Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
File: D81k6vJZSCLz-aLrzRnbm3-nDZo.mft (raw, json)
Hash identifier: 0sjkjw15E+UeoDjJ3qHPiYzhfF/BHRViU3q3EbfiVm8=
Subject key identifier: AD:F6:BC:A6:B2:37:00:C7:AA:F8:15:6E:FD:6A:89:29:6B:14:75:F5
Authority key identifier: 0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
Certificate issuer: /CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Certificate serial: 019E2F9653C8720E3C624D1133D8C56F750E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
Manifest number: 0518
Signing time: Sat 16 May 2026 07:00:41 +0000
Manifest this update: Sat 16 May 2026 07:00:41 +0000
Manifest next update: Sun 17 May 2026 07:00:41 +0000
Files and hashes: 1: 1HQ2oYdrkzbGmcEGuOKgDpKVA-A.roa (hash: +R86VJ/9zKCCo9on3dPLqNmwVLLy9nPRqGdyKqWuego=)
2: D81k6vJZSCLz-aLrzRnbm3-nDZo.crl (hash: JVvnSr8t1LFFsr9+ClYEowf48b4/7JM3Th+J5dHAX00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:96:53:c8:72:0e:3c:62:4d:11:33:d8:c5:6f:75:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Validity
Not Before: May 16 07:00:41 2026 GMT
Not After : May 17 07:00:41 2026 GMT
Subject: CN=adf6bca6b23700c7aaf8156efd6a89296b1475f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cd:b3:63:08:02:c6:70:d0:7a:b1:e5:ea:bd:
66:2b:63:c5:73:c3:35:5e:32:09:9c:ac:86:6f:1e:
8f:f5:f8:e1:ae:de:00:a3:63:e9:80:2c:79:25:e6:
d9:8b:e6:65:1e:7a:9e:c2:d0:0c:05:2f:a1:85:bd:
cc:5f:1b:85:64:05:ec:8e:14:e1:de:0a:68:65:95:
51:a5:73:39:a3:9e:c4:a6:29:d4:89:d6:95:36:75:
c4:1e:59:c5:6e:d7:af:81:76:a5:23:72:25:1a:78:
c4:fa:40:7f:ab:2f:11:2a:e6:98:4f:53:1a:17:5d:
8c:cb:13:23:b4:f0:b7:d8:e2:e0:50:4d:a1:f5:59:
35:7f:62:9a:53:b4:8b:19:e9:40:e1:8d:2d:5c:7f:
79:d8:a1:d2:ec:6e:07:e7:d8:8c:f4:f1:76:77:b2:
dc:3f:7d:32:6a:46:3d:fe:79:45:26:97:e0:ff:d6:
7f:af:b5:b9:78:6c:40:b2:8b:04:8d:c3:63:83:7c:
9b:f3:b1:c8:96:96:f3:d9:84:ab:a5:e3:56:af:69:
10:8e:60:d6:8c:81:df:f2:d5:d5:62:44:65:27:00:
6b:5c:6d:11:fc:a2:d0:8a:f9:ef:8d:98:d7:de:23:
02:16:2a:97:5b:c5:e9:5b:54:f1:1d:0e:2c:5b:dc:
15:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F6:BC:A6:B2:37:00:C7:AA:F8:15:6E:FD:6A:89:29:6B:14:75:F5
X509v3 Authority Key Identifier:
keyid:0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:6e:39:97:9e:91:ce:7f:46:4a:32:94:76:40:40:5f:fe:ac:
50:86:3d:0b:bf:58:25:3b:61:09:b8:2a:64:0f:17:5f:11:f4:
d2:c1:45:79:3a:4c:c7:22:92:68:f8:7d:a5:67:3d:d5:50:91:
20:11:33:bf:16:08:47:8a:e2:68:58:42:a7:83:a1:76:7f:49:
fa:e4:ec:0c:b0:49:99:ee:12:cd:f6:93:f1:6f:83:ec:28:fd:
e9:ee:10:38:76:f3:9c:82:d5:5f:08:d2:51:59:65:d3:d0:5a:
3f:0d:e4:ef:15:6e:dc:83:3f:24:0a:45:34:c7:8c:d8:92:83:
36:d4:05:d2:df:95:6e:8f:87:04:08:47:f5:73:d8:17:23:91:
98:58:12:99:68:cb:08:d0:22:69:3a:8c:48:20:21:b1:85:11:
e7:7f:e5:04:50:41:dd:41:81:90:dc:6d:f2:35:d6:69:8f:d9:
38:32:b7:01:ad:78:06:3d:4e:f1:07:9d:ef:53:59:9b:a7:e3:
99:92:16:ef:65:24:61:05:5b:62:16:43:da:83:e4:2c:69:94:
f5:48:ed:8a:3b:a9:59:ff:89:c9:f7:61:de:6a:cb:4c:0c:6c:
53:4a:f2:67:d8:c3:c0:6b:ce:b8:1e:d8:e1:f0:e4:aa:79:e1:
bf:c7:7b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:48 2026 by rpki-client