:9c:76:15:97:ab:12:
b0:ff:bf:8d:2e:8e:3f:0a:9b:ea:21:94:0d:92:0c:
ac:03:01:b9:5e:66:03:fd:70:f5:bc:25:e9:bd:a5:
27:87:e7:6d:d8:b3:27:69:a7:07:77:ee:f8:52:7e:
3e:16:30:2f:2a:fd:d3:61:3f:b2:1d:6a:04:80:fc:
5e:6e:c1:14:c0:3a:70:2b:8d:32:88:b0:2e:02:78:
64:f0:98:e4:b7:03:83:fd:6e:1c:5b:9c:ab:e4:28:
62:47:be:3a:b9:86:8a:00:fc:76:d9:23:93:51:02:
44:1d:aa:fb:0d:7a:42:5e:fd:28:2b:77:0b:59:89:
60:c9:d9:b0:50:50:b0:19:03:55:62:a8:3a:6d:1f:
6f:03:90:98:3f:89:58:05:80:10:8d:a5:fc:c0:f7:
e3:a5:6c:57:83:d8:34:41:46:2c:56:a8:f4:a9:0e:
dd:fe:0c:be:5b:e5:22:7c:df:77:d0:aa:40:06:1b:
72:82:98:13:98:29:41:36:cd:5a:8f:83:d5:96:9b:
2c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CB:E7:9A:B2:AF:41:24:5E:BD:1C:B3:BC:7F:28:FE:61:69:96:B7
X509v3 Authority Key Identifier:
keyid:0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c5:3e:50:19:b2:55:86:01:0f:9e:98:20:30:c9:9a:55:57:
4b:71:9e:2f:9c:5b:4e:33:db:7d:01:31:03:86:eb:4f:85:e1:
21:06:1a:dd:56:49:25:5a:9e:c8:d6:72:83:99:56:55:35:d3:
8b:6d:0f:d5:48:74:39:4b:68:ad:19:82:8a:10:aa:5e:c1:77:
9b:7f:0f:b8:e6:cc:22:99:4f:ed:34:fb:17:60:91:2a:fd:e0:
c6:42:cb:2e:0a:eb:02:49:c7:15:ea:b0:7b:78:7f:70:2e:32:
67:7a:cf:63:77:02:44:4c:6d:c6:e9:bd:a9:04:96:dc:26:64:
e6:1f:b4:e6:5b:52:bf:98:a3:d5:69:cc:0b:f4:eb:63:71:ac:
d4:d9:77:3a:fc:9b:17:69:f9:f7:0c:ab:00:d9:34:86:6d:b8:
73:82:3c:88:e8:1b:fd:6a:59:23:d3:8d:81:10:7f:7e:41:37:
c5:2a:1f:5c:48:30:16:e0:d3:ca:38:b5:63:f7:d3:58:0b:ee:
d1:9f:c9:ff:dd:df:2e:a5:28:27:ae:2b:e8:c9:c7:87:66:f4:
44:09:02:0b:4f:fc:76:75:ff:54:93:f6:7f:10:c6:f5:8e:3b:
12:c6:fd:7c:93:4e:43:1b:4e:d3:57:60:53:65:a6:a1:c5:2e:
51:50:e8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:17 2026 by rpki-client