Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
File: dHWiyViPxpXSdUKD3NPRI9H3eBE.mft (raw, json)
Hash identifier: VVA57CYGkSJdz6BEST/yg3hRVZ7vV35gOUHJW/aYOmg=
Subject key identifier: 9C:8D:1F:4D:12:57:3E:F4:59:E4:87:2E:43:6D:2D:48:94:96:C6:44
Authority key identifier: 74:75:A2:C9:58:8F:C6:95:D2:75:42:83:DC:D3:D1:23:D1:F7:78:11
Certificate issuer: /CN=7475a2c9588fc695d2754283dcd3d123d1f77811
Certificate serial: 019E1FEC69E31073EBD9D557D3D4BA11D54E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 06:00:47 +0000
Manifest this update: Wed 13 May 2026 06:00:47 +0000
Manifest next update: Thu 14 May 2026 06:00:47 +0000
Files and hashes: 1: B6KgFpwvViQTEk9Dmhs8MfS-w7s.roa (hash: OhVWCZDoCQizES2xkeCkzPUeD4jK/eG28KZNwsfJC3Y=)
2: dHWiyViPxpXSdUKD3NPRI9H3eBE.crl (hash: YcVMv1864eR/8iH40IlTqHzLMVwolkg1ggZ2m8tLm88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:69:e3:10:73:eb:d9:d5:57:d3:d4:ba:11:d5:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7475a2c9588fc695d2754283dcd3d123d1f77811
Validity
Not Before: May 13 06:00:47 2026 GMT
Not After : May 14 06:00:47 2026 GMT
Subject: CN=9c8d1f4d12573ef459e4872e436d2d489496c644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3e:1d:4b:17:bf:43:84:89:26:7b:3c:da:8c:
c5:32:81:3c:48:22:9b:47:81:e6:1c:f6:f6:af:ab:
44:32:05:e7:81:a2:2c:d0:50:89:c8:14:e4:d7:fe:
ac:03:b9:f6:c8:d4:ef:79:73:92:6a:57:fd:13:1e:
6a:2e:99:4c:aa:de:bc:08:3a:a2:73:d7:4e:09:a2:
14:e7:9d:37:30:73:d1:00:45:fe:23:70:08:68:0a:
d9:fa:b8:38:82:03:d0:fc:04:14:1a:dc:6a:2a:11:
d2:8f:18:23:73:96:dc:b8:15:0f:d0:f4:99:9b:ee:
32:bd:d2:72:5a:1d:14:73:5a:f2:b0:00:90:65:eb:
ae:08:7a:05:46:44:3c:d4:90:18:23:52:ce:81:13:
fe:65:13:e4:00:68:ff:84:1b:35:0c:62:67:43:2c:
b7:9b:31:e1:81:82:27:60:f1:71:e6:79:7a:ff:48:
5f:15:d3:18:d0:28:01:5d:4c:67:35:c6:41:70:07:
6d:71:61:34:db:11:9c:f2:74:90:91:02:b2:2d:a0:
e7:9d:61:b2:7b:a4:3c:db:ac:3b:56:1b:bf:ce:52:
df:a1:6b:54:0a:ea:ac:b9:39:f0:d1:53:82:26:82:
44:92:ae:e9:00:75:c5:f7:1c:5c:6b:93:be:cf:c6:
c8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8D:1F:4D:12:57:3E:F4:59:E4:87:2E:43:6D:2D:48:94:96:C6:44
X509v3 Authority Key Identifier:
keyid:74:75:A2:C9:58:8F:C6:95:D2:75:42:83:DC:D3:D1:23:D1:F7:78:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:1f:bc:03:cb:a7:36:2c:85:13:1b:32:61:f8:4c:d3:eb:4b:
be:97:a8:76:06:57:4e:36:91:7c:79:fb:f2:ab:e3:df:0d:62:
70:2a:07:42:b0:54:c9:ec:9c:ec:d8:26:d0:3c:65:fa:4e:b7:
b2:b3:77:b4:96:e0:c3:f2:0a:a1:82:33:c6:06:fa:a3:48:c8:
ad:5c:35:c7:b2:4b:8d:d4:3f:7f:c8:dd:9d:5a:e6:77:1b:57:
b0:d3:26:60:1b:ab:4e:7a:cd:a1:ba:77:6c:83:9e:c6:f6:9c:
4f:5a:c6:38:fe:1e:d8:e1:0d:a0:1f:ad:8f:99:1a:33:6f:32:
55:40:c5:d4:e8:0a:9d:47:35:f0:58:68:ff:00:c5:93:85:b2:
9d:15:92:4f:d8:5c:5f:ff:ac:c0:c7:c0:79:0f:0e:4b:95:37:
0e:0b:c2:26:98:bc:80:a8:ea:e9:33:e7:be:dd:39:6f:e2:f9:
27:4a:7d:02:66:5b:3d:8c:07:d4:2b:c1:d1:37:ea:38:31:48:
02:6a:33:1c:5a:56:1a:12:d3:6d:c9:a6:5c:54:0f:68:05:25:
a2:ab:e1:2d:62:ef:33:d8:38:44:a4:15:c4:7a:c8:4c:74:f5:
29:80:e7:4c:3e:f3:15:67:1a:5b:f2:3b:01:cb:13:8e:84:f2:
7b:af:51:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:48:02 2026 by rpki-client