Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
File: dn871L-9MHHDjNTXCSvTSQkgw9k.mft (raw, json)
Hash identifier: XclfEc1FbL9kbTMglysVb3NhF8haGaT5Wu1wufiZDf8=
Subject key identifier: B3:94:43:F0:8C:B1:62:B8:17:37:F0:B7:01:8E:83:8F:75:F2:4B:A2
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 019E1C7E17D1A13EDCE41925CFB69AF11587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
Manifest number: 12F5
Signing time: Tue 12 May 2026 14:01:26 +0000
Manifest this update: Tue 12 May 2026 14:01:26 +0000
Manifest next update: Wed 13 May 2026 14:01:26 +0000
Files and hashes: 1: 2_M3hjSd7CTsmWcIflPRCb5WQkA.roa (hash: lb+AroYfcHpsLjtLQUflH3VlWHXn0bD5oDoLv70oXjU=)
2: GApNKBWC5Ue-NAU5Sg1EwP8MY6k.roa (hash: 2tMBvhTBaG9FOblLPHKcO+h2HyVM2AobojKlvW5vzV0=)
3: S_cMNHwGmO53SbTaPSTvEUZSyO4.roa (hash: VJ2mNoR51FwtQFNmuZTNPyshVFI+sQ6fyBXwc1Q4lR4=)
4: TpDZ8IP6rdDoqNG2faUZ93mOnhY.roa (hash: WauO2SokhDFlsHFeFhypHeCTlK3wDUgWAzshLZtKSQg=)
5: dn871L-9MHHDjNTXCSvTSQkgw9k.crl (hash: ykY9RcyQlQKhf4L1dhZbPCFa1FoCf1tcpHyW9AVMJvE=)
6: dwc98g5fGUgPAWxFG8AQgkdTGUE.roa (hash: r33CVUyGl3+7P6ErqgK1Pc1v2YLarpkrErbsExQx0So=)
7: ocHcLPqIiXs39TMNmLocr_HH0to.roa (hash: 2m7W1dsOxKOHHVh+M6gzZPsYBZCOmqgU0+hBomALNJM=)
8: yrbB1vsBIjdbUaylEPRfMMB-k3g.roa (hash: uUmid3sXY3uL8GFqpHsIlPFVeU82iqmCl12sBdQU42s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7e:17:d1:a1:3e:dc:e4:19:25:cf:b6:9a:f1:15:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: May 12 14:01:26 2026 GMT
Not After : May 13 14:01:26 2026 GMT
Subject: CN=b39443f08cb162b81737f0b7018e838f75f24ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:74:6a:aa:0b:72:d8:2a:f2:eb:0c:69:ca:da:
ad:59:10:de:b9:63:54:b1:d5:46:1e:f6:e4:3d:ac:
28:8b:1d:6e:f4:3c:ec:d7:9e:90:66:1f:b4:8d:9c:
0a:9c:e2:8d:6a:b4:79:22:00:53:eb:c1:2b:c6:c0:
84:e3:14:8f:8a:89:54:83:a7:0d:19:36:1e:ee:31:
c1:74:15:dc:d3:40:33:44:52:33:1a:02:a2:8b:e4:
c0:f0:81:a9:4b:50:f8:b6:cc:28:fe:5e:82:9f:f5:
95:5d:d1:62:50:0b:bc:3d:32:d8:ee:15:25:b8:61:
53:c4:1e:82:9a:09:ab:a1:bc:e1:a3:53:36:06:ec:
07:af:c8:32:8b:51:79:74:24:24:a6:2b:a8:df:93:
21:6e:28:63:73:21:9c:1e:10:48:aa:97:d3:52:37:
5e:ba:af:c1:83:f0:b8:d4:6c:68:32:e1:16:da:d8:
cd:e1:86:55:27:4a:d8:08:0e:fc:74:d3:40:e2:7d:
c3:9a:65:7d:25:10:1e:44:16:d3:06:8b:c9:62:75:
8e:15:37:e4:8e:11:12:af:40:d0:1e:0b:41:cf:98:
ce:53:ac:59:d4:6a:d5:86:0c:d9:79:fb:91:82:cf:
63:0f:71:f5:11:ab:77:e9:d2:7f:04:34:3b:8a:e6:
b5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:94:43:F0:8C:B1:62:B8:17:37:F0:B7:01:8E:83:8F:75:F2:4B:A2
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:9e:b6:76:a5:d9:a0:f3:5f:25:b2:3f:da:27:e6:95:6a:a8:
38:4d:9a:08:02:10:cb:90:18:f0:ba:90:93:9d:ef:41:58:97:
5a:46:e3:60:e0:e2:c7:ce:59:0f:58:7e:7c:da:be:a0:e2:a0:
b9:c5:31:b2:56:ef:74:f7:42:e8:a7:89:8c:8b:71:b0:12:ab:
8a:b7:24:4e:c7:22:13:e7:0f:dc:eb:99:0c:52:72:fd:97:ab:
60:94:0a:d6:94:8e:51:27:18:b5:34:e4:da:71:56:75:f8:0a:
90:ae:d7:b6:84:6c:5a:00:6f:26:59:e1:b3:e0:d1:5a:83:62:
ee:ac:3c:d9:62:0b:58:3d:f3:74:f2:05:88:96:c6:85:2e:c7:
fc:fa:74:c8:2c:9a:bc:45:18:b0:a3:e0:06:eb:f8:18:15:f7:
40:36:b7:56:f8:41:49:12:12:af:12:a4:f4:56:ee:33:a7:cf:
4d:95:43:1a:fa:6f:64:63:9f:00:95:b2:fb:df:04:28:28:83:
64:b6:ce:36:77:28:b5:c0:28:08:52:dc:4f:e2:3a:be:5c:d9:
62:70:a3:00:95:24:2f:0e:ac:18:bb:8d:82:8a:a2:02:2e:20:
a2:8b:82:04:9f:70:4e:88:25:ba:0e:d5:5d:80:3e:a0:7b:ce:
d6:9b:c7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:36:34 2026 by rpki-client