Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
File: D5x3odzbju1izTyoClFE3E4kP04.mft (raw, json)
Hash identifier: FDB0eiA2+cIxO6+R1ZuDhis9Un6SNUnob5MkYl+TzeE=
Subject key identifier: 71:E8:9E:0B:C4:F0:01:2B:69:84:A4:56:58:B3:DD:F6:48:68:5D:72
Authority key identifier: 0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
Certificate issuer: /CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Certificate serial: 019E29943BE111E49C19BBFADFC2872B2FD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
Manifest number: 1917
Signing time: Fri 15 May 2026 03:00:40 +0000
Manifest this update: Fri 15 May 2026 03:00:40 +0000
Manifest next update: Sat 16 May 2026 03:00:40 +0000
Files and hashes: 1: D5x3odzbju1izTyoClFE3E4kP04.crl (hash: S/LbYIATx/eoSKqt3q0Az9dKOzzH9wUezWe63FFdTJY=)
2: Mgm2FMvEWQvAKDRyHQNdXSs8Gk8.roa (hash: YvcWkgvU2zBPk1+mekhJs/OPMV1l8zTWtIoK9RU96lk=)
3: O103OuQ4IixndGyKa3UX3V5e3WQ.roa (hash: TcKGNvz82Ie8m+YB2xFxcsRcNfeQxqqzYWZzRclot5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:94:3b:e1:11:e4:9c:19:bb:fa:df:c2:87:2b:2f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Validity
Not Before: May 15 03:00:40 2026 GMT
Not After : May 16 03:00:40 2026 GMT
Subject: CN=71e89e0bc4f0012b6984a45658b3ddf648685d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:af:d4:51:59:e0:64:3b:a1:e7:73:e5:19:ae:
ce:93:86:4a:d2:25:a8:06:ee:0d:13:f8:6c:e4:38:
36:55:e4:91:6e:34:9b:07:7e:31:83:53:1e:c9:3e:
6d:7f:b6:f4:e7:be:9b:89:30:a8:8f:02:2e:45:7a:
43:be:5a:d4:dd:77:64:96:aa:39:7a:07:a1:44:13:
01:0b:e9:2b:79:ba:47:6f:fa:94:20:85:63:74:80:
30:59:e7:40:0b:eb:2e:63:df:1f:68:e0:b1:aa:7b:
fe:73:1d:e7:32:b0:49:a2:f3:e1:7d:64:1a:9e:ff:
12:f2:eb:e0:f9:03:dd:dc:d1:5d:88:6b:83:89:73:
04:4d:0f:88:f8:61:6c:82:ed:18:e2:ae:74:7a:b0:
36:9e:4e:66:f2:87:46:4a:72:87:05:d4:4d:8b:71:
93:d9:b1:2e:91:35:82:f4:37:13:3b:10:e4:e3:53:
85:06:9f:09:bd:19:15:62:65:dd:95:38:4e:ea:41:
88:d4:87:94:f1:88:39:4a:24:84:03:bc:6a:b5:9a:
64:ff:4c:d3:1e:c9:9e:9f:76:f7:6a:83:b9:85:4c:
0d:7d:28:6a:20:39:11:d3:85:33:22:43:b2:d1:51:
61:0e:f6:0a:fe:f3:33:2c:1c:0e:23:31:54:41:d1:
c6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E8:9E:0B:C4:F0:01:2B:69:84:A4:56:58:B3:DD:F6:48:68:5D:72
X509v3 Authority Key Identifier:
keyid:0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:22:91:76:26:3f:72:32:8d:d7:d1:1d:58:c2:4a:fb:ab:bb:
39:5f:e3:23:ce:49:89:6d:47:a6:70:08:8b:8f:6d:5b:56:08:
65:d1:b5:86:be:95:73:14:23:3b:2f:23:42:d5:00:e2:f3:e9:
19:78:56:d7:f1:d2:53:fd:b8:13:92:a3:c1:bf:94:4d:4e:5c:
16:3a:1f:b7:69:b3:f5:ab:f2:83:ce:14:11:ce:c6:08:e3:c2:
d2:84:da:fc:6b:ca:61:ce:00:f6:b2:05:41:a2:48:7b:42:af:
c1:dc:4e:2f:19:07:d7:96:70:2c:f5:e6:5b:81:58:97:92:a3:
0d:f5:13:8b:d4:dc:09:23:0f:a0:3f:92:0e:92:fd:25:15:a7:
6f:c7:27:36:d6:e2:7d:31:f2:be:34:f0:e7:4f:f4:13:92:8f:
4c:02:3b:a0:d8:ee:29:30:44:b0:60:70:f0:42:ba:cd:38:5d:
02:53:87:39:e2:98:e9:f2:32:35:ff:80:c6:73:b9:e2:fc:e7:
58:ae:0e:d3:f2:13:57:bf:81:05:42:25:36:9c:69:d8:20:af:
f8:c4:0c:cd:bf:b6:b4:16:fa:6d:55:b7:53:0b:b8:ed:d9:a7:
58:06:d2:41:94:fc:52:8b:fc:43:bd:7d:8e:64:4a:2f:6e:09:
9a:f8:2e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 10:35:08 2026 by rpki-client