Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
File: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft (raw, json)
Hash identifier: FjyQXzGs1WXZud5HIO/GRSUyk6zzL8B+WqoTA3G0rQg=
Subject key identifier: 9F:1B:E1:69:48:0E:F5:77:14:0D:F0:10:B0:9F:1D:13:B9:D2:45:11
Authority key identifier: 0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A
Certificate issuer: /CN=0c5e870d31ca7019951370cb221f18f1f09fa58a
Certificate serial: 019E1C476223A280418F54E0C79485AF5E21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 13:01:40 +0000
Manifest this update: Tue 12 May 2026 13:01:40 +0000
Manifest next update: Wed 13 May 2026 13:01:40 +0000
Files and hashes: 1: 1TwtEwBMlCxF8zqgEDzuBJ_MkQk.roa (hash: TD25ePA+FEqAqKpKYIGbiC60SkZANZcldOpqjTjdHRs=)
2: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl (hash: RK2u+76KupmtdkqUQl8ri88jNUD91AIxwsaW0lZGr5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:62:23:a2:80:41:8f:54:e0:c7:94:85:af:5e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5e870d31ca7019951370cb221f18f1f09fa58a
Validity
Not Before: May 12 13:01:40 2026 GMT
Not After : May 13 13:01:40 2026 GMT
Subject: CN=9f1be169480ef577140df010b09f1d13b9d24511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5c:4c:88:35:4d:28:55:08:32:94:e9:27:c7:
ff:25:7e:1c:93:18:8a:2d:4d:29:bb:10:74:88:21:
8f:fd:8f:4f:bd:51:6a:ee:dc:ec:39:28:bc:39:69:
29:b9:cc:12:c7:e1:97:08:61:25:6a:9f:3a:3f:fc:
4f:70:88:b0:ac:8b:72:33:f1:54:e0:15:fb:45:58:
ee:54:20:a8:a7:d9:fa:0d:92:14:b3:6e:3b:2c:03:
de:a8:57:cd:8a:58:49:2f:d0:4b:67:c4:0d:1a:2e:
2e:39:e6:c1:96:7d:01:b6:0c:9d:4d:1d:56:f8:cc:
40:0e:e3:74:85:e5:14:16:46:20:be:5a:09:cf:c8:
68:57:ad:7a:45:6c:fd:09:4d:a1:40:09:0e:6f:97:
80:db:04:4b:6e:58:78:21:a3:cf:76:0d:8a:b3:1a:
b6:03:7d:b4:af:ee:b5:c5:00:7a:0a:25:d4:76:cf:
56:a5:85:f1:29:77:3b:a1:a3:19:96:8f:6e:c9:f4:
3a:e2:20:e5:6b:34:c9:d1:2a:76:65:bb:59:77:84:
cc:73:9b:36:1c:bd:97:b0:a1:30:7e:77:34:a1:37:
08:56:7b:28:89:35:96:f8:98:db:6a:8d:c8:a2:33:
0b:d6:c9:d5:fd:a2:26:b2:98:8b:74:5f:d7:4d:84:
40:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1B:E1:69:48:0E:F5:77:14:0D:F0:10:B0:9F:1D:13:B9:D2:45:11
X509v3 Authority Key Identifier:
keyid:0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a7:a7:a3:ad:46:43:3c:0f:ab:fb:91:b9:cd:15:c1:93:fd:
a3:74:f5:3b:d4:af:e3:b2:b3:ac:72:20:27:df:31:ee:f9:04:
e7:6b:5a:63:85:9d:29:23:eb:db:5d:13:7a:e8:8a:b6:29:0c:
58:03:b3:fc:51:88:d8:24:28:4a:b5:fb:5b:ee:2c:20:ca:e9:
5d:28:ec:67:f9:ca:d0:4c:f2:9a:e2:d2:35:c8:39:41:2f:87:
00:bd:12:99:73:88:eb:98:5f:d9:18:fa:63:49:31:49:8e:f3:
c0:b4:83:dc:f9:9d:10:58:91:8f:e2:20:0f:86:27:2f:44:f2:
20:71:60:d5:1e:1f:4c:26:f5:8d:89:bc:f1:74:74:18:8d:98:
e7:ba:0b:11:4a:ac:9e:30:65:74:c0:0a:57:26:11:f9:69:84:
ba:6f:4c:b6:41:06:e3:f3:0e:66:e7:46:ce:0e:e2:f8:2d:d4:
11:63:df:1a:9d:8f:ab:4d:00:c8:e8:d1:65:20:90:4f:aa:27:
0f:68:83:cd:7b:6d:3c:50:9c:27:35:53:7a:75:c3:8f:83:37:
7a:ba:a6:8e:ef:d9:35:07:27:dd:7e:30:c4:b3:27:b1:29:50:
da:d7:91:a0:c9:12:a9:97:93:83:40:ac:90:76:79:4a:4b:e9:
fc:0e:83:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:31 2026 by rpki-client