Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
File: DXQT3PU3N0pw2qMf2amf0psDMjk.mft (raw, json)
Hash identifier: 4PzaJtzfCYd1Bi6D+hahnaOMGdlrxTPhTx54z5Su2Rg=
Subject key identifier: 0F:DA:FA:2F:A5:4D:4C:6F:A0:23:8B:0C:E0:C6:13:26:E0:19:35:3F
Authority key identifier: 0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39
Certificate issuer: /CN=0d7413dcf537374a70daa31fd9a99fd29b033239
Certificate serial: 019E1BD89BCDB84510D451A5CB7D609C92B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
Manifest number: 16CB
Signing time: Tue 12 May 2026 11:00:40 +0000
Manifest this update: Tue 12 May 2026 11:00:40 +0000
Manifest next update: Wed 13 May 2026 11:00:40 +0000
Files and hashes: 1: DXQT3PU3N0pw2qMf2amf0psDMjk.crl (hash: ceSKjAARW0nZAhZ+bqW+aXaGGtsak05Z2TTiJcLd+q8=)
2: mGAQzPjBEuNvLBk4PZVTydQ08Ik.roa (hash: nFMnkaBb6s7S3hBrs96M6UKrx0AkayAu23OFBBKrBXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:9b:cd:b8:45:10:d4:51:a5:cb:7d:60:9c:92:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7413dcf537374a70daa31fd9a99fd29b033239
Validity
Not Before: May 12 11:00:40 2026 GMT
Not After : May 13 11:00:40 2026 GMT
Subject: CN=0fdafa2fa54d4c6fa0238b0ce0c61326e019353f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e7:24:d9:c6:e6:22:6c:71:0c:21:88:fc:a3:
15:c4:9b:43:9f:21:15:63:d1:16:4f:ce:ea:70:05:
52:c5:b4:85:c5:08:c0:7b:5c:ab:28:74:8a:4f:01:
24:23:7b:89:15:cc:0b:13:d4:7c:c7:af:68:42:2c:
8d:cd:e3:f9:f0:dd:86:c0:c3:17:ff:cc:85:7b:29:
87:c7:86:89:59:eb:d2:2e:b5:a7:4a:45:3c:3c:0d:
d2:0d:b5:33:33:3e:02:b4:99:89:dd:22:6f:af:31:
70:1c:d5:8d:5c:15:35:55:1b:8a:f7:5f:6e:87:f1:
7e:f7:93:36:c8:85:c0:8d:7f:35:60:cb:f8:80:8b:
97:49:a4:00:f3:3e:71:ab:31:80:92:39:4b:70:f2:
25:6e:ad:08:fe:98:ec:42:e9:02:c7:08:2a:77:2b:
14:e9:83:a8:5e:6c:bb:11:0a:20:c6:5c:ce:e5:b3:
d1:7d:d7:b4:1e:ca:ea:8e:84:2a:a9:e6:64:87:e9:
f9:d4:8b:27:b8:4c:fc:9f:43:d2:53:dc:13:f8:13:
3f:24:8d:f5:22:dc:e5:52:72:34:94:7c:d6:45:87:
4f:73:86:2a:ce:54:48:33:1f:61:75:d7:ce:98:62:
49:40:1f:0d:42:ca:e5:0d:ba:96:80:21:a0:16:35:
5c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:DA:FA:2F:A5:4D:4C:6F:A0:23:8B:0C:E0:C6:13:26:E0:19:35:3F
X509v3 Authority Key Identifier:
keyid:0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:72:b7:e9:17:aa:ac:37:a4:a9:22:e3:0a:cb:55:2b:63:be:
d6:c0:f9:67:16:eb:db:3c:c9:ac:b6:56:c1:6d:34:fd:68:51:
b6:b6:aa:50:56:a3:a4:7f:06:92:3e:49:95:4b:52:60:12:19:
27:49:6e:72:6d:89:6c:e3:4a:15:4c:66:04:30:a2:d1:38:3e:
ec:10:c2:36:90:f8:b1:2b:5d:3e:10:97:72:ea:ac:52:c4:86:
e4:e9:b1:2e:97:00:da:c9:09:2b:46:54:44:ff:67:a1:e8:62:
dd:63:ac:60:03:33:60:6a:18:65:bb:cb:3e:b6:df:1b:64:c6:
98:e3:49:19:6b:f8:d0:f4:c7:14:f0:af:7a:aa:c6:b5:03:16:
4e:6e:4e:ba:3b:ad:60:71:89:9d:60:41:70:76:d4:1a:15:73:
5b:98:ca:57:f8:39:58:76:8c:de:a3:c4:07:fb:3a:77:8d:63:
47:c3:1f:a7:89:80:f1:c1:28:37:17:53:fc:73:a2:91:20:ac:
9a:38:42:23:6d:da:57:fe:f1:03:75:23:25:a2:44:b8:a2:26:
e7:dc:bc:35:f5:7e:b3:b7:60:5b:ff:82:60:82:01:47:3c:bc:
76:65:75:ba:ad:e9:fa:de:6f:2f:13:8c:82:5c:09:c1:21:b3:
e5:e5:10:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:14:41 2026 by rpki-client