
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
File: DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft (raw, json)
Hash identifier: ZOCb74EELZ80NtTESBjyH7YCSYS+UdZB+C3NOztvMVY=
Subject key identifier: 9C:26:A4:E0:73:5C:58:BB:88:CF:B6:71:5C:77:AC:68:33:81:4B:37
Authority key identifier: 0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
Certificate issuer: /CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Certificate serial: 019E1E35EA44C560207879466656FA3720F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 22:01:50 +0000
Manifest this update: Tue 12 May 2026 22:01:50 +0000
Manifest next update: Wed 13 May 2026 22:01:50 +0000
Files and hashes: 1: DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl (hash: dA4GZ+BJWS2k98O425Y00HUDyXjfHPBpO8W4d4vCrIQ=)
2: xRmmdqH1-j--sEXPtnNY3Z-R5Zo.roa (hash: 3OUa7VjiPRdUyQdSMo547+vkOocCdI86key02w1U7/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:ea:44:c5:60:20:78:79:46:66:56:fa:37:20:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Validity
Not Before: May 12 22:01:50 2026 GMT
Not After : May 13 22:01:50 2026 GMT
Subject: CN=9c26a4e0735c58bb88cfb6715c77ac6833814b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0c:5c:c4:fe:da:ba:99:4e:c4:d6:84:8b:3d:
2d:0d:59:83:6e:54:5c:62:c7:93:7b:5f:55:f0:fd:
de:59:9c:43:6f:1d:4b:26:d4:4a:27:fc:00:27:1a:
0d:9a:fd:f1:a7:b8:4d:40:27:69:dc:4c:4e:5d:be:
a8:06:0f:6d:70:01:72:c5:11:17:6a:e5:23:42:45:
0e:52:84:d6:f9:2c:91:c3:d0:8d:a7:ed:a9:48:5f:
0a:1e:4a:6f:b6:1d:be:07:25:4b:27:b0:ab:3e:55:
ca:87:02:a3:a5:c5:2e:95:6e:13:c4:d8:79:ba:cf:
73:de:f5:2e:22:a5:96:8a:71:df:57:96:cb:9d:ba:
ca:14:9a:7f:1a:a9:77:ff:8a:9a:1e:31:c7:dd:f5:
fd:81:11:26:56:20:a5:8c:cd:60:07:c2:b5:13:a5:
f5:09:7c:85:3b:54:7a:da:55:6c:7f:54:ec:80:86:
e8:4d:f5:b8:7f:5f:8c:69:cb:7b:a2:cb:67:35:c4:
4a:cd:a0:8d:43:57:52:56:5c:35:3e:90:e6:b8:6d:
b9:7c:80:b3:01:0e:68:8b:a7:22:6e:83:cd:19:49:
49:ba:30:d4:04:16:ab:8c:5b:5f:de:e7:9b:47:e3:
53:23:b1:43:6a:d2:75:a5:d5:b3:3e:74:06:62:c3:
3c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:26:A4:E0:73:5C:58:BB:88:CF:B6:71:5C:77:AC:68:33:81:4B:37
X509v3 Authority Key Identifier:
keyid:0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:8e:58:ae:79:19:19:9e:b6:d8:0e:8c:5b:3e:09:bb:a0:c7:
7f:fe:25:99:78:20:f4:89:16:3e:53:10:4a:d5:a2:bb:4c:58:
9f:9b:08:b1:42:7b:da:af:9d:49:18:4a:57:dc:9e:43:5b:20:
f9:1a:76:0d:ba:9e:c5:5c:1b:31:52:27:e4:23:19:b9:10:3a:
cd:98:7f:59:b2:0c:31:64:bf:95:ce:72:80:02:37:71:88:c9:
16:1c:0c:45:de:4c:cc:7e:c4:eb:e9:9c:9e:7d:46:b3:5c:ae:
fc:63:60:06:fe:01:14:57:76:ab:d5:83:1b:26:a5:e3:24:d2:
89:12:26:1f:6b:f1:95:73:63:2e:1d:a6:1f:00:50:96:2b:74:
11:fb:ce:92:d9:ca:20:17:81:a7:cd:84:ec:cb:95:59:14:82:
25:6c:a3:d1:c8:8b:96:dc:d6:d1:4b:df:28:54:a1:87:68:ee:
ce:84:5f:2c:05:e5:d2:72:0c:66:03:4d:35:9f:d3:8c:99:d8:
de:fd:17:2f:a8:eb:d8:93:78:4f:00:2e:c2:d6:1a:59:55:88:
1e:e4:ed:90:5b:76:90:27:ca:2e:a3:64:47:6a:3c:bd:e5:9f:
30:b7:20:9b:83:3b:88:53:ed:8e:d6:bc:1a:e8:f6:49:e8:85:
0e:12:ac:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:38:19 2026 by rpki-client