Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
File: DiKD5uavmRQidDcR96cjE3aA5p4.mft (raw, json)
Hash identifier: ZRkSvo9sqhUXQRKN4XZbyIqflQaB6NIHwyxtkDJZ3RE=
Subject key identifier: 0B:58:1B:31:1F:B3:8D:E7:FF:BB:04:A7:7F:82:DA:C6:4C:61:B7:5D
Authority key identifier: 0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E
Certificate issuer: /CN=0e2283e6e6af991422743711f7a723137680e69e
Certificate serial: 019DE3A12833F1266C522A4C792DC6919299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
Manifest number: 0703
Signing time: Fri 01 May 2026 13:01:22 +0000
Manifest this update: Fri 01 May 2026 13:01:22 +0000
Manifest next update: Sat 02 May 2026 13:01:22 +0000
Files and hashes: 1: DiKD5uavmRQidDcR96cjE3aA5p4.crl (hash: R2onBnZ7uUwm6yn0k3QD5LKNSY0/qzK60D9SCoFhhWQ=)
2: YWPvVhMhWOdJq4IgusjcDgptc9E.roa (hash: VwHMf9+Fwh3KRyIosC2+XI4IaINip+46g+Oe4aIU/sk=)
3: oZhmNHo1g-fLhYbLEUh1GW508Ns.roa (hash: pc/tqbY3tzsPX8Y1oHBCD976XbZr/U1sHfOZb8voLLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 May 2026 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e3:a1:28:33:f1:26:6c:52:2a:4c:79:2d:c6:91:92:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2283e6e6af991422743711f7a723137680e69e
Validity
Not Before: May 1 13:01:22 2026 GMT
Not After : May 2 13:01:22 2026 GMT
Subject: CN=0b581b311fb38de7ffbb04a77f82dac64c61b75d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0d:e3:98:4e:28:96:e8:a7:7e:99:84:41:54:
92:f1:d9:ec:f4:74:8c:79:87:6a:3a:fd:6e:6e:54:
ba:60:4b:1c:7b:e7:89:db:e7:63:4c:81:61:50:71:
d0:de:41:06:25:d4:1a:63:3d:79:39:4a:e1:01:5c:
15:c6:f9:f2:0d:a4:fb:f8:c3:2e:9b:50:90:4d:5a:
9c:00:88:1c:68:66:e6:ae:28:e7:2b:36:e3:c0:e1:
95:fc:94:b8:c8:11:45:e7:e0:2e:1f:8c:db:a1:9a:
a4:ee:f7:be:41:15:54:de:33:f3:93:86:cb:8f:d6:
bf:95:01:d8:7c:a1:07:16:31:28:d7:32:33:32:a8:
68:ee:de:fa:fb:f4:f2:f0:8a:58:76:00:ee:b0:35:
dc:4f:48:f2:65:f9:2b:9e:43:7d:4b:53:01:36:36:
38:df:7d:2e:b9:66:1b:00:83:03:1f:dd:05:cb:d8:
63:93:8d:5a:72:fd:c4:3e:10:af:8f:a9:c4:20:8e:
d7:c6:09:ee:01:ef:42:b3:a6:af:eb:fc:92:56:ac:
3c:96:1e:65:8c:3f:a8:1a:31:8a:ff:33:df:f2:19:
c5:36:b4:de:f9:78:07:0d:9f:48:7c:f3:c4:9d:97:
df:b9:d4:37:90:07:1a:14:65:79:14:fb:20:71:f8:
16:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:58:1B:31:1F:B3:8D:E7:FF:BB:04:A7:7F:82:DA:C6:4C:61:B7:5D
X509v3 Authority Key Identifier:
keyid:0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d0:bd:58:e7:41:2e:12:92:0d:d1:2f:68:6e:81:61:b7:80:
57:0c:87:f0:81:56:6f:d5:0a:6e:33:d9:17:31:5a:56:46:01:
37:fa:92:c7:54:69:a8:80:77:f3:5a:88:a0:35:b7:12:62:8c:
ba:7e:7a:fb:0f:57:d0:c5:07:77:a4:37:68:8b:27:85:51:80:
35:03:e9:3a:4b:cc:82:ad:88:a2:f4:07:2e:2b:83:71:ae:da:
b1:08:a6:59:09:d9:4e:34:01:31:0f:15:af:59:b6:2d:de:aa:
d4:37:f9:d8:eb:fc:2a:1a:26:a8:04:8a:3f:dd:a2:ba:7d:0f:
ae:3f:1d:e6:45:5d:9b:f3:48:cf:30:0a:8a:fb:3a:fe:da:e6:
1e:45:d0:bc:7e:84:df:12:83:1d:e9:6d:5f:10:8f:51:ea:0f:
8e:ba:78:e0:aa:da:9d:e3:93:41:a3:10:f2:f9:8f:30:e8:81:
d0:b7:39:24:e7:8c:91:e8:87:90:8a:a6:9e:e7:c1:e9:a4:94:
93:34:6e:d6:0e:8c:2d:92:d4:7f:0d:90:df:15:1a:ee:46:3e:
ee:e1:5e:df:35:ce:77:22:79:04:db:ef:f2:ad:ae:92:b4:70:
77:ed:25:ef:ea:8c:b4:be:56:55:5b:45:d4:db:ce:21:2b:c8:
3b:1b:7a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 22:59:57 2026 by rpki-client