
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
File: Dx1bnYi1edDd98Ics9OH1h6lFsE.mft (raw, json)
Hash identifier: 7xdq44EVOadDrrTxG5peq3oB59dyhEy9PdZGg3AGTNU=
Subject key identifier: 98:62:A7:C2:7C:D9:65:6A:83:BC:CF:46:62:54:CE:DA:A3:37:4C:17
Authority key identifier: 0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1
Certificate issuer: /CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1
Certificate serial: 019E1F478389C0B08407B5542D30A9833B8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
Manifest number: 1903
Signing time: Wed 13 May 2026 03:00:40 +0000
Manifest this update: Wed 13 May 2026 03:00:40 +0000
Manifest next update: Thu 14 May 2026 03:00:40 +0000
Files and hashes: 1: Dx1bnYi1edDd98Ics9OH1h6lFsE.crl (hash: l0F9KC2ZYAO8h/gJVuflzBhu7jVpeSZO4nF0JQbuyw4=)
2: oB9vecBEFrYggxsxtq3fiITzJ2Y.roa (hash: dq4CVE4zFGUyDpHFmLkSZ9sIR2d8JjqnFKVgnpPDCIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:83:89:c0:b0:84:07:b5:54:2d:30:a9:83:3b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1
Validity
Not Before: May 13 03:00:40 2026 GMT
Not After : May 14 03:00:40 2026 GMT
Subject: CN=9862a7c27cd9656a83bccf466254cedaa3374c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:98:19:26:b3:6a:6b:91:4a:29:81:2b:12:fc:
ae:5f:ea:49:56:cb:f9:84:7b:1d:ad:7a:17:1d:84:
a4:58:ae:95:20:f4:fd:f4:80:4a:59:ba:aa:e7:06:
e5:c3:6e:64:69:21:98:be:46:1d:f3:a5:b3:59:19:
d9:70:cc:f4:19:6e:48:52:b6:a9:48:50:8c:68:f4:
d5:4d:31:48:7a:bf:e3:a1:e2:94:22:f3:30:e4:ec:
32:fe:04:48:16:8b:93:36:83:66:20:12:8f:68:67:
e9:39:b8:22:45:8e:f2:42:67:17:23:44:3f:e6:18:
1c:c5:c0:72:a9:3b:d0:9d:a7:f9:26:fa:65:0a:01:
5b:08:0a:39:63:b3:9d:a1:3a:13:b1:9a:67:7f:27:
73:28:81:6a:8d:cc:b5:1d:3f:9c:71:b9:02:69:27:
e7:de:e6:b0:e2:f3:63:a7:7c:4e:1e:86:bf:ab:10:
c0:b8:13:64:1d:88:f1:74:bb:6a:23:cb:b7:68:f6:
79:b3:67:37:88:73:62:95:b1:77:27:79:85:f7:a7:
07:6a:35:26:a7:81:1b:cd:02:8e:fd:eb:3e:b3:c4:
f8:98:d8:81:2b:d6:8e:5a:08:e1:f5:b7:47:03:b0:
3f:be:92:22:c2:12:66:60:8b:d7:0f:6f:9a:3f:fd:
ae:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:62:A7:C2:7C:D9:65:6A:83:BC:CF:46:62:54:CE:DA:A3:37:4C:17
X509v3 Authority Key Identifier:
keyid:0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:22:9e:47:43:46:bd:69:af:85:24:8c:84:07:dc:93:56:dd:
f8:46:63:11:5f:9a:aa:b8:c3:7a:9b:76:2c:ec:c6:d3:0b:7a:
de:98:37:99:31:9a:4e:a1:74:f2:70:a1:aa:f5:ce:c3:4e:e7:
78:69:2b:90:9c:99:01:2d:b1:65:1f:a1:4b:f7:27:39:37:f0:
e1:ca:8e:39:43:31:0f:6e:0e:e8:f5:2a:cd:07:87:7b:02:39:
bb:56:b8:f5:d1:ab:f8:48:c4:e0:42:a2:0f:4e:f8:77:93:4d:
15:63:09:1b:b4:1e:22:0f:1d:d7:29:bb:b7:81:1c:27:28:67:
67:96:f5:1d:de:24:a9:9c:f7:ea:74:cc:fc:e6:e1:66:6f:60:
55:30:aa:99:81:c1:7a:7f:da:48:a6:d3:53:b0:36:51:57:21:
51:d3:9e:91:66:c2:cf:5c:ea:8c:9a:72:d9:fd:db:95:c7:41:
39:c7:38:25:7e:a0:ee:a9:15:13:13:bd:4e:e1:93:be:79:89:
f8:3c:ff:9a:b6:4b:64:ad:5f:53:58:c7:4b:fb:e4:b4:99:66:
9c:a8:eb:16:b5:4e:5d:c7:6d:03:06:ec:f1:53:e2:a8:61:da:
b8:08:a9:9e:6a:ba:1d:a6:30:02:99:91:72:a5:f7:09:d5:ee:
2c:59:3b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:12:58 2026 by rpki-client