Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft
File: 0dMLd0soDDfhxe1dimnLmvZIsGU.mft (raw, json)
Hash identifier: XzfkZWQrAtBNyW5ZArW8a3InLAr6bcvyXgDJeghoyhM=
Subject key identifier: E5:8D:29:0A:5E:34:5D:56:D7:DD:9D:FB:0B:27:E4:DA:B4:DF:E2:D2
Authority key identifier: D1:D3:0B:77:4B:28:0C:37:E1:C5:ED:5D:8A:69:CB:9A:F6:48:B0:65
Certificate issuer: /CN=d1d30b774b280c37e1c5ed5d8a69cb9af648b065
Certificate serial: 019E1CEBB06494CB6F424032AC2FD4F9D848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dMLd0soDDfhxe1dimnLmvZIsGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft
Manifest number: 0D73
Signing time: Tue 12 May 2026 16:01:08 +0000
Manifest this update: Tue 12 May 2026 16:01:08 +0000
Manifest next update: Wed 13 May 2026 16:01:08 +0000
Files and hashes: 1: 0dMLd0soDDfhxe1dimnLmvZIsGU.crl (hash: IuDaAcSKDp+fCoz1KZWEKvRmzQ2O2U/XBUzA5M1DTZ8=)
2: 4uCW8KDL5eygnSjCYi7-Nukptjw.roa (hash: Lz95AsDo4OKSWuKZICMJRolQCwkNIP0tKUYk7qYQ5RA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dMLd0soDDfhxe1dimnLmvZIsGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:b0:64:94:cb:6f:42:40:32:ac:2f:d4:f9:d8:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1d30b774b280c37e1c5ed5d8a69cb9af648b065
Validity
Not Before: May 12 16:01:08 2026 GMT
Not After : May 13 16:01:08 2026 GMT
Subject: CN=e58d290a5e345d56d7dd9dfb0b27e4dab4dfe2d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:11:6f:fe:4f:d5:f3:77:30:f1:7c:4a:8f:13:
1b:7e:97:b4:ed:0d:b2:14:ed:bd:3c:e2:98:3e:a3:
cd:11:f6:11:e0:86:17:c7:68:a6:5d:91:cc:d0:99:
39:ee:ab:26:5e:65:02:49:58:a7:09:cd:a7:7d:f0:
72:68:0a:12:86:fa:ce:70:5a:f1:07:a6:98:f1:0b:
1e:e7:b2:13:f4:33:1e:8e:ed:a0:60:ad:ad:43:64:
33:65:d9:bb:47:80:c0:12:6a:9d:9b:31:d8:4b:0f:
10:f8:15:de:c9:99:fb:dc:e5:ea:dc:69:3e:1c:42:
df:e9:13:45:3a:9e:2e:ee:07:bb:f0:ab:86:8a:31:
ad:ac:c7:c6:eb:b1:f4:10:33:3e:3c:11:e3:f9:cd:
b4:39:ab:73:5b:d8:09:5b:4d:ea:4a:47:a2:cc:dc:
4e:bb:bf:ed:34:3c:2f:84:90:3a:9c:a2:73:14:3e:
e8:95:a4:9b:bf:46:d0:4a:cf:ab:27:c3:d9:4b:bb:
e1:95:90:f5:c3:f5:06:52:1e:d2:9f:6b:72:4a:85:
61:05:40:30:fe:36:9e:2f:f5:d4:46:49:8e:b1:6d:
07:3f:e4:00:46:45:c3:4f:7e:06:6a:df:6b:b3:fc:
97:93:fc:c1:a1:1c:77:ef:90:16:af:90:ee:1b:d5:
2d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8D:29:0A:5E:34:5D:56:D7:DD:9D:FB:0B:27:E4:DA:B4:DF:E2:D2
X509v3 Authority Key Identifier:
keyid:D1:D3:0B:77:4B:28:0C:37:E1:C5:ED:5D:8A:69:CB:9A:F6:48:B0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dMLd0soDDfhxe1dimnLmvZIsGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:83:c3:7e:d5:b1:39:cb:a6:5c:94:ef:a9:a0:31:e6:22:8d:
18:c1:8f:b0:f0:87:55:69:4c:7e:aa:3d:d6:8f:98:74:73:15:
95:7c:a1:0f:f5:ae:51:25:a4:86:46:fe:50:2a:a3:b3:1e:e2:
35:dc:67:4d:da:e5:70:63:aa:04:af:b8:89:66:17:2c:2f:5c:
fc:63:a7:b3:d1:f4:d9:1a:5b:db:13:ec:94:b1:bf:f3:b9:62:
69:49:11:17:fc:9d:34:f2:24:7d:40:8b:4e:16:54:10:3a:f3:
60:9e:63:ce:0a:13:94:da:46:cb:26:63:b9:7f:de:0e:e9:c0:
c4:9c:e9:54:09:ad:b3:2d:4f:7d:44:4e:ea:f6:0a:33:6a:08:
df:94:1b:b8:bf:7e:7d:b0:71:31:20:9d:cd:57:46:bf:7d:5f:
0c:59:c1:e3:fe:d7:b5:3e:a5:6a:74:60:7a:db:fd:af:81:c4:
f3:a8:a0:7c:b0:21:41:7f:87:21:65:47:bc:ee:cc:48:9e:ce:
72:32:ac:f1:09:60:62:25:13:92:11:9d:d3:41:29:7d:4b:06:
8d:99:64:4a:7b:18:2e:4e:02:95:d2:91:53:ba:bb:e3:aa:11:
c1:8f:66:d3:d0:82:c8:12:7f:05:76:98:48:df:20:0f:4a:42:
dc:03:cd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:57 2026 by rpki-client