Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
File: 0cSRMJSiEmjHOmdlOjc41z5cWac.mft (raw, json)
Hash identifier: RriIR+phS48SA1GF+NCWishwhSLv9kOq+Pepmub2ogI=
Subject key identifier: DE:70:6A:76:75:25:B7:03:D4:C5:8F:51:AA:0C:A8:43:9D:EE:22:10
Authority key identifier: D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
Certificate issuer: /CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Certificate serial: 019E1C7D6B3E977CB7D5A62BECB95C3A0BB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
Manifest number: 17DF
Signing time: Tue 12 May 2026 14:00:41 +0000
Manifest this update: Tue 12 May 2026 14:00:41 +0000
Manifest next update: Wed 13 May 2026 14:00:41 +0000
Files and hashes: 1: 0cSRMJSiEmjHOmdlOjc41z5cWac.crl (hash: zpApPv52gpFcHh9pc4/AXeWLtFlvXFwB3cKLRmJwcpk=)
2: ZjZpopADEszQ-pk8iJcM4buK_Vk.roa (hash: kT/wMhqwMSPuX9SvpMfdYohIGO0Je1OedjWoKvA8CNs=)
3: jyVGCyGgEBWJDHp2JEn0ylLOQpw.roa (hash: Z172Tcqn6RnvzWrlqa5fx4IBPek1nFPjcCRMXGw3qXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:6b:3e:97:7c:b7:d5:a6:2b:ec:b9:5c:3a:0b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Validity
Not Before: May 12 14:00:41 2026 GMT
Not After : May 13 14:00:41 2026 GMT
Subject: CN=de706a767525b703d4c58f51aa0ca8439dee2210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8c:98:93:b6:c8:9e:01:fc:76:24:e0:af:5b:
64:ee:1b:d6:be:9a:ae:23:76:55:33:3a:56:d8:76:
66:1d:29:dc:78:e3:49:64:1b:45:66:95:5d:d6:4a:
b3:1a:63:c1:9a:a4:09:90:20:72:ff:2f:d3:3c:ee:
12:3d:07:ac:42:64:45:b5:d1:bd:49:09:15:5d:da:
ca:b2:5b:39:da:48:f6:14:6e:a0:c9:a6:53:48:21:
9f:06:e0:ac:1b:40:d2:1a:29:be:2f:dc:bf:34:9f:
15:d7:21:7b:59:d3:96:4f:f5:ef:82:7d:a1:ce:34:
55:f3:1d:74:f0:1c:76:97:c9:a1:3d:51:3a:43:28:
25:05:44:8b:81:9c:de:8d:cd:2a:f6:e4:9f:f7:bc:
20:ef:43:bd:a1:73:20:3c:c8:c6:88:e7:ba:94:c8:
21:65:17:ac:63:cb:42:ad:9b:f9:6d:95:57:0a:4d:
1a:b9:50:ec:82:2c:30:0d:54:59:e6:5e:18:29:6e:
43:37:a3:91:65:10:08:7b:4e:13:2a:5b:9f:ca:59:
51:06:e6:5d:1d:50:9c:72:f5:3f:86:39:ea:16:88:
a7:94:b8:94:4c:6d:8b:c0:40:51:f4:0f:c6:16:4c:
de:67:09:3f:71:4a:dd:e4:ff:cd:8c:ca:27:70:0e:
7f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:70:6A:76:75:25:B7:03:D4:C5:8F:51:AA:0C:A8:43:9D:EE:22:10
X509v3 Authority Key Identifier:
keyid:D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:3d:f5:3e:44:ed:ac:8c:e7:24:06:6e:dc:7e:9b:ab:7b:5c:
c0:e2:d6:1f:d0:48:1d:8c:ad:6c:63:83:50:ec:ab:c1:1f:9c:
13:d6:bb:31:9a:3b:9a:fd:9c:d0:c3:4d:f0:8b:3a:96:25:fe:
c8:37:e1:66:a8:b6:01:bf:e5:f4:3c:7d:a7:35:c2:f7:25:de:
c2:1a:cf:81:41:fd:00:15:a1:71:7b:b8:ea:36:e2:5b:8d:7b:
a6:25:8b:78:7c:4f:aa:25:98:5a:5c:d6:71:7b:a2:58:44:06:
65:07:f1:df:28:f0:cc:64:29:af:3c:44:7d:64:ce:e7:dd:34:
a9:9f:07:bd:74:98:09:e7:1f:14:fe:b1:a1:90:09:de:21:e2:
d8:9c:fc:1f:ea:0a:36:6b:f6:62:63:e2:88:50:6c:ab:07:d8:
30:d1:a4:48:b1:62:02:16:29:4f:9b:79:42:91:2a:2e:e7:68:
1e:d8:e7:22:38:87:52:c4:f9:ae:f0:15:d9:e9:a3:c2:04:f0:
33:7b:95:c0:82:27:03:38:c7:1b:73:bf:a3:b1:e7:7b:c1:bc:
1e:b7:9f:cb:78:bf:1e:77:af:1b:5e:4d:f2:30:53:9a:2f:20:
15:66:36:0c:ea:ff:d4:10:56:aa:30:0a:10:41:a1:a8:96:36:
db:9d:d7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:21 2026 by rpki-client