Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
File: Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft (raw, json)
Hash identifier: iVbi4m5l2LLhP5qveABiQuNxS6ewPDIXxJVHYAT4qDk=
Subject key identifier: E3:49:25:F3:23:61:9F:9D:54:49:AA:30:CD:1E:61:B7:31:A5:3B:EB
Authority key identifier: 0F:3F:13:32:CF:F0:5B:22:A3:A6:6A:6D:4C:34:8F:BC:01:DE:11:5C
Certificate issuer: /CN=0f3f1332cff05b22a3a66a6d4c348fbc01de115c
Certificate serial: 019E1D901A8D40A3ABABD2C770BBC0FA2155
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 19:00:43 +0000
Manifest this update: Tue 12 May 2026 19:00:43 +0000
Manifest next update: Wed 13 May 2026 19:00:43 +0000
Files and hashes: 1: Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl (hash: YkVaeFIcSuLIMifqk3Of/wrwGxjz91S0sMVpNdk118U=)
2: dLnEEciYoxf4zHYKdVd3Cs6UXwE.roa (hash: fuSsuZb+gCHUO48DwmuXqWY4VCL5Q795gkNmczjB/Fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:1a:8d:40:a3:ab:ab:d2:c7:70:bb:c0:fa:21:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f3f1332cff05b22a3a66a6d4c348fbc01de115c
Validity
Not Before: May 12 19:00:43 2026 GMT
Not After : May 13 19:00:43 2026 GMT
Subject: CN=e34925f323619f9d5449aa30cd1e61b731a53beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d2:22:d6:40:67:20:66:05:f0:d0:53:db:38:
fd:ef:d4:86:94:69:50:2f:5d:c1:69:6e:83:4d:91:
40:66:37:93:e8:f6:d4:2e:a2:2e:e6:c7:5d:d3:ff:
f3:a3:18:18:73:f6:ed:55:96:cb:74:21:f3:f3:6b:
f9:f5:91:57:6b:2a:1f:58:18:2c:75:64:3d:c6:56:
14:b7:f0:4b:c4:77:30:f4:02:66:41:5c:8c:43:9d:
fd:5c:79:10:e4:e0:3a:c9:e8:96:8b:da:38:8a:ce:
26:3f:6e:a4:f9:7d:36:99:ec:77:5b:d2:8e:f8:30:
9d:a3:bb:d6:ef:b9:71:75:b1:ce:70:e2:26:f9:87:
13:f9:3a:e8:e5:39:af:cf:5e:a3:93:28:ca:bd:91:
ec:a2:50:6c:2b:34:a6:a3:e3:58:3b:be:5e:0f:c5:
2d:a1:f8:23:1b:62:4c:c4:4a:d3:1a:5e:2e:83:40:
8b:06:d9:a1:fe:63:cb:01:88:54:7a:20:49:be:54:
a7:9a:de:be:fc:b5:69:77:d4:d2:2c:8d:8b:78:e5:
65:45:44:fb:1f:d0:04:76:a7:7e:90:8c:03:7d:8d:
1c:05:fb:8f:4c:36:70:8d:2e:78:cc:6f:6b:53:e9:
b5:cb:61:c0:12:93:d1:bf:f0:ba:27:34:12:dc:97:
21:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:49:25:F3:23:61:9F:9D:54:49:AA:30:CD:1E:61:B7:31:A5:3B:EB
X509v3 Authority Key Identifier:
keyid:0F:3F:13:32:CF:F0:5B:22:A3:A6:6A:6D:4C:34:8F:BC:01:DE:11:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:2c:42:f3:5f:99:06:48:89:81:86:be:c6:d2:c5:17:14:9b:
47:1c:8a:a5:04:42:23:2f:3c:ce:ef:5b:cb:8d:1d:33:e0:60:
42:99:f8:1f:3d:8e:00:d7:e4:35:98:b6:c2:29:c9:bd:d4:f2:
57:ad:87:2c:50:a2:a8:05:49:61:eb:01:d5:14:35:2b:7c:1c:
83:83:19:8f:24:d3:e7:ca:b6:ae:55:a8:f6:d2:e7:41:fe:23:
68:25:3e:db:e4:3b:a0:96:a3:84:4c:2d:b8:10:37:95:a7:0e:
91:bc:fd:29:b5:04:8c:aa:8b:00:c2:8e:c2:db:73:6e:1b:51:
7c:b4:39:4a:0f:1d:ad:76:87:16:4b:30:9f:0f:23:2c:92:f9:
eb:21:79:2f:0a:4c:5d:eb:8d:03:75:0b:2c:86:6b:6e:50:66:
07:06:fc:5e:a9:ae:56:8f:9e:95:15:ec:bb:76:ea:7b:68:e8:
9e:1f:86:f1:8a:5a:a8:b1:07:71:54:78:40:79:e2:1e:e9:b6:
8c:a1:17:0e:a3:c4:f5:f7:9b:6b:10:f4:bc:ef:45:9f:22:8c:
a0:25:f9:31:9c:67:dc:72:82:ff:7d:99:1b:8a:ac:b5:d0:a6:
a9:ff:05:78:fc:7c:30:ca:e6:de:1f:53:b1:8b:af:c5:84:49:
e5:68:bc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:09:32 2026 by rpki-client