Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
File: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft (raw, json)
Hash identifier: nT5etWxeubBUbXyr1ASuZl7A1nMrXv4VM2PgEX4v/2c=
Subject key identifier: 15:A3:E8:94:DE:38:61:BE:2B:20:C3:3C:D1:38:CE:8E:FC:8B:6F:E2
Authority key identifier: 0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
Certificate issuer: /CN=0f516df64b3941b046743411ed86ea6030d72fba
Certificate serial: 019E30E00BC71D7D05DBCD7B3BBBCC0C64E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
Manifest number: 1733
Signing time: Sat 16 May 2026 13:00:49 +0000
Manifest this update: Sat 16 May 2026 13:00:49 +0000
Manifest next update: Sun 17 May 2026 13:00:49 +0000
Files and hashes: 1: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl (hash: d5CKeRU2e9xjzkEJARNabiZ+XeuAMFLX0O61mArR9zM=)
2: dOFQf5AeWGROir3bR0l9oDiF_LY.roa (hash: NCU9gdpQPYAW35UhF4+gLu5Dhpwg+184qJ8TDUdFqxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:0b:c7:1d:7d:05:db:cd:7b:3b:bb:cc:0c:64:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f516df64b3941b046743411ed86ea6030d72fba
Validity
Not Before: May 16 13:00:49 2026 GMT
Not After : May 17 13:00:49 2026 GMT
Subject: CN=15a3e894de3861be2b20c33cd138ce8efc8b6fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:41:1c:2f:60:61:f1:52:fe:72:6c:57:0b:e8:
bd:ba:c8:9e:4b:5f:1b:0d:69:18:98:58:e8:75:ef:
ed:80:b1:52:e9:df:a8:6d:38:cd:8e:99:b6:42:08:
06:1b:14:20:21:8e:79:82:4f:2c:0c:6d:0f:23:e2:
85:25:0e:2f:bf:94:b7:cf:e4:ee:58:1b:b1:57:db:
e9:43:96:0a:82:20:e3:2d:9c:9e:55:17:b6:31:c1:
45:47:b0:30:65:ed:b3:03:8e:34:a6:46:a2:c3:bd:
19:1d:0f:e3:b7:62:ab:be:ec:cf:10:3f:51:40:d8:
b6:e3:5d:a1:a6:bb:e9:8a:dc:47:40:9a:7c:c6:19:
00:cc:9b:96:63:1c:dc:af:18:a5:ab:6a:16:50:09:
02:d9:be:e8:bf:26:37:2d:9d:c7:c6:ae:c7:dd:38:
4c:73:01:04:d2:31:5a:7a:4c:b7:45:c7:26:c4:58:
43:18:65:be:22:a1:3f:38:44:35:73:b5:b0:67:69:
f8:c4:2f:5d:62:78:da:1b:40:32:fb:d4:bb:e5:c3:
13:79:30:78:88:52:dd:e9:27:a3:76:b6:65:90:b8:
cf:ea:94:51:82:a6:8a:6a:c1:b4:cc:af:c0:3d:51:
2a:da:b0:bc:b9:cc:25:5e:16:33:a0:1a:b3:a0:0b:
19:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A3:E8:94:DE:38:61:BE:2B:20:C3:3C:D1:38:CE:8E:FC:8B:6F:E2
X509v3 Authority Key Identifier:
keyid:0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:03:d1:0c:96:07:fc:be:15:04:35:2f:29:ba:59:64:39:2b:
4a:cc:b5:1a:45:d1:12:fa:8d:7c:79:0f:9c:94:f1:61:61:7b:
e7:f0:de:f2:85:98:9a:72:0d:72:e1:d9:cf:2c:5c:85:38:b2:
75:0b:51:5a:01:b8:60:c9:4e:60:73:ca:91:c8:e1:02:67:12:
b3:0e:bd:cb:de:97:44:b9:af:e0:a6:15:6a:5c:7e:1e:6a:ab:
0a:ca:91:b4:bb:2f:61:4e:30:d3:9b:22:cc:8b:21:ee:15:c0:
39:36:c8:bb:ac:68:e6:89:e4:97:2c:f0:54:52:a7:1e:26:52:
a6:4a:9a:40:80:d7:ae:b4:2e:85:53:8a:2b:85:13:25:cc:63:
6d:9e:7c:50:61:ac:51:31:5a:05:f7:49:ec:95:29:c4:9d:aa:
60:2b:67:18:20:8f:ba:7f:2f:87:aa:ef:f6:ca:de:90:3e:6a:
f4:a8:a1:7c:31:72:30:a2:ef:9f:2e:fb:6a:74:7f:05:5c:96:
31:67:9d:ca:e0:53:d2:e5:1c:22:04:cf:9e:02:bc:fe:74:f4:
74:b4:ce:43:c9:90:b3:12:bb:ee:94:63:fd:d9:b1:d4:6c:d9:
0f:7a:7d:5c:bf:c2:dc:7e:76:4d:2e:cb:ce:44:0d:7a:05:b5:
7b:32:4d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:14:13 2026 by rpki-client