Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
File: DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft (raw, json)
Hash identifier: Eotz2mvJ0z4A0FYC1YWjdPDwv8Lo69Z8xODaqjjT9GI=
Subject key identifier: 53:6C:4E:6F:AD:77:4D:D0:E6:21:3A:52:E6:D3:B9:01:2B:52:4B:03
Authority key identifier: 0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
Certificate issuer: /CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Certificate serial: 019E2FCDDD5467507056879A408665AA2CB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
Manifest number: 0F1A
Signing time: Sat 16 May 2026 08:01:21 +0000
Manifest this update: Sat 16 May 2026 08:01:21 +0000
Manifest next update: Sun 17 May 2026 08:01:21 +0000
Files and hashes: 1: BCXtQModd3nAhdeMkRMBuZx_cZc.roa (hash: jtOOBxUO8skySjopVxcruyx6WiDS/7xnyuAQI3lDFqk=)
2: DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl (hash: DlASca87xIYH7x70AUvkAIfHvRgMRlnACPuOdSVQpOk=)
3: L9a6XlmixBDgTngX3OesnHMjCvQ.roa (hash: yfr3OyuPpoSecdibTgJg+ch8pCeShfs+7iwZpZSIKv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 08:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:cd:dd:54:67:50:70:56:87:9a:40:86:65:aa:2c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Validity
Not Before: May 16 08:01:21 2026 GMT
Not After : May 17 08:01:21 2026 GMT
Subject: CN=536c4e6fad774dd0e6213a52e6d3b9012b524b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cf:61:1d:9d:1b:a4:0f:49:60:40:b0:93:3e:
c1:d0:9e:43:5b:4f:8c:72:d7:4e:27:98:e7:79:d7:
c0:87:4a:7f:1f:00:2f:17:c2:67:cd:73:2b:4a:72:
b4:d7:bf:c6:0d:c6:b3:57:e3:af:f7:11:ac:5e:c3:
43:ee:fa:d9:a7:17:cf:b5:3b:7d:de:81:a5:98:c4:
cc:15:72:19:a5:fd:3b:16:97:65:4c:78:b5:f8:fb:
7a:eb:0a:06:e0:0d:d9:40:73:c9:40:21:0e:e4:c9:
91:c8:f4:80:b1:b6:ba:e7:d2:7a:da:bf:c2:f9:6a:
84:19:6c:a4:92:55:cb:62:0b:35:fc:b5:6c:d6:1a:
76:ea:93:a9:a9:72:3e:58:0d:86:a8:87:20:66:c6:
98:b7:90:6d:99:4a:c2:b5:d9:ef:fe:df:39:7d:ec:
94:7e:59:b9:7b:68:86:9e:e4:ff:21:c5:63:0e:c5:
c2:06:f6:ea:46:c0:ad:cb:59:67:77:97:cf:0f:55:
b5:ae:6e:91:e4:0c:86:c1:00:04:33:c0:21:c2:81:
f3:14:c8:0f:80:98:b1:5a:45:18:75:bd:8c:28:fa:
65:e1:95:65:74:db:f4:52:ea:98:77:f1:6a:64:12:
c9:36:e8:45:ff:36:62:dc:c4:aa:7f:04:01:6e:1b:
be:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6C:4E:6F:AD:77:4D:D0:E6:21:3A:52:E6:D3:B9:01:2B:52:4B:03
X509v3 Authority Key Identifier:
keyid:0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:3a:f8:37:8e:05:9d:a2:37:1d:89:74:d4:9e:8b:86:d0:35:
28:93:12:b4:e2:f8:8c:73:80:5d:3c:4e:aa:77:c3:f3:d5:7a:
50:d1:4c:0a:a4:c7:f0:f9:cc:2f:2a:86:94:35:e0:44:da:e2:
4e:07:4f:8d:69:2b:e8:79:2c:88:5e:67:e7:33:0d:8b:b2:56:
f5:7d:1f:db:54:8b:15:89:a2:35:ee:be:eb:02:39:37:34:5c:
a9:ed:39:fd:70:9f:e5:91:58:40:13:1b:ba:ce:76:73:96:8d:
b8:81:66:6a:20:b3:c8:55:cb:cc:06:88:e9:19:78:b0:3c:a5:
dc:20:26:59:d5:c8:53:6a:71:fc:8a:ae:9f:4a:57:44:40:df:
6d:e5:7f:ec:d8:f4:14:65:49:e8:44:a1:57:93:77:5c:a9:c3:
73:7e:6a:0c:a4:18:52:d2:07:0f:02:d2:ac:93:0a:ad:75:ae:
ec:1e:35:00:61:99:b0:13:c1:30:b8:06:9c:7d:c3:84:3e:e4:
e9:b5:9e:21:9f:c3:80:b9:c0:5f:e4:e5:a6:1c:b7:5c:2f:61:
fa:b1:0f:fe:d8:05:24:fb:75:f6:52:e0:25:f0:da:e5:af:d6:
70:89:f0:40:31:16:36:b2:cc:ac:2f:02:93:44:5b:53:c9:2d:
f0:41:2c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:27:14 2026 by rpki-client