Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
File: DXj57XHKOklrjVS5fxR5GNrbnFQ.mft (raw, json)
Hash identifier: O/iy2APB3cymJWI4pEeBr0zNaMNHyG1MEu0fyYqb8yg=
Subject key identifier: A6:5A:15:6D:C2:DA:22:CC:D1:0D:D0:04:67:1A:CD:D5:AF:A2:E4:DD
Authority key identifier: 0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54
Certificate issuer: /CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54
Certificate serial: 019DEE5BF048D1A3127706C18F5BF0A5871B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
Manifest number: 0485
Signing time: Sun 03 May 2026 15:01:35 +0000
Manifest this update: Sun 03 May 2026 15:01:35 +0000
Manifest next update: Mon 04 May 2026 15:01:35 +0000
Files and hashes: 1: DXj57XHKOklrjVS5fxR5GNrbnFQ.crl (hash: 4mY7jq9hKvIFM9AMCDfWBA0T2eJE/KkeN0oEKQIFx+Y=)
2: WBE9XqEf7MFyalSUqu-vF0MYUwE.roa (hash: dqMxE1BdW8dFl07KbG3IeIB419vd91Jj1Eyr9ex+Uk0=)
3: WBO5Gvlksp1h2Nj2XcuQWgWe3aM.roa (hash: 21Q33n7ktv9Mw0KQGNV5mbgpviM4S02U0e8hX8gzv14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ee:5b:f0:48:d1:a3:12:77:06:c1:8f:5b:f0:a5:87:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54
Validity
Not Before: May 3 15:01:35 2026 GMT
Not After : May 4 15:01:35 2026 GMT
Subject: CN=a65a156dc2da22ccd10dd004671acdd5afa2e4dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:15:42:99:d4:c6:74:b6:11:1a:01:66:21:c1:
15:23:45:c2:51:73:13:4f:58:79:cd:a6:5c:d0:a4:
69:89:51:db:74:96:5b:ce:62:3e:07:9f:f7:c1:f3:
cb:da:a8:9a:41:8d:f2:ad:ea:50:c1:b5:ff:97:7f:
23:a5:91:30:b8:48:ee:17:b4:02:e1:86:a6:16:1f:
80:61:86:2b:e0:96:7d:c8:03:a6:a2:bb:8f:dd:6b:
e3:37:8b:33:7d:d8:c2:9d:16:80:99:ef:d8:c2:b0:
fe:40:d1:da:bf:86:0e:7b:98:c0:c0:7b:a1:df:8c:
2e:30:6d:fb:ce:e6:26:57:a2:b3:d8:1e:3e:61:74:
0d:3a:bc:16:33:e0:68:64:e1:7a:26:21:6d:41:fc:
63:7e:38:db:75:14:e5:00:ce:8c:b3:57:36:cc:5e:
63:57:94:6b:02:be:dc:3e:c1:fd:33:5d:a5:33:c4:
3b:df:f2:e2:9d:a1:3d:26:9b:3b:47:f0:71:e4:f4:
6a:46:e0:d3:2e:20:b6:75:82:ca:57:73:9f:ac:7b:
de:fc:47:b6:e7:5d:bb:47:db:e5:78:6e:ba:b8:52:
1a:ab:d6:88:18:be:e4:47:fd:48:c7:03:da:7d:f8:
56:5a:08:35:5a:15:54:fb:70:9c:56:58:35:d5:ed:
61:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5A:15:6D:C2:DA:22:CC:D1:0D:D0:04:67:1A:CD:D5:AF:A2:E4:DD
X509v3 Authority Key Identifier:
keyid:0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:85:06:22:8e:c8:73:ec:61:7c:da:9b:60:5d:77:69:6a:78:
7d:a1:06:99:0b:a1:19:69:49:21:17:d0:26:37:ee:1d:46:86:
0f:1f:28:9e:e8:d9:10:12:f6:9e:66:17:06:26:0a:fd:6c:f1:
1c:d6:0a:92:1d:7c:29:7c:dc:43:90:0b:79:ea:b6:26:bd:ef:
c0:47:1d:8d:03:29:cd:59:c9:15:b8:71:e6:92:1e:c4:47:b0:
b5:37:17:27:cd:c4:5f:2e:0f:a6:99:5e:1c:3a:d1:71:97:05:
5e:d2:7b:9d:43:52:dc:eb:f4:e1:47:f1:08:c0:ca:9e:c2:a2:
9a:e5:aa:7e:9f:56:61:db:e7:d4:99:84:e0:f9:14:8a:d6:8d:
57:ac:07:24:1a:0e:bd:cf:e8:3b:f1:9a:bc:f7:c8:c8:33:b9:
bc:c5:92:19:35:c1:17:7c:89:82:4b:c8:ea:12:df:dd:2a:85:
b2:a7:32:fb:27:25:30:56:dd:99:7b:ec:84:9a:bb:3a:d2:69:
56:89:e0:91:6f:00:34:e6:79:88:15:42:3a:41:f1:77:99:b1:
80:e6:7a:29:64:af:8b:d9:9f:3b:83:1a:fe:5c:8d:73:69:aa:
4d:09:b4:b4:23:b2:3c:a1:76:7a:5b:0c:6e:25:48:9a:62:1c:
99:10:30:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:08:04 2026 by rpki-client