Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
File: dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft (raw, json)
Hash identifier: rNHfTw5LUoiFR43oE1MQfju9FII/p/5yWnfXXdYxNDI=
Subject key identifier: 91:72:54:AF:90:57:FC:06:35:4A:46:13:14:DB:26:37:E1:17:52:AE
Authority key identifier: 74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26
Certificate issuer: /CN=742488f0d9b4b171a2e2f0fa559b43f9a5b32e26
Certificate serial: 019E1EA3756B761403526A23449B5FE2672C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
Manifest number: 0875
Signing time: Wed 13 May 2026 00:01:29 +0000
Manifest this update: Wed 13 May 2026 00:01:29 +0000
Manifest next update: Thu 14 May 2026 00:01:29 +0000
Files and hashes: 1: dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl (hash: r6yypKwt/o7tQ3KcdLkq/c+NH1v2+HERMYhl7GwDoPo=)
2: fe3bi-doKDNu4dmU6DR8DAdVKZc.roa (hash: OoARVSCOyCQLc2Hu8VCrhllOD8R6T0zZ8zONXrdJeEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:75:6b:76:14:03:52:6a:23:44:9b:5f:e2:67:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742488f0d9b4b171a2e2f0fa559b43f9a5b32e26
Validity
Not Before: May 13 00:01:29 2026 GMT
Not After : May 14 00:01:29 2026 GMT
Subject: CN=917254af9057fc06354a461314db2637e11752ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f0:0a:eb:ba:95:a7:19:99:23:55:da:d9:8f:
11:d7:8a:db:a2:59:0d:bf:77:e6:0e:44:a4:d5:b3:
88:ef:12:af:c6:8d:96:b8:7b:8a:e0:b2:01:2c:fb:
8c:58:49:a1:38:36:43:c3:c2:04:99:81:98:0c:34:
3d:d9:ef:ee:6d:49:d3:f6:5f:05:8e:d9:fa:64:58:
2b:5f:1b:fd:cc:e1:46:c0:10:c8:98:79:5a:44:b3:
f5:1b:09:ac:4a:2a:00:06:df:f4:9b:eb:16:1c:51:
af:ec:1f:d0:33:d7:96:22:fa:24:13:7a:c1:91:ed:
61:96:7d:4a:49:ed:2a:25:94:17:2f:c0:3c:b7:05:
48:54:fc:be:93:d1:73:ad:8e:55:56:d3:50:b6:2d:
80:fa:1c:93:5e:72:e9:be:e2:a8:66:ce:a0:8f:72:
df:56:d4:c9:90:2e:78:91:6c:99:76:51:99:2e:40:
58:c2:8a:cf:c8:c2:62:4c:74:4a:fa:69:99:14:b9:
17:2c:ae:0b:6a:c9:fa:d2:a8:cd:44:4a:93:33:2b:
0c:fa:2e:f2:70:24:e6:3a:c1:08:7b:19:63:b4:f2:
ac:e1:25:20:f8:cd:bf:a6:9d:77:18:99:72:0d:c6:
cf:f5:77:8b:d0:46:c4:28:e2:be:4c:dd:e3:b4:4b:
ad:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:72:54:AF:90:57:FC:06:35:4A:46:13:14:DB:26:37:E1:17:52:AE
X509v3 Authority Key Identifier:
keyid:74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c7:bd:53:0c:08:29:48:fa:e0:57:84:4f:f2:55:54:8b:32:
1b:ae:fc:82:be:d6:b9:6e:86:09:45:58:73:43:b5:7b:fb:34:
98:20:38:fc:17:d6:85:a3:46:a9:58:74:03:a3:c9:67:22:00:
32:87:09:ee:fd:47:97:77:23:6a:17:56:52:4a:85:dd:bd:40:
42:e2:17:44:f1:aa:25:14:ce:a1:20:54:63:77:19:95:92:c2:
97:fb:41:e5:f3:eb:67:e4:f8:cc:83:eb:8b:fc:eb:d0:65:c9:
f7:93:d1:54:f5:5b:9d:c5:d4:9c:8d:67:39:98:2e:b7:de:6d:
bb:26:e9:da:76:54:c5:c7:35:5f:49:c7:d0:36:d2:6d:c2:b1:
6e:c0:bc:96:5c:a5:a5:ae:09:a4:84:40:09:7c:b4:b8:57:a8:
b8:49:42:0d:86:bb:87:a7:54:c7:6f:6d:7e:a1:78:d9:cb:22:
21:6a:0a:00:55:5f:4a:f8:b8:08:ce:6a:6e:ec:51:55:e5:0c:
80:90:80:3c:6a:d4:b9:2f:5a:fe:5c:15:5e:a8:66:17:93:0e:
5e:8a:5e:f7:5c:66:d1:05:dd:e3:2e:88:d7:f5:d3:97:be:c7:
86:c7:16:c9:ca:7e:a3:7a:ec:48:f7:67:ca:3a:e1:e8:8c:31:
e3:7d:24:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:16:03 2026 by rpki-client