Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
File: dxvOKaNsveiYrABwfblRQ_hqeSI.mft (raw, json)
Hash identifier: +KfwJ6/2HDX2enCkROWVdgwONYYbCadTfeh9MYa+PZk=
Subject key identifier: B1:00:4E:48:58:05:9D:B5:D9:8C:88:E6:FA:CA:06:2C:54:27:E5:D6
Authority key identifier: 77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22
Certificate issuer: /CN=771bce29a36cbde898ac00707db95143f86a7922
Certificate serial: 019E1EA2E7FB6458E9755E1C805C97CB237E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
Manifest number: 10E5
Signing time: Wed 13 May 2026 00:00:53 +0000
Manifest this update: Wed 13 May 2026 00:00:53 +0000
Manifest next update: Thu 14 May 2026 00:00:53 +0000
Files and hashes: 1: dxvOKaNsveiYrABwfblRQ_hqeSI.crl (hash: Qvk5qi+un+S3N+qoQCqy4TqX2IocPyKRA5lB8Go/eA4=)
2: qZ8aQgjdabGbDv-i6H620T5YhwY.roa (hash: UdXrLbOlQenxMN6hG/0L/eJWuifEwthlbNrK+9DhFyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:e7:fb:64:58:e9:75:5e:1c:80:5c:97:cb:23:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771bce29a36cbde898ac00707db95143f86a7922
Validity
Not Before: May 13 00:00:53 2026 GMT
Not After : May 14 00:00:53 2026 GMT
Subject: CN=b1004e4858059db5d98c88e6faca062c5427e5d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:12:ac:19:64:a6:f9:3a:23:36:78:8b:fc:80:
30:59:0e:10:11:de:97:25:63:db:51:18:f2:a6:88:
fa:f0:23:07:a2:a5:3c:ce:87:71:63:c9:98:a1:00:
0a:02:6e:b3:ea:1d:51:a4:de:64:85:f8:ed:e9:ae:
20:ae:42:69:fb:1f:8a:cf:45:11:99:25:6e:a0:fd:
7a:44:90:ff:c4:da:04:24:25:83:e2:5f:da:c4:35:
74:42:00:b8:40:39:60:03:b6:f3:a6:04:73:b5:ff:
4f:33:fb:0a:eb:83:28:2b:c0:c2:ef:7c:5b:95:ca:
7d:5a:6e:a6:f3:65:67:56:68:47:d3:ad:ff:7a:5c:
1d:90:28:7d:7f:aa:e8:85:bd:d1:0e:3e:be:67:3f:
e3:e8:de:c2:82:a1:9e:00:9c:91:1b:3b:4d:b6:f3:
88:20:66:8b:ab:46:68:bb:19:45:92:75:65:06:28:
0a:de:8e:37:15:86:2a:00:37:af:26:df:f3:6b:de:
af:9c:89:17:86:fb:e4:9e:3b:86:a0:6e:47:db:71:
56:ab:27:b4:d8:a7:93:37:92:e5:9f:54:83:b7:6d:
2b:c8:2a:b6:96:a2:27:75:1c:33:51:62:b1:4e:8d:
e9:04:53:6d:49:82:13:6e:cf:a0:d1:34:4f:b8:7a:
d2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:00:4E:48:58:05:9D:B5:D9:8C:88:E6:FA:CA:06:2C:54:27:E5:D6
X509v3 Authority Key Identifier:
keyid:77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:dc:01:87:7d:fc:76:ea:74:60:95:55:58:d7:d6:19:e9:44:
10:99:d5:e1:1c:87:ba:f1:5c:30:2a:4c:ff:55:21:bf:bd:94:
31:b5:4e:95:76:45:96:8c:d7:76:ad:39:c3:3b:b2:d3:90:19:
21:3e:20:f5:34:14:a7:16:26:85:2f:ac:e8:f5:da:e2:39:4a:
1a:c1:90:04:03:dc:d8:d6:81:1e:83:13:96:ff:3e:d0:72:80:
b3:d6:2e:ad:8e:d2:6c:94:2b:75:87:86:48:b7:e0:e5:67:7b:
ce:18:f4:69:88:81:e4:ff:87:8b:13:95:1c:fc:d3:79:85:ab:
c1:1c:90:9f:d0:b5:47:2c:e5:91:cc:cc:84:7f:cc:e7:05:32:
f6:df:09:a7:4b:4e:e3:37:82:89:f0:60:56:29:63:e7:79:52:
c2:c5:b6:65:65:e4:ef:82:ca:26:14:1b:d3:6f:7a:a9:6e:bc:
11:ff:e3:bf:68:63:d2:0e:54:be:cd:3b:6a:74:d0:ad:b8:ac:
4b:54:2e:b8:8e:c4:16:b5:a7:2c:b7:e8:61:29:66:17:52:b6:
f8:43:56:d4:36:e7:05:97:92:46:72:81:29:2c:4b:8a:10:fb:
09:08:59:01:a2:8a:cd:18:96:3c:a5:ed:2c:8d:1a:e0:2c:6f:
7b:48:01:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:59:09 2026 by rpki-client