Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
File: D-cy5rJJCT55oaUHy82BlvAYF_o.mft (raw, json)
Hash identifier: EuV5Fd8lnYieXIUuTeNn+ANKrPyWziOT9nBS8BTd68M=
Subject key identifier: 08:D3:E3:B7:A6:0C:F2:0E:C4:5F:1B:A5:CA:0B:D4:5E:B5:64:FE:56
Authority key identifier: 0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
Certificate issuer: /CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Certificate serial: 019E1D5992229FE4BD41FE6E601855D428E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
Manifest number: 139D
Signing time: Tue 12 May 2026 18:01:09 +0000
Manifest this update: Tue 12 May 2026 18:01:09 +0000
Manifest next update: Wed 13 May 2026 18:01:09 +0000
Files and hashes: 1: D-cy5rJJCT55oaUHy82BlvAYF_o.crl (hash: +MeaxpqaMzIePHRNIwwWC41a9TMihKc7fYS9S2tyDxk=)
2: KRcQChyIkdk17z-o88DTXwkNu_Y.roa (hash: k4ZBkPTraQNZ31kK5NnaOy56WVAVKO/c8Q/xt3FDIoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:92:22:9f:e4:bd:41:fe:6e:60:18:55:d4:28:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Validity
Not Before: May 12 18:01:09 2026 GMT
Not After : May 13 18:01:09 2026 GMT
Subject: CN=08d3e3b7a60cf20ec45f1ba5ca0bd45eb564fe56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ad:7a:88:9b:4d:ba:90:0b:82:87:61:2f:33:
20:3c:30:8d:f3:af:0b:e2:4e:e0:42:15:ef:eb:4f:
2d:23:0e:92:6a:85:76:7c:26:9f:27:77:6b:75:c7:
ec:cf:d8:ce:af:43:6e:3f:76:d6:40:79:52:2d:42:
e9:ee:7b:d6:2c:a6:58:c9:4e:55:72:64:ed:5a:6c:
b8:d3:8c:5b:d4:5b:e0:8f:2e:96:d9:d3:ab:49:c6:
fc:b5:5e:3c:1b:d3:70:e2:b8:e2:03:1b:3a:51:0f:
2c:ae:d9:35:2b:cf:6c:d5:8b:50:78:1b:aa:c8:1f:
9e:b8:70:51:bc:ba:9f:f2:4e:60:14:a9:bd:59:8a:
dd:2a:9b:6e:13:73:d3:7e:10:2f:c8:58:c3:7e:ed:
9e:70:1d:e2:ea:cb:d2:c5:b4:01:63:c7:8e:ab:02:
c3:2f:06:c5:78:9f:1b:c2:98:89:22:85:38:b6:fa:
01:c1:e8:83:5f:84:3e:19:2d:cb:7a:4c:94:0e:20:
74:03:d3:cc:fe:df:e7:d0:88:62:9d:bd:f5:53:22:
bf:04:ce:9e:2f:52:df:07:65:71:02:06:84:d7:75:
72:f3:7c:cc:72:5f:6d:65:a4:68:7c:96:3d:63:6d:
b6:93:c0:76:4e:45:72:4a:42:56:de:70:8c:42:62:
0b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D3:E3:B7:A6:0C:F2:0E:C4:5F:1B:A5:CA:0B:D4:5E:B5:64:FE:56
X509v3 Authority Key Identifier:
keyid:0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:44:c0:0d:96:ce:11:7c:8b:49:23:86:2d:0e:7d:18:8c:6b:
2d:01:55:b3:31:52:95:d4:a3:12:56:c0:bf:12:4f:23:cc:b0:
68:55:34:29:38:37:7d:87:be:33:6a:b0:81:1d:8a:0b:d0:9d:
4a:35:c0:bd:72:83:8e:ae:5a:47:bc:20:39:42:d5:8d:51:a6:
b9:79:4b:e5:1f:4a:92:ca:99:9c:aa:4c:ec:08:63:70:b9:9e:
96:2b:a6:dc:78:bd:ab:10:3c:af:9c:3f:f9:99:1d:0d:0b:f9:
99:7e:21:1d:6f:f5:5e:d5:6f:54:af:88:b3:1a:7d:02:a7:eb:
9f:d6:3d:a6:73:78:da:c4:d2:48:de:99:25:df:b8:ac:e0:ac:
14:f3:15:e8:2e:9f:ba:b4:65:c6:4d:7f:60:8c:0a:24:e0:4f:
db:6d:c0:60:b9:d0:a7:e0:56:5f:ff:94:e6:d3:d2:e1:b3:71:
6b:a7:0e:19:20:9e:db:7d:56:76:df:ac:6d:78:7a:c2:8a:a2:
78:a4:ea:c7:9b:a9:78:e2:a4:51:e0:26:c2:2b:d6:8d:34:6f:
f1:e7:21:8e:18:ef:6c:a1:fd:e1:6a:81:2f:7b:fd:b3:02:65:
cf:66:95:df:0b:d9:ba:87:0a:81:5f:d6:5b:eb:6b:5f:24:79:
50:b4:d3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:30:55 2026 by rpki-client