Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
File: DDnQStg6rB3lqYzfdiQKlzYsSsY.mft (raw, json)
Hash identifier: XceLwB2vCQ9mTi4BinjnEWgRl8xO4UfhBNNziNUMzes=
Subject key identifier: FF:97:2F:2D:EE:BC:21:B8:3E:08:54:28:84:85:4E:38:1A:1F:BD:D3
Authority key identifier: 0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
Certificate issuer: /CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Certificate serial: 019E1F7E9D933F8F741EDB8FC25E2CA0A49C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
Manifest number: 05EA
Signing time: Wed 13 May 2026 04:00:52 +0000
Manifest this update: Wed 13 May 2026 04:00:52 +0000
Manifest next update: Thu 14 May 2026 04:00:52 +0000
Files and hashes: 1: DDnQStg6rB3lqYzfdiQKlzYsSsY.crl (hash: 8IuMDoUR9Ilqc4Jrrx1ZAi+Gz0UKL6Ll+66zZy6iXBQ=)
2: d-dWQuydMoCZtytzQ81CyqKGHF8.roa (hash: rHhhXAeBGXlacTL0skc5ZpbciDYSLDNez3YfIDsP5dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:9d:93:3f:8f:74:1e:db:8f:c2:5e:2c:a0:a4:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Validity
Not Before: May 13 04:00:52 2026 GMT
Not After : May 14 04:00:52 2026 GMT
Subject: CN=ff972f2deebc21b83e08542884854e381a1fbdd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:af:b4:74:3b:5c:1f:23:0f:a7:5c:3d:ee:7e:
7d:4e:4e:64:2d:06:be:d5:83:ce:c0:c5:3d:dc:8e:
6d:ef:4e:8a:45:02:a5:8d:20:1f:e4:c4:1b:97:3e:
46:46:5b:1c:1b:c0:23:aa:88:12:7b:7d:d2:04:d8:
dd:05:be:22:83:9c:2e:c4:9e:61:ec:a1:cf:ab:32:
40:15:ff:40:13:77:18:08:f7:f3:30:85:84:29:db:
06:69:fc:5a:1d:09:09:b8:44:1d:8d:5a:97:30:1e:
d3:17:20:bb:c1:5a:85:e4:cb:4f:e8:38:6b:cf:d8:
4d:7a:ae:d6:ec:11:e7:80:53:30:61:99:9f:26:f5:
e7:f0:17:d6:18:7b:9a:41:71:1f:6e:7e:02:c9:33:
24:7f:5d:63:38:4a:61:83:c7:71:63:6b:74:cc:46:
0c:9d:59:e1:bd:17:33:47:af:35:0a:86:7b:66:76:
1d:24:0f:95:9d:db:66:19:9c:84:b3:b5:bc:3b:8e:
ce:9e:51:f8:c4:06:5c:e5:e5:f2:67:4d:4a:1f:1c:
5e:dc:4b:21:9c:a9:ba:17:78:d5:c1:b2:a4:59:d6:
7a:d5:04:e1:ad:04:3d:ad:8c:33:58:05:86:d2:56:
5d:1f:0e:5a:ce:2f:00:8c:32:ac:7b:b8:ce:f2:6f:
29:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:97:2F:2D:EE:BC:21:B8:3E:08:54:28:84:85:4E:38:1A:1F:BD:D3
X509v3 Authority Key Identifier:
keyid:0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b4:4a:bc:0b:86:42:05:fa:17:de:37:7e:03:0c:bc:10:42:
e3:fd:5a:89:56:c2:38:64:b0:2b:b0:7e:d0:f3:f0:9c:93:33:
92:15:0f:7e:79:1d:bc:91:7d:b1:9f:be:c9:23:d5:a7:fc:8e:
9a:a3:de:e2:eb:62:1d:ba:cd:72:9b:8e:e1:6b:2b:b9:d5:fa:
07:3e:0a:b4:88:57:cb:fe:30:86:c9:28:e2:ee:f2:f6:20:91:
1a:4f:2b:0d:fa:20:f9:34:9a:59:e6:5d:70:5a:33:73:d3:e3:
b2:b1:70:ec:14:a8:c6:39:36:ae:bc:e5:77:b3:54:c1:55:f2:
a7:81:65:97:b5:9e:aa:b9:77:01:a5:2a:a7:f9:0a:68:de:ea:
e9:4b:b3:a3:90:46:8d:ac:08:15:fc:03:de:5d:cb:a1:ea:7e:
97:eb:4b:c5:62:d5:59:69:48:38:cc:bb:05:b7:e5:b2:f9:14:
05:b3:3e:b5:5d:52:0a:a2:13:64:a4:a8:f5:da:59:79:92:9f:
30:9a:32:ea:f6:ea:31:4b:8b:cf:cc:84:02:04:76:87:0d:61:
67:ff:32:6a:bd:a3:cb:92:38:4a:f9:e0:fa:a3:8e:45:3c:9e:
fb:4e:2b:f5:47:08:79:96:57:5c:ab:b1:b8:0c:1a:38:83:4d:
2b:90:88:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:09:36 2026 by rpki-client