Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
File: DT66aHPFtQdbPEOff-61SvHxDak.mft (raw, json)
Hash identifier: ODN4Ef6OqFdxN9qkxAdMtvAj987GKU54NUVOq6L5UAk=
Subject key identifier: 1F:11:08:FA:0B:05:2B:CF:9D:07:DB:9C:C6:15:15:E7:66:B6:86:59
Authority key identifier: 0D:3E:BA:68:73:C5:B5:07:5B:3C:43:9F:7F:EE:B5:4A:F1:F1:0D:A9
Certificate issuer: /CN=0d3eba6873c5b5075b3c439f7feeb54af1f10da9
Certificate serial: 019E1CEBA5C5D41B9DEF20183B4381C03864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
Manifest number: 190D
Signing time: Tue 12 May 2026 16:01:05 +0000
Manifest this update: Tue 12 May 2026 16:01:05 +0000
Manifest next update: Wed 13 May 2026 16:01:05 +0000
Files and hashes: 1: DT66aHPFtQdbPEOff-61SvHxDak.crl (hash: VEhzCrCsXkqs+DD0S7cfw2q8E/oqhnly1HKBeliYZfA=)
2: UHX8LoJItxLXbSSkLElmcrzzhts.roa (hash: j+K6pcnA4SNCVnoj07hqtnhu76mvNIjpIA6tG3zdI5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:a5:c5:d4:1b:9d:ef:20:18:3b:43:81:c0:38:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3eba6873c5b5075b3c439f7feeb54af1f10da9
Validity
Not Before: May 12 16:01:05 2026 GMT
Not After : May 13 16:01:05 2026 GMT
Subject: CN=1f1108fa0b052bcf9d07db9cc61515e766b68659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9b:4f:e5:a5:7f:36:92:fa:e1:fd:2d:ef:e7:
f8:aa:0b:ae:38:b8:f0:95:54:2b:f2:eb:8c:25:b3:
81:61:aa:2b:fb:75:fa:09:6a:f8:54:8f:6e:c1:44:
1d:ae:4d:00:14:4a:b7:78:2f:f3:d2:52:9f:8d:04:
46:3f:fb:62:03:71:ba:f2:3f:38:66:96:c4:5b:c5:
d5:40:6d:dd:ba:27:a9:ee:d4:42:22:85:fe:63:d0:
75:04:43:6c:7a:bd:f6:03:64:ca:79:3d:9a:58:ba:
c1:f8:37:6a:8d:2d:7e:37:f5:0f:0a:95:3c:de:3a:
87:d9:41:2a:ad:a0:3c:7a:27:60:2a:28:73:0b:01:
71:a2:c0:b7:ff:27:82:27:22:0b:7f:53:54:b7:1c:
35:d1:76:65:f8:27:f7:b1:57:da:5b:1f:be:23:9b:
c0:33:94:f1:a1:48:35:de:ca:33:5b:80:89:b7:c2:
02:ad:76:92:e3:53:c8:e9:c3:d5:ab:e1:07:b4:5a:
c1:27:f2:bc:f7:bf:64:cf:9c:9b:f1:6c:d9:2e:b2:
ec:4a:d4:a8:16:ae:ea:c6:46:89:f7:35:6c:cc:4a:
c0:5e:57:06:32:34:82:15:6a:aa:46:07:47:7e:cb:
25:50:ae:7c:19:61:6a:7c:ae:e7:40:7e:8c:cf:76:
78:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:11:08:FA:0B:05:2B:CF:9D:07:DB:9C:C6:15:15:E7:66:B6:86:59
X509v3 Authority Key Identifier:
keyid:0D:3E:BA:68:73:C5:B5:07:5B:3C:43:9F:7F:EE:B5:4A:F1:F1:0D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:58:80:bc:04:41:17:fc:a8:7c:72:9c:b5:41:85:41:e8:eb:
fd:a6:b6:a5:d9:fc:b2:30:a6:08:83:ee:46:ad:ea:9c:c0:7c:
15:ec:bd:3c:c9:39:8f:fd:9e:ee:d0:44:bd:ec:d3:86:58:c8:
8c:69:cc:bc:1b:67:2e:ab:65:de:d4:38:ef:89:e9:fe:8d:a4:
99:b6:df:40:b3:ad:ad:60:5a:71:00:58:e6:ac:c0:1f:11:8a:
6f:23:a9:a9:ab:6c:58:8f:00:81:67:ab:a8:50:5c:1a:c5:a6:
e8:26:e3:fd:e3:6f:d0:94:e0:a4:3d:f2:de:2b:9f:a7:6b:39:
71:53:d5:57:c3:4a:3d:65:b3:00:6c:66:50:c7:52:b4:5d:ff:
68:d9:e8:65:c8:37:5e:ba:c9:69:d9:ee:ab:00:e4:5a:cb:63:
e3:df:ba:1b:42:6b:dc:c1:fd:ed:49:20:28:bb:cc:1a:d5:05:
9a:b0:22:a0:35:a2:83:4c:34:58:77:47:15:ed:6c:d5:da:d0:
c8:d3:31:b2:1e:1e:ad:14:b7:b5:9a:f9:22:98:b3:60:b6:5b:
52:0c:ad:c0:eb:dc:b8:05:b7:bc:93:19:fa:b9:31:78:99:ed:
e4:ca:bf:7c:45:c8:ea:e8:b8:a3:ab:0b:bc:72:af:1d:a7:c6:
07:a9:b7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:27:22 2026 by rpki-client