Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft
File: DNszEee1KoxC8GUP9DwPyE0yDxY.mft (raw, json)
Hash identifier: FxC+XtEerfu8lHysDUZTV9kc9aPegWDw+8VpabORl8c=
Subject key identifier: 94:BE:F3:0A:33:57:A5:85:E8:33:9E:49:16:34:C2:DD:D0:A7:9F:31
Authority key identifier: 0C:DB:33:11:E7:B5:2A:8C:42:F0:65:0F:F4:3C:0F:C8:4D:32:0F:16
Certificate issuer: /CN=0cdb3311e7b52a8c42f0650ff43c0fc84d320f16
Certificate serial: 019E1BD8C24D3AFBCFA46AF382936F39B440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft
Manifest number: 0157
Signing time: Tue 12 May 2026 11:00:50 +0000
Manifest this update: Tue 12 May 2026 11:00:50 +0000
Manifest next update: Wed 13 May 2026 11:00:50 +0000
Files and hashes: 1: DNszEee1KoxC8GUP9DwPyE0yDxY.crl (hash: jrUTpoqvlfrbpn3CV9fCYxjft9PAoTF5IkLOAE9N8hE=)
2: KkZ9T-InsQon19zi2pp0iLPe7uw.asa (hash: PxN+SD6/SnkXuWBprhfsz0XFK1K5PUh2KfS43HH5dtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:c2:4d:3a:fb:cf:a4:6a:f3:82:93:6f:39:b4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cdb3311e7b52a8c42f0650ff43c0fc84d320f16
Validity
Not Before: May 12 11:00:50 2026 GMT
Not After : May 13 11:00:50 2026 GMT
Subject: CN=94bef30a3357a585e8339e491634c2ddd0a79f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:89:f2:15:47:de:08:94:ac:c9:43:e6:aa:51:
14:1c:e8:f4:90:74:22:7b:6c:bb:81:79:fe:2c:19:
17:43:19:5d:de:95:be:4a:d1:e4:c4:f6:53:bc:25:
1d:e7:94:0a:29:53:fb:a3:63:8e:8c:a2:ad:c2:ef:
b5:5c:bf:02:65:da:ff:c8:b9:e0:00:54:1e:38:6d:
70:83:4f:e6:2d:87:f8:55:2b:d3:f1:d9:12:f9:d5:
42:b4:78:3a:9f:60:85:67:c4:31:9a:27:ea:f3:89:
09:16:b8:12:99:27:fe:05:51:e9:89:6e:7e:9d:59:
35:36:bb:4c:a6:9e:ed:5c:fa:2e:64:04:08:f1:b0:
36:5f:a5:da:7f:f4:4c:02:04:01:f9:4f:1a:0b:ae:
a6:15:86:23:cd:b6:5c:84:bd:6d:48:fa:6e:07:dd:
06:52:9c:6f:cb:b9:7a:87:62:a3:f9:af:29:b9:a0:
8d:88:c3:78:c3:5f:a2:21:61:99:be:4f:1b:85:ca:
28:a5:90:dd:35:47:44:0b:51:a0:14:33:9f:b4:8e:
40:a1:4d:1c:be:68:bc:4f:89:69:31:16:1f:8b:dc:
95:da:61:e6:a9:d4:a5:22:91:28:13:05:b6:76:71:
7b:23:44:22:09:b8:01:f2:f9:35:c4:7c:02:04:7d:
ce:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BE:F3:0A:33:57:A5:85:E8:33:9E:49:16:34:C2:DD:D0:A7:9F:31
X509v3 Authority Key Identifier:
keyid:0C:DB:33:11:E7:B5:2A:8C:42:F0:65:0F:F4:3C:0F:C8:4D:32:0F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c2:c7:05:96:4b:98:73:2a:3a:82:38:ca:3c:4f:a7:b6:25:
4a:5a:5d:69:77:63:c7:7d:f5:5d:1f:5e:3d:31:b8:b7:70:83:
77:8f:6f:dd:c5:b3:62:c1:32:a4:ed:6a:0f:a8:5d:84:8f:0c:
f3:2f:25:44:bb:69:76:b7:da:35:c1:b4:06:75:d4:8c:0a:37:
13:ea:37:89:c9:26:df:e5:f9:b5:34:17:6e:32:64:a1:a0:58:
25:0f:ca:aa:f3:77:87:d7:02:f8:71:a2:a3:75:a4:14:47:a2:
95:bd:79:ea:bf:f8:07:6f:52:29:7f:65:86:ad:8f:83:0d:09:
8d:07:97:ae:07:13:34:24:c2:e6:34:2c:ed:7e:7e:20:54:e6:
70:62:cd:e0:05:e8:0c:2b:b1:f4:55:88:e5:88:16:66:cc:3b:
5c:d0:a8:2e:29:29:e5:30:05:8f:f6:f6:d9:40:6b:8a:44:5d:
fd:7e:e5:a3:fa:6b:49:13:0c:c4:43:e2:11:7b:ba:f9:2c:d6:
50:63:0f:40:96:d6:9d:7c:44:a8:89:0d:0f:73:dd:bc:93:16:
4d:60:96:e2:5d:ae:ad:44:54:f6:7d:6e:b2:03:85:57:26:83:
a2:cd:aa:c5:95:81:06:65:ca:3a:8e:7b:cc:16:9b:95:e3:a2:
b8:3b:e2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:58:34 2026 by rpki-client