Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft
File: DloI_DRpD1LbDCt-R-jlOIMUWpg.mft (raw, json)
Hash identifier: wP/lys/lHehc+DWeYHmr/mJsFn3XeexHygrVr3CwID4=
Subject key identifier: 60:BD:98:F4:CB:A7:0C:49:86:4D:64:76:0A:CF:4B:79:35:D0:65:D6
Authority key identifier: 0E:5A:08:FC:34:69:0F:52:DB:0C:2B:7E:47:E8:E5:38:83:14:5A:98
Certificate issuer: /CN=0e5a08fc34690f52db0c2b7e47e8e53883145a98
Certificate serial: 019E1CB464C892260012228FB357C4AC8373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DloI_DRpD1LbDCt-R-jlOIMUWpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft
Manifest number: 0417
Signing time: Tue 12 May 2026 15:00:44 +0000
Manifest this update: Tue 12 May 2026 15:00:44 +0000
Manifest next update: Wed 13 May 2026 15:00:44 +0000
Files and hashes: 1: DloI_DRpD1LbDCt-R-jlOIMUWpg.crl (hash: YjkV2c2/3KU7rma3zpgZoMEq9zK3vHiVVHtHUgaHGOg=)
2: LOtYNSOIJLqn8y7bAA6r24saOkk.asa (hash: jnFWZlKsQlmviLgHTcWDoVumAZhReG7QINLCGxqwiGo=)
3: ZHi1ZhCdWfH9BoGN5VcU78t29bk.roa (hash: SRJcc4sRWkIGgmHfVj6UPyJviHaRkjxeQWqok2u9PGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DloI_DRpD1LbDCt-R-jlOIMUWpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:64:c8:92:26:00:12:22:8f:b3:57:c4:ac:83:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e5a08fc34690f52db0c2b7e47e8e53883145a98
Validity
Not Before: May 12 15:00:44 2026 GMT
Not After : May 13 15:00:44 2026 GMT
Subject: CN=60bd98f4cba70c49864d64760acf4b7935d065d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:de:35:b7:f3:eb:fc:fc:e8:35:f7:e5:f5:a0:
bd:5f:51:d9:ef:0b:9e:50:b9:b5:4e:f9:76:b3:b4:
7c:a2:09:67:6d:bc:bf:b9:bc:b7:88:3e:bc:9c:3e:
42:96:c8:7d:bc:83:76:57:7d:7d:de:c2:e2:36:c3:
6b:fc:38:45:f3:3c:73:9a:8c:0d:f2:30:f0:25:18:
0a:e4:ce:60:a4:58:c2:5a:6f:77:d5:13:59:2b:45:
46:fe:5c:04:ee:56:ab:b4:2f:90:c2:7c:09:e7:9f:
c1:d3:f2:e3:90:e5:1c:ea:a7:24:d4:ab:da:30:42:
c9:bf:9e:37:2d:3e:46:94:cd:41:83:9c:cb:59:ed:
80:28:e3:92:24:f7:b3:cd:94:f7:2b:ed:3e:da:8b:
97:e3:e6:06:42:6c:3b:40:21:b2:bd:84:fd:09:51:
7f:53:72:b9:62:4a:28:be:1f:46:c4:07:b2:5e:93:
04:bc:7d:ff:6c:47:5d:8c:4f:3d:3b:4e:36:82:ce:
de:75:bf:bf:f8:33:6e:77:0d:8a:1f:80:d7:d7:d3:
5d:b8:1f:9e:5c:7c:b9:40:2b:3d:9a:36:4c:e2:12:
35:03:51:ac:0c:1c:d0:29:e0:54:dd:f4:be:62:31:
72:1e:9c:80:bd:ce:1a:0d:d2:a6:c4:30:e7:0d:1a:
11:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BD:98:F4:CB:A7:0C:49:86:4D:64:76:0A:CF:4B:79:35:D0:65:D6
X509v3 Authority Key Identifier:
keyid:0E:5A:08:FC:34:69:0F:52:DB:0C:2B:7E:47:E8:E5:38:83:14:5A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DloI_DRpD1LbDCt-R-jlOIMUWpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:52:c4:18:e7:be:4f:bb:d2:b3:b3:42:4b:f8:24:80:78:35:
dd:01:e2:97:cb:d8:19:4e:89:fa:1e:9c:73:53:c3:d4:11:82:
ec:c2:e3:b6:66:49:03:0c:50:6f:13:8c:7a:f3:b1:72:8b:61:
93:cc:79:d2:56:20:7c:33:ea:83:fe:bb:42:e5:35:fe:5f:e7:
3a:ad:81:1c:99:65:4f:46:8b:9c:f2:c2:b5:6f:90:62:e3:0a:
9b:a9:ad:ab:c4:df:de:22:1e:f5:95:75:38:90:65:58:ce:75:
f4:0b:a2:54:9c:e3:34:9a:2e:11:ed:06:66:2d:28:89:8a:c5:
4f:d3:b2:8b:eb:1b:33:b8:90:be:42:31:50:1f:9f:ea:4b:d6:
f3:55:71:2d:7c:c0:a1:14:75:6d:f4:3e:d1:6a:ac:d5:f5:af:
c9:2e:b3:d2:13:1f:51:5b:61:fa:7a:72:1f:b9:90:c3:3d:58:
33:bf:1c:ce:d5:f2:95:13:4b:1a:3c:0c:fd:10:90:f0:f1:6d:
f0:9c:21:a8:95:1f:da:dd:a6:89:fa:00:11:f4:90:38:74:03:
97:2c:18:7d:f4:f0:c7:e6:76:c1:6b:71:16:9b:1a:c1:30:1b:
33:08:cb:8b:12:50:b2:65:59:39:93:82:99:7d:26:dd:46:bb:
48:0a:ac:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:04:26 2026 by rpki-client