Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
File: DX08coAiI1d4gNOPBIyBiRImQDs.mft (raw, json)
Hash identifier: pQvuMb+Zmb0YoCMmmWxfqnuvjjr+4V5i80dBovdE6t0=
Subject key identifier: 83:98:8B:2F:0D:71:B8:E6:62:6A:EB:F0:B7:33:00:33:49:5C:32:04
Authority key identifier: 0D:7D:3C:72:80:22:23:57:78:80:D3:8F:04:8C:81:89:12:26:40:3B
Certificate issuer: /CN=0d7d3c72802223577880d38f048c81891226403b
Certificate serial: 019E1D595EF813B6588B4F7CF94D015550C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
Manifest number: 0D67
Signing time: Tue 12 May 2026 18:00:56 +0000
Manifest this update: Tue 12 May 2026 18:00:56 +0000
Manifest next update: Wed 13 May 2026 18:00:56 +0000
Files and hashes: 1: DX08coAiI1d4gNOPBIyBiRImQDs.crl (hash: uTFaJLRs+WZJBF0lv0gvY1hONtNE25WmeOpk/l08f+Q=)
2: rmlQHSPR8QbJ4-lSxSii48UeNZs.roa (hash: xz18D6VTlXYgx+ypy0VFWQBhdsBWNVKOCFQd2upOGqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:5e:f8:13:b6:58:8b:4f:7c:f9:4d:01:55:50:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7d3c72802223577880d38f048c81891226403b
Validity
Not Before: May 12 18:00:56 2026 GMT
Not After : May 13 18:00:56 2026 GMT
Subject: CN=83988b2f0d71b8e6626aebf0b7330033495c3204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6f:45:65:9f:cf:a5:9c:93:16:eb:58:8a:c4:
c8:24:ba:ba:ca:59:60:35:42:ed:42:1d:a3:b7:2d:
bc:98:ea:95:1a:2c:66:ef:fa:f9:a8:95:75:4d:2c:
c2:22:36:37:25:68:e8:88:16:e0:46:49:4e:a8:8e:
85:cc:2f:10:d3:ff:8e:b8:1b:bb:89:d2:68:3d:90:
58:a4:2b:57:cb:f6:44:e5:57:4a:d0:ca:44:8a:79:
ed:a1:99:77:33:87:f8:51:f5:54:d5:6d:8b:10:ed:
91:de:82:e1:e2:25:6c:be:c3:90:14:c8:30:c5:70:
af:7a:64:c5:0b:a3:d8:3b:3b:57:15:41:40:81:de:
ad:fd:ac:4e:2b:57:80:93:90:99:38:e2:4b:ba:a2:
b6:f2:cd:95:ab:c8:62:a4:1e:01:2b:3b:ee:30:aa:
2b:9b:96:dd:ac:ad:c3:af:6f:3e:23:66:d6:01:2d:
a2:97:ee:86:da:82:62:e8:2c:ee:08:ee:44:dc:34:
08:81:05:e4:74:bb:7c:67:50:28:92:0b:ba:28:9c:
06:0a:15:75:48:10:f5:db:06:ec:f3:ee:06:a3:0f:
99:c5:1f:ad:c8:ae:9f:5e:d5:9c:86:d1:08:60:1b:
5d:fb:e5:51:3a:e5:9c:93:26:79:5b:38:63:5a:a4:
24:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:98:8B:2F:0D:71:B8:E6:62:6A:EB:F0:B7:33:00:33:49:5C:32:04
X509v3 Authority Key Identifier:
keyid:0D:7D:3C:72:80:22:23:57:78:80:D3:8F:04:8C:81:89:12:26:40:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:4a:9e:72:30:3a:9f:64:81:30:03:bc:a0:29:5d:94:25:d0:
b8:27:c6:4b:08:ae:e9:10:75:ff:eb:a3:be:0a:26:74:2e:14:
fc:d5:78:b5:a3:63:60:6a:52:0a:f2:fa:94:60:49:76:37:9c:
30:be:79:75:82:ed:d2:10:af:d9:0f:46:2d:59:bb:79:55:84:
de:72:4f:fa:06:1f:18:82:01:a3:47:64:df:99:a4:a9:57:f0:
2d:e2:62:2a:7f:16:6f:91:ae:ee:cd:67:ba:9d:b3:8f:39:30:
63:25:ef:94:b9:e7:a9:08:18:40:c5:07:ca:7a:dd:64:bf:ca:
67:17:a5:a7:fc:18:8e:c8:e5:9a:97:86:a5:4d:ad:a4:84:e5:
18:cf:e1:cd:bb:ec:84:c6:89:42:07:a5:8e:79:e1:68:97:c7:
4a:12:73:9e:c1:75:3f:9b:74:0b:25:7e:b9:8d:9f:e6:af:5a:
be:ea:5c:f3:4f:67:b7:ee:73:63:c1:70:e9:39:13:60:d2:0c:
fb:b8:c8:db:8a:87:15:57:85:cc:b1:6a:42:bc:44:e9:42:fb:
1c:28:24:43:c7:9e:f4:db:ee:a9:45:cd:79:c7:72:b3:72:15:
91:12:00:8d:10:e1:75:21:25:0a:ce:16:d1:19:ea:f9:a1:08:
07:a0:63:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:53:44 2026 by rpki-client