Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
File: DZxWoYyYei0aLnBEt-MbMhv3rBY.mft (raw, json)
Hash identifier: Q53fk3gLcjc50wHgEyycU0MiUiQO5PVpj6m7Fox9UD0=
Subject key identifier: 92:74:9D:02:F5:0A:8F:66:68:07:F7:2A:87:5C:01:E6:F2:8D:B2:70
Authority key identifier: 0D:9C:56:A1:8C:98:7A:2D:1A:2E:70:44:B7:E3:1B:32:1B:F7:AC:16
Certificate issuer: /CN=0d9c56a18c987a2d1a2e7044b7e31b321bf7ac16
Certificate serial: 019E2F96C415F77C3D96F3F81C04F7160D7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
Manifest number: 0AA0
Signing time: Sat 16 May 2026 07:01:10 +0000
Manifest this update: Sat 16 May 2026 07:01:10 +0000
Manifest next update: Sun 17 May 2026 07:01:10 +0000
Files and hashes: 1: DZxWoYyYei0aLnBEt-MbMhv3rBY.crl (hash: QZyHE8h4TW4KpjLT25ZcRjamzit1Fl1BBUGMYGOT/Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:96:c4:15:f7:7c:3d:96:f3:f8:1c:04:f7:16:0d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d9c56a18c987a2d1a2e7044b7e31b321bf7ac16
Validity
Not Before: May 16 07:01:10 2026 GMT
Not After : May 17 07:01:10 2026 GMT
Subject: CN=92749d02f50a8f666807f72a875c01e6f28db270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:07:ba:86:f1:36:83:01:47:c8:a8:70:b7:45:
a3:72:9c:19:ea:e3:0d:83:65:11:80:50:a7:1d:31:
4e:3d:92:e6:82:3c:51:d8:de:aa:fb:56:48:99:19:
e1:12:ea:3b:43:7c:a1:e0:e9:18:16:74:42:1b:bf:
af:5f:50:f6:79:71:aa:8a:93:21:60:87:3e:f4:bf:
a7:3f:00:9e:09:0a:60:7a:1f:72:33:cc:6e:b8:69:
0e:3d:89:a1:ec:8c:b8:ee:76:dc:7e:50:13:b5:32:
b2:89:d9:2e:05:b7:e9:ae:54:b4:72:74:06:03:7f:
71:27:9e:57:70:32:8a:60:c0:e9:79:af:a4:96:11:
c4:c0:d8:f7:2f:48:94:92:f5:34:86:71:34:5c:b0:
64:09:de:c0:f0:8d:73:1c:1c:c1:bc:17:52:72:a8:
a6:81:d4:f7:5f:5f:bc:e3:64:95:c6:46:9d:f7:e5:
8b:12:b2:2a:df:c6:80:d4:27:13:35:c3:80:3f:a3:
2e:5e:ca:1e:5b:12:80:a5:38:2b:59:21:8d:1a:40:
68:51:93:90:d7:35:65:c4:3d:f7:43:09:52:ad:c7:
4a:60:ed:94:11:00:b5:91:a9:dd:89:6f:80:2c:41:
7f:52:37:30:81:6a:49:e7:07:a5:b0:9e:61:b2:c9:
33:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:74:9D:02:F5:0A:8F:66:68:07:F7:2A:87:5C:01:E6:F2:8D:B2:70
X509v3 Authority Key Identifier:
keyid:0D:9C:56:A1:8C:98:7A:2D:1A:2E:70:44:B7:E3:1B:32:1B:F7:AC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b0:99:32:29:4b:fc:b1:86:d2:48:4d:43:7d:15:ca:a0:95:
9f:38:53:50:16:33:b6:53:54:fc:b9:0e:c1:ec:c2:6a:08:25:
69:5b:c2:91:91:5c:85:3b:15:07:c4:cf:5f:f0:c6:96:90:c6:
f9:4d:b5:29:61:b4:e4:50:f2:fb:d0:ad:6b:1c:1b:eb:8f:5a:
c6:06:61:b3:7f:c7:0c:8e:47:22:51:73:55:2a:1b:95:43:3d:
63:32:ee:c6:83:08:f3:3b:5f:47:34:37:03:65:7a:2e:f4:1c:
49:85:fa:16:b6:2e:d9:d9:f5:04:b4:83:a5:45:dd:3c:59:d1:
78:0c:11:e7:cc:e1:ef:35:6c:90:b2:21:29:18:b1:13:09:53:
d3:71:84:bf:1d:16:af:53:fb:8e:de:32:a0:16:dd:f3:cc:44:
4a:c3:5b:7a:94:65:67:7a:c6:4c:61:70:27:42:1c:61:2a:67:
57:e1:7a:09:93:a1:de:9e:39:f8:b4:fd:a2:ac:89:e0:81:b8:
75:ed:ea:c4:5e:15:f9:c1:96:ac:9e:6e:b3:78:2e:72:7a:7b:
3f:a6:a6:ac:d5:57:ef:a1:f9:e8:12:99:1e:17:b8:ae:c9:11:
1e:e8:e9:10:15:6a:b7:d4:31:95:29:b6:66:89:0b:96:b6:98:
79:bb:6a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:40:16 2026 by rpki-client