Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
File: DY087TLjYPzUbBY1Vt4oqigksZs.mft (raw, json)
Hash identifier: tM2K1MtTqJ1N9qTFDry2m9LGfbWT5gK/aglKtohsa8g=
Subject key identifier: 7B:DB:1E:C1:14:5F:D0:80:43:05:B1:1A:53:D5:55:50:4B:D8:E2:07
Authority key identifier: 0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B
Certificate issuer: /CN=0d8d3ced32e360fcd46c163556de28aa2824b19b
Certificate serial: 019E6986EE57796762973CDF2C4EE6CCA77E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
Manifest number: 0406
Signing time: Wed 27 May 2026 13:01:50 +0000
Manifest this update: Wed 27 May 2026 13:01:50 +0000
Manifest next update: Thu 28 May 2026 13:01:50 +0000
Files and hashes: 1: 1-nukkIR6QW9cgqOuKheFLpvicPM.roa (hash: E0YmmZeDYH8nWMQd2BPTkT+OQ+zyRbNJxd4dp/aCenc=)
2: DY087TLjYPzUbBY1Vt4oqigksZs.crl (hash: lFj1ldmkZ0lsZJpiQ4UoR52LoR5N15+Z3PY6mRONO8w=)
3: fW8Rb2ydTpsUsTrGa2SivBYDQlA.roa (hash: R0r5msaJunREx2IGezURTBwCC6OaeIbwcDABeHEl6S4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 13:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:69:86:ee:57:79:67:62:97:3c:df:2c:4e:e6:cc:a7:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8d3ced32e360fcd46c163556de28aa2824b19b
Validity
Not Before: May 27 13:01:50 2026 GMT
Not After : May 28 13:01:50 2026 GMT
Subject: CN=7bdb1ec1145fd0804305b11a53d555504bd8e207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:74:4d:ce:3b:b6:b2:cc:e1:9d:99:6d:47:fc:
df:77:96:8a:5e:dc:52:09:02:8a:85:ae:29:94:ab:
86:81:7c:9d:d0:2c:6e:75:df:8c:b7:94:f6:06:5b:
02:24:08:11:39:6b:73:88:fa:47:e8:4b:82:0d:5b:
e6:91:ee:d8:f9:80:f1:aa:18:59:59:0f:d9:45:1c:
fa:6c:50:6a:7e:4a:26:e9:65:97:91:12:53:03:fd:
d4:4d:f2:15:5b:ad:8e:64:2f:f3:0b:25:37:87:2f:
ec:b0:bb:89:f0:b9:ee:c0:9c:25:65:44:3a:75:32:
27:5f:aa:27:c9:e6:53:b5:ef:a1:bc:d9:62:9a:69:
fe:70:f3:ec:ad:55:6b:e0:f7:bf:6f:81:1a:7e:37:
43:85:48:1d:05:90:86:ae:33:fe:68:2a:ec:a1:7d:
b4:71:85:2f:3d:79:70:9b:0a:d5:4f:bc:ff:c5:01:
55:34:64:a2:b3:5e:50:ab:30:13:45:99:9f:bd:b1:
b3:d3:ba:09:57:70:e0:71:e6:91:06:a0:c2:c4:eb:
87:7e:ce:39:b2:e6:0b:fd:f8:f1:88:7b:55:c2:03:
42:42:12:52:0e:50:84:96:11:31:85:23:5a:84:50:
ec:c8:6a:b3:0b:3a:00:3a:5f:64:ad:44:82:59:64:
37:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DB:1E:C1:14:5F:D0:80:43:05:B1:1A:53:D5:55:50:4B:D8:E2:07
X509v3 Authority Key Identifier:
keyid:0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b7:e5:18:d6:98:8a:a2:a6:12:ee:54:45:e1:aa:b8:64:da:
1c:e0:06:95:a2:7a:de:99:4d:0d:1d:2e:78:fc:eb:8a:80:35:
22:4e:50:b6:1d:c5:2c:c1:7b:bb:8c:02:bd:f0:55:d0:87:e4:
ce:3b:4f:7e:66:63:d1:4d:b3:df:f1:c3:9d:90:10:30:36:d2:
ca:7f:d3:c8:49:e3:d2:b3:96:72:80:ab:a2:0e:5b:88:ba:e8:
bb:19:88:c1:d1:19:86:b0:df:1d:27:96:15:77:53:1c:2b:aa:
bb:f6:3c:0e:b4:d8:10:9b:96:c8:2b:60:9f:d8:3d:d1:02:61:
e4:f2:fd:70:85:3a:e2:66:f6:14:84:37:45:c6:6e:8d:13:4b:
75:71:a5:8b:df:f8:c2:bb:b4:1d:21:88:a8:7a:ea:46:9d:69:
72:31:97:db:95:21:f7:ef:55:ad:e3:dd:b9:06:b2:20:3a:34:
6b:09:68:6f:ce:f5:57:95:6f:12:3d:64:a0:6f:98:9b:17:66:
c1:d3:3b:fc:95:a3:f7:2e:21:e0:ce:b0:89:55:8e:3e:79:73:
c4:d6:bc:0a:72:16:12:56:5c:8d:d3:6d:56:5c:17:1b:bd:51:
f5:30:ab:1b:6c:63:5e:2d:d7:eb:00:4a:bc:9a:87:78:06:a2:
4e:84:eb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 18:19:17 2026 by rpki-client