Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
File: dv4wVehykAAOMof3q1iDgCpapto.mft (raw, json)
Hash identifier: 2SvRmCgzeT1RliDRlT8gaqpoAFB6VCw8MR97/B6cDyQ=
Subject key identifier: A7:D6:3C:53:A8:C7:C6:5A:FE:9F:9A:F2:DC:69:19:1B:5D:5F:D8:39
Authority key identifier: 76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA
Certificate issuer: /CN=76fe3055e87290000e3287f7ab5883802a5aa6da
Certificate serial: 019E1F10E398E666EFEC77FCF839A30DAA8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
Manifest number: 0C2F
Signing time: Wed 13 May 2026 02:01:00 +0000
Manifest this update: Wed 13 May 2026 02:01:00 +0000
Manifest next update: Thu 14 May 2026 02:01:00 +0000
Files and hashes: 1: 0ySGeIDrXtZFxjKASUMVzdc0Dlc.roa (hash: l2+MJdgyr6VqnECFLRIqzXDoWHq/3WTx2ApaEcFXd9c=)
2: 2MIYePrvuVOPunZ0cCU587P-UNo.roa (hash: 87FdzdFETynQoJd/9d3TWFG9LHhJseAqTkXpKmEANyg=)
3: dv4wVehykAAOMof3q1iDgCpapto.crl (hash: hgJZiWjnkcKY0rJbaJbyvTHdlyyZ4VaewB3sq19WUcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:e3:98:e6:66:ef:ec:77:fc:f8:39:a3:0d:aa:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76fe3055e87290000e3287f7ab5883802a5aa6da
Validity
Not Before: May 13 02:01:00 2026 GMT
Not After : May 14 02:01:00 2026 GMT
Subject: CN=a7d63c53a8c7c65afe9f9af2dc69191b5d5fd839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:17:22:d9:1f:c2:fe:3b:cc:0f:26:14:6f:a1:
58:fe:e0:89:5a:7d:47:37:9b:89:0b:dd:2f:94:ca:
be:87:f9:ac:23:c7:e4:40:49:14:72:5a:0b:01:db:
56:4e:30:a9:ac:c1:93:bb:b4:4a:1a:23:39:bf:1d:
69:f7:41:9e:53:3d:77:20:37:59:1e:d4:13:a2:ce:
8f:82:ec:7b:6f:b1:01:f1:4a:9b:74:a1:a9:8f:69:
74:07:ae:8e:79:8e:af:4a:f7:64:90:7c:41:4f:c8:
9c:f0:0a:32:27:6e:aa:2a:14:8d:d4:d9:78:e2:72:
02:20:1e:78:6b:92:93:49:37:ef:cb:ca:82:4a:ee:
fe:52:d1:99:72:7b:f3:39:10:09:00:90:45:be:97:
6d:02:3a:19:ba:29:50:41:73:0b:7f:82:cd:1c:ca:
80:dd:99:eb:3c:57:5f:4b:1e:5c:a5:f5:86:91:78:
db:53:a6:85:04:fe:8e:e8:b7:cf:3d:c6:f0:b5:58:
51:8a:20:ba:4e:82:61:07:85:bb:da:60:b2:8e:75:
b9:6f:54:f4:08:19:bc:c7:51:be:19:be:fb:68:93:
13:a8:21:fd:d3:11:28:68:20:01:e2:46:1f:51:01:
5a:39:95:c0:ff:49:23:af:43:54:7b:a1:0c:3e:10:
83:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D6:3C:53:A8:C7:C6:5A:FE:9F:9A:F2:DC:69:19:1B:5D:5F:D8:39
X509v3 Authority Key Identifier:
keyid:76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:bc:4f:b4:62:84:f3:31:9f:ce:05:a8:6d:03:af:3a:2c:75:
b5:02:ea:55:49:8b:d4:87:67:b0:e7:97:02:f6:51:db:85:6d:
c7:74:cb:fd:b1:75:2d:28:98:b1:34:17:c7:f3:df:c8:48:c5:
1e:fa:48:a7:d6:77:db:fb:89:71:0b:ab:97:e3:27:53:08:3d:
d0:17:b5:1c:c4:61:88:1a:de:4c:89:ea:f9:8f:bc:71:9e:79:
69:70:5b:26:49:27:a6:ab:4d:28:96:ea:bf:d5:ab:d0:ea:3a:
c4:2c:bb:9b:5b:aa:fd:06:08:7f:08:16:61:21:1f:cc:83:fc:
42:c8:ba:ff:54:7c:3b:4a:84:e5:44:93:5d:0a:23:04:fd:5a:
46:47:28:e8:34:3b:cd:b2:78:2f:60:75:f8:d5:06:d2:b6:69:
fc:96:94:e1:a1:70:b8:98:f9:38:ac:17:24:15:03:a0:d7:58:
21:63:fd:c6:07:a5:f2:a3:43:d2:6d:6f:fb:a8:23:ec:25:15:
ce:1f:11:40:74:3b:21:3d:12:97:33:3f:98:23:76:22:96:a0:
da:c8:79:48:a3:21:2c:12:be:98:35:7f:70:57:02:32:63:dd:
ea:dd:27:fb:76:d7:d3:ad:89:a7:f8:40:47:64:26:a1:a2:ac:
f7:49:f6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:31:54 2026 by rpki-client