Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft
File: rfDfdxFHQeE6F9chPmlWv5YntVg.mft (raw, json)
Hash identifier: sfduYTx1TrpUP91lYNQ/tGJ+8KVquIbuHopJgWzCVGo=
Subject key identifier: D9:AA:AB:0E:49:64:1B:B1:12:B0:56:F0:43:6E:8C:0B:E4:8A:EC:FA
Authority key identifier: AD:F0:DF:77:11:47:41:E1:3A:17:D7:21:3E:69:56:BF:96:27:B5:58
Certificate issuer: /CN=adf0df77114741e13a17d7213e6956bf9627b558
Certificate serial: 019E30A94C9D22947DEA3F9899A00F4F9A19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfDfdxFHQeE6F9chPmlWv5YntVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft
Manifest number: 17C4
Signing time: Sat 16 May 2026 12:01:01 +0000
Manifest this update: Sat 16 May 2026 12:01:01 +0000
Manifest next update: Sun 17 May 2026 12:01:01 +0000
Files and hashes: 1: 8eYijGU89HKkHPl1vQkVznR2YWI.roa (hash: GVKbdEH+zbWNIRI6lkz6XipadG7YSN2rD9CEidAiQUs=)
2: rfDfdxFHQeE6F9chPmlWv5YntVg.crl (hash: ApBXK9Nhd/7XZd9+hXk9062mQ95MLQzcjTKC0KJz914=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfDfdxFHQeE6F9chPmlWv5YntVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:4c:9d:22:94:7d:ea:3f:98:99:a0:0f:4f:9a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf0df77114741e13a17d7213e6956bf9627b558
Validity
Not Before: May 16 12:01:01 2026 GMT
Not After : May 17 12:01:01 2026 GMT
Subject: CN=d9aaab0e49641bb112b056f0436e8c0be48aecfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:98:f9:55:82:21:5a:29:9c:56:a7:76:87:8d:
82:14:30:d8:76:44:3a:e4:e6:a2:be:4c:db:d2:7b:
5d:0f:a3:10:43:cd:cc:ad:c3:5e:2f:6e:33:43:a8:
4d:b8:d3:41:80:86:9a:23:95:49:1b:cc:d9:bc:0e:
7f:d1:df:00:ed:ba:6e:20:d8:fc:af:63:e4:29:55:
0f:73:9a:5a:23:0d:8c:51:cf:34:31:da:2a:bd:6c:
c8:91:d6:60:fc:3d:21:3d:ed:bf:45:83:80:2e:90:
18:e9:0d:9c:4d:21:fa:d3:42:ad:a4:37:ee:fa:1b:
5e:08:e6:aa:aa:31:71:ea:80:d8:dc:c9:70:7e:a5:
d8:53:84:42:88:55:f0:4f:c9:9b:97:8e:5d:8d:73:
70:9c:d4:2c:d1:c3:fd:cb:5d:ba:f3:94:d4:42:43:
80:fc:f3:6b:4c:7a:fb:9d:5a:33:59:c6:0e:01:c3:
11:38:de:25:75:5b:36:a0:ae:56:82:cf:b8:7b:c6:
af:ce:dc:a7:d1:af:2d:dc:bb:9f:90:e9:50:21:da:
77:9a:10:87:1a:0f:b9:f0:59:1c:00:af:a5:5d:f5:
9f:38:16:27:c7:80:5c:d6:d2:8b:15:f6:9a:ee:97:
fd:24:d0:42:d2:cd:cb:0b:91:9c:59:a4:36:1b:5f:
14:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AA:AB:0E:49:64:1B:B1:12:B0:56:F0:43:6E:8C:0B:E4:8A:EC:FA
X509v3 Authority Key Identifier:
keyid:AD:F0:DF:77:11:47:41:E1:3A:17:D7:21:3E:69:56:BF:96:27:B5:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfDfdxFHQeE6F9chPmlWv5YntVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:42:4a:f0:a5:17:17:e6:6d:84:3f:e0:54:38:d0:bf:fb:d8:
5b:50:a3:26:04:ce:28:9e:e9:75:ff:ba:40:43:91:8e:f2:71:
c1:fb:b7:71:9d:eb:ed:88:66:dc:9d:81:fa:92:ab:87:07:32:
8a:6e:2f:52:fc:af:cd:82:ae:60:d7:92:22:1f:97:28:f5:d3:
2a:d3:a7:98:ca:8b:fc:92:cd:bd:15:45:cf:24:2c:ca:ca:6d:
f9:70:73:d9:20:29:a9:90:25:df:d1:1b:b6:5d:da:fc:28:49:
e0:99:14:e9:ba:9d:92:83:7d:08:28:83:4e:15:33:ef:d6:09:
b9:e4:dc:3c:2f:09:8b:38:fe:58:09:c8:85:b4:d4:48:cf:60:
d2:a7:d2:b3:c9:8c:64:46:c8:bb:cf:9b:af:77:80:ac:27:33:
d1:da:db:3b:4c:ad:8c:20:56:90:dc:8d:12:0f:87:1f:3f:0e:
d1:1d:86:e7:1f:85:54:d5:fe:88:32:11:a9:69:7e:a3:ad:74:
1c:20:b3:22:e2:91:31:1e:c6:bc:cf:a7:8b:2a:7a:cd:dc:d1:
a5:f8:90:27:86:06:6c:5d:56:b1:ba:08:c2:52:9e:21:c6:bd:
87:3f:ac:c3:45:86:eb:6d:f6:24:59:1f:b4:c9:d1:6a:c2:27:
de:8a:68:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:18:34 2026 by rpki-client