Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/cd33f9-4f04-4983-a43a-3a8231edb46c/1/DSC_pCDAzV9fGNuOe9o1X-joW30.mft
File: DSC_pCDAzV9fGNuOe9o1X-joW30.mft (raw, json)
Hash identifier: /vzABcv2z2+5l4pLHRm6WJUzgKUsFJJMhZ8hAXtRGhs=
Subject key identifier: 8A:EB:AA:83:86:A8:2B:18:42:A5:05:BB:C8:5A:CE:7A:B9:15:6C:EF
Authority key identifier: 0D:20:BF:A4:20:C0:CD:5F:5F:18:DB:8E:7B:DA:35:5F:E8:E8:5B:7D
Certificate issuer: /CN=0d20bfa420c0cd5f5f18db8e7bda355fe8e85b7d
Certificate serial: 019E1D9021AB75ACA79A77DBF9E204AC5B51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSC_pCDAzV9fGNuOe9o1X-joW30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/cd33f9-4f04-4983-a43a-3a8231edb46c/1/DSC_pCDAzV9fGNuOe9o1X-joW30.mft
Manifest number: 03FF
Signing time: Tue 12 May 2026 19:00:45 +0000
Manifest this update: Tue 12 May 2026 19:00:45 +0000
Manifest next update: Wed 13 May 2026 19:00:45 +0000
Files and hashes: 1: DSC_pCDAzV9fGNuOe9o1X-joW30.crl (hash: HUjLYemD+lWbgpcfzjrboQOxyDK9Euf2M7lNkhzXNZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/cd33f9-4f04-4983-a43a-3a8231edb46c/1/DSC_pCDAzV9fGNuOe9o1X-joW30.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/cd33f9-4f04-4983-a43a-3a8231edb46c/1/DSC_pCDAzV9fGNuOe9o1X-joW30.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSC_pCDAzV9fGNuOe9o1X-joW30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:21:ab:75:ac:a7:9a:77:db:f9:e2:04:ac:5b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d20bfa420c0cd5f5f18db8e7bda355fe8e85b7d
Validity
Not Before: May 12 19:00:45 2026 GMT
Not After : May 13 19:00:45 2026 GMT
Subject: CN=8aebaa8386a82b1842a505bbc85ace7ab9156cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:20:44:c4:5e:a2:38:a3:7f:5d:60:ea:c4:44:
fc:b2:ff:3e:98:09:08:f2:84:cb:ce:19:61:7d:d1:
11:59:a4:f7:e2:7f:a0:8e:59:a7:a6:51:e5:36:08:
95:ca:e9:f0:f4:32:21:8e:ff:35:bf:3f:21:e6:fd:
64:98:d1:57:74:6f:ad:b3:b5:8a:f8:e6:f6:68:4c:
d4:d2:95:6d:e7:32:c8:73:eb:72:a9:57:37:5d:21:
54:22:27:33:f5:bf:ae:8e:de:f8:09:2a:e7:20:91:
09:d0:a3:a0:ef:a4:34:b0:5c:c6:07:f6:ac:9e:ff:
99:76:3b:81:09:bc:f5:80:45:84:22:28:ca:4a:0c:
a2:5d:eb:3f:b5:36:d5:43:27:11:fa:06:93:c6:a1:
10:21:9e:61:74:95:dd:fa:24:94:5c:5b:ac:cb:98:
1c:69:0f:86:69:a6:25:ab:1c:f1:e6:53:cc:eb:be:
db:40:ae:36:d5:be:45:b7:c7:21:42:90:b1:e2:cc:
de:35:80:15:71:eb:48:30:a9:05:89:f0:c1:0c:b4:
c6:0c:86:d3:ff:10:92:63:8d:bd:0f:e9:bf:fb:8f:
59:71:36:c8:9a:45:24:37:49:01:90:94:01:09:44:
15:1d:39:99:e2:b7:1f:f4:38:d6:fb:39:b3:ef:d9:
1c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:EB:AA:83:86:A8:2B:18:42:A5:05:BB:C8:5A:CE:7A:B9:15:6C:EF
X509v3 Authority Key Identifier:
keyid:0D:20:BF:A4:20:C0:CD:5F:5F:18:DB:8E:7B:DA:35:5F:E8:E8:5B:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSC_pCDAzV9fGNuOe9o1X-joW30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/cd33f9-4f04-4983-a43a-3a8231edb46c/1/DSC_pCDAzV9fGNuOe9o1X-joW30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/cd33f9-4f04-4983-a43a-3a8231edb46c/1/DSC_pCDAzV9fGNuOe9o1X-joW30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:11:f2:fc:0a:1e:0f:56:20:8b:7f:2c:43:4d:58:1d:81:57:
3f:d8:c5:60:f6:78:24:7d:78:86:9d:21:0b:3d:1e:92:07:88:
cc:9a:ee:b3:ee:22:16:d9:d7:38:c7:c5:dc:2b:72:d5:a2:14:
4e:bb:c5:e8:3f:ff:ca:a9:1f:f5:98:a2:43:27:86:a6:98:d8:
8f:02:8d:71:86:94:92:fa:7c:5e:76:5c:26:ad:cc:d6:87:62:
a0:99:61:1f:2d:23:0e:c9:6a:19:15:c3:a3:25:7a:da:b9:d4:
6e:d3:73:bc:13:d4:48:ae:cb:3e:23:d4:d9:09:82:38:f2:50:
4f:e9:3a:59:11:a8:fd:87:c4:76:e3:2d:a2:e0:74:19:b1:ad:
4f:99:7a:1e:c6:5c:06:89:7e:21:6d:c8:fa:8c:74:61:9d:e5:
88:46:da:02:64:ef:37:3a:ce:39:59:5d:d7:ac:d7:c4:73:9d:
3e:a8:d7:3a:67:28:de:08:93:3a:3f:59:4d:de:3d:5a:74:9a:
87:5b:62:58:70:77:89:10:21:f1:91:14:87:ae:a9:8c:37:14:
d3:a8:e1:61:36:8b:6e:f4:8d:e9:24:8e:b1:a7:17:5c:a5:f0:
d6:2b:da:f9:ad:54:15:bc:2b:db:0c:96:54:08:80:df:d7:5f:
23:64:74:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:17:03 2026 by rpki-client