Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
File: dRSDZVs1orhHGF9onI_RYB3McYc.mft (raw, json)
Hash identifier: qxkMrzQTEbQzImwYSQSgpdaiG2D9z9gs8Im2kmeORgg=
Subject key identifier: C0:CF:B5:81:56:49:16:58:9C:66:A0:EE:63:DB:F5:DD:0D:A8:41:7E
Authority key identifier: 75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87
Certificate issuer: /CN=751483655b35a2b847185f689c8fd1601dcc7187
Certificate serial: 019E1E3578CF3994D2BBB7A3FC736E948A76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 22:01:21 +0000
Manifest this update: Tue 12 May 2026 22:01:21 +0000
Manifest next update: Wed 13 May 2026 22:01:21 +0000
Files and hashes: 1: as_rlXqJ-9X5yyFioptlwk_3ywE.asa (hash: WOqxDpfG0009xOfBOkYF5jMYghhxHEkdiXrFFzH+iVs=)
2: dRSDZVs1orhHGF9onI_RYB3McYc.crl (hash: e2I4n5QtMwQ7KS0eI8RnaMMsJ80eS3+NPb9/ZGiXJW8=)
3: mCi8IXM78zEe8k6a11x1wQYJJHk.roa (hash: XXRc/LdihJuiCQ6i4r0S3QErFt5j7/TSAtBg4nnm1BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:78:cf:39:94:d2:bb:b7:a3:fc:73:6e:94:8a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=751483655b35a2b847185f689c8fd1601dcc7187
Validity
Not Before: May 12 22:01:21 2026 GMT
Not After : May 13 22:01:21 2026 GMT
Subject: CN=c0cfb581564916589c66a0ee63dbf5dd0da8417e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:64:98:d6:81:72:cf:07:ee:58:ac:b3:0f:a7:
92:b1:f0:e4:75:70:42:3e:c2:47:16:0c:d0:c6:a2:
27:34:bb:a5:6a:6c:99:a4:26:d5:2c:6c:85:a7:d1:
50:86:ba:2c:be:8b:d6:9a:a6:99:53:94:9e:f4:b5:
80:0f:e2:67:8e:d0:df:2f:ad:91:23:03:84:11:72:
06:b2:54:a1:f7:f2:e8:ec:77:7d:5c:75:bc:65:32:
f2:d8:d1:92:28:52:0f:27:66:01:54:d0:0b:31:26:
33:25:b1:f7:46:d6:8e:b6:6e:d3:4d:ad:0d:48:b4:
46:87:08:4c:8c:77:1b:b4:3c:08:bf:d1:2a:cb:3f:
fe:32:3b:d1:93:be:5d:58:43:50:bf:4b:4b:b7:bf:
1b:9f:ac:16:c1:d9:7e:76:66:e7:24:40:77:13:47:
2c:a6:41:b4:5e:fe:03:86:d0:ff:fd:30:09:41:20:
fa:25:9b:5c:ab:da:c7:9f:e1:55:01:95:63:c8:34:
dc:81:2f:e2:d0:f5:e3:a3:15:5c:b5:be:cf:86:15:
5c:f4:a3:95:39:07:c3:8a:ed:b0:9d:1e:4b:1f:6c:
2f:7e:eb:67:a7:8e:6e:91:8a:02:45:85:b4:7a:e0:
97:59:af:34:3b:9b:7f:15:36:92:c6:da:87:d2:14:
4b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CF:B5:81:56:49:16:58:9C:66:A0:EE:63:DB:F5:DD:0D:A8:41:7E
X509v3 Authority Key Identifier:
keyid:75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:cb:17:26:ad:ec:91:7a:b0:e8:71:a3:fc:b6:b3:1b:97:57:
bf:d2:6e:b6:ce:ad:cf:0a:eb:d4:2d:7f:d3:c3:92:04:db:54:
93:f8:b6:ff:e1:af:82:99:ea:e7:71:0a:e9:5a:12:a1:06:e6:
e4:6c:a3:61:79:a5:ac:fb:78:10:56:7a:63:82:04:53:ec:9c:
1d:6b:1f:22:c5:b6:7b:cd:b4:85:0d:be:07:09:5d:f9:99:37:
78:41:87:54:25:79:cc:df:66:01:45:53:c6:3c:df:59:bb:40:
14:82:bf:ba:13:00:04:fb:72:1d:a6:f6:44:98:c1:fb:03:ec:
78:e5:e8:40:27:7b:55:22:15:79:ed:92:b6:73:ee:f4:18:5f:
b3:17:50:e9:50:6e:f0:43:ff:c7:90:d2:9c:1f:fd:30:3a:7c:
6a:3d:7b:68:5d:cc:17:fb:4b:2c:7f:0c:8a:d0:22:52:72:e7:
2e:bc:4c:5e:56:84:4a:21:6f:04:8f:2b:1b:a8:43:3b:ad:60:
a6:e3:39:79:84:39:e5:24:ca:fc:66:8d:85:44:a0:f4:f9:4a:
be:07:aa:0b:b3:97:28:2f:22:f6:66:88:12:24:c3:17:c4:c1:
fe:c9:c9:39:ea:d3:10:c0:eb:11:a8:a0:56:ff:17:a6:18:50:
cc:b2:0b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:33:27 2026 by rpki-client