Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft
File: DW-RpSFkBJQiOeaW5lzy03IU5K8.mft (raw, json)
Hash identifier: Cd98DJX3wItjdNojJ12fj/bCksAoGbt+trhpzt/otkg=
Subject key identifier: 9F:4A:1E:39:FC:19:2C:AF:85:65:1A:30:8C:F4:D6:04:53:FE:91:91
Authority key identifier: 0D:6F:91:A5:21:64:04:94:22:39:E6:96:E6:5C:F2:D3:72:14:E4:AF
Certificate issuer: /CN=0d6f91a5216404942239e696e65cf2d37214e4af
Certificate serial: 019E1BD8EC90CEF0F19E6BA9B2D3BCCE1564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DW-RpSFkBJQiOeaW5lzy03IU5K8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft
Manifest number: 0EEF
Signing time: Tue 12 May 2026 11:01:01 +0000
Manifest this update: Tue 12 May 2026 11:01:01 +0000
Manifest next update: Wed 13 May 2026 11:01:01 +0000
Files and hashes: 1: 06cgoU7GyJzMyJR7nF3NCVCDDU0.roa (hash: kN3R1rOeDYfzsBK/+cPskIhYJ/5X5cYwuNm8G34vSmk=)
2: DW-RpSFkBJQiOeaW5lzy03IU5K8.crl (hash: Ptgqn2AZKUgOgkvnbpGwlNYwBCEpEuvS0+mhMeGPscc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DW-RpSFkBJQiOeaW5lzy03IU5K8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:ec:90:ce:f0:f1:9e:6b:a9:b2:d3:bc:ce:15:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d6f91a5216404942239e696e65cf2d37214e4af
Validity
Not Before: May 12 11:01:01 2026 GMT
Not After : May 13 11:01:01 2026 GMT
Subject: CN=9f4a1e39fc192caf85651a308cf4d60453fe9191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5a:ac:51:2a:db:18:da:e7:2c:4a:a0:bf:b7:
47:63:ba:3e:0c:33:56:06:a4:06:ce:76:17:19:fb:
b6:50:a7:05:6e:05:ec:5d:c1:82:94:cf:78:a1:e5:
ab:33:16:b0:c0:55:14:b3:52:62:ca:29:99:e2:74:
78:a8:27:88:da:f1:e4:ae:53:fa:d7:55:ea:3a:5c:
1c:d8:3b:19:0f:10:15:ac:ba:5b:6d:b0:eb:a9:ba:
d7:6d:2a:86:75:9d:ee:57:7c:f2:1e:e4:dd:d2:b9:
0e:e4:d0:dc:a2:b7:e1:92:94:05:29:58:21:13:da:
bd:43:59:58:e4:59:c4:fb:6c:fd:be:b7:53:6a:6d:
ee:bd:39:3f:73:8a:aa:35:a6:6d:5e:41:ae:2d:b0:
b5:9b:d6:77:67:aa:c5:67:28:f3:da:8d:c8:ad:de:
6f:ed:a2:4e:f9:94:b4:81:eb:cf:be:6b:7b:89:cd:
c2:b4:10:e0:98:a6:a0:f7:be:7b:07:a6:a5:93:b0:
28:ea:39:a4:cf:66:4e:ca:23:38:6c:10:5f:8e:cb:
95:8d:7c:81:6d:07:73:38:0d:77:56:30:96:45:ad:
c8:cf:63:10:c8:44:b7:3b:e7:26:c7:b5:61:73:f6:
ee:79:5c:f3:bf:c3:19:fb:ad:d6:e2:6f:f3:99:c4:
ce:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4A:1E:39:FC:19:2C:AF:85:65:1A:30:8C:F4:D6:04:53:FE:91:91
X509v3 Authority Key Identifier:
keyid:0D:6F:91:A5:21:64:04:94:22:39:E6:96:E6:5C:F2:D3:72:14:E4:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DW-RpSFkBJQiOeaW5lzy03IU5K8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:0a:e6:6c:5a:13:83:ca:d3:3c:c5:16:c0:af:ba:53:07:e2:
4d:70:b9:87:e6:17:88:76:24:86:23:ec:44:aa:a2:23:54:7a:
c2:58:15:00:ee:13:e7:d9:9e:44:73:ab:81:02:f2:53:59:be:
27:ff:5b:ed:57:d6:c5:05:40:3c:45:54:20:ef:21:50:6d:3c:
46:e3:24:3b:4a:f6:ba:07:ee:53:5e:ad:a0:5e:5b:b9:8f:f0:
96:ff:47:7a:b7:c5:c0:28:05:13:04:c6:01:ad:ed:91:3f:d4:
1b:97:3e:d9:ed:66:0e:bb:17:1f:24:c7:06:55:98:46:66:ae:
72:ac:79:09:49:b0:48:c5:87:2e:15:aa:0b:a8:a4:12:4c:47:
87:83:2c:c8:78:51:df:67:cd:d1:3f:43:fe:0d:01:06:5b:68:
54:f2:ac:be:00:43:d5:ed:0a:94:a0:54:bd:93:7f:3b:cf:b9:
2a:cc:4f:dc:fd:e1:17:1e:ec:94:6d:88:af:d7:b0:3e:67:44:
d7:71:37:e9:d3:fa:fa:2b:00:b3:79:3a:63:b6:ad:31:4e:7f:
7e:61:54:e3:f7:03:6d:db:ca:77:32:a2:90:c2:98:2f:3d:12:
45:6c:d3:5a:e0:4e:6b:3a:0d:cb:c9:dd:fc:59:60:da:43:89:
06:9b:bd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:20 2026 by rpki-client