Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.mft
File: fD2KpDg1BKMa_0sAaBCga88DBa4.mft (raw, json)
Hash identifier: 4W7v20ypWaefjMCF4aExBRpfdbLWL8gxXwy4CCVvA1M=
Subject key identifier: DD:82:DB:A5:2A:45:30:07:8D:6B:22:B4:A1:1D:71:66:4D:84:2C:CA
Authority key identifier: 7C:3D:8A:A4:38:35:04:A3:1A:FF:4B:00:68:10:A0:6B:CF:03:05:AE
Certificate issuer: /CN=7c3d8aa4383504a31aff4b006810a06bcf0305ae
Certificate serial: 019E1EA314AEBDED76A4428B5CBF9FA3E167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD2KpDg1BKMa_0sAaBCga88DBa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.mft
Manifest number: 14E2
Signing time: Wed 13 May 2026 00:01:04 +0000
Manifest this update: Wed 13 May 2026 00:01:04 +0000
Manifest next update: Thu 14 May 2026 00:01:04 +0000
Files and hashes: 1: fD2KpDg1BKMa_0sAaBCga88DBa4.crl (hash: t2KQVJMwmwTIzEAYwMvVxsTJdlesS2E7gCc8t3mqrWg=)
2: ynivGHGV8Z6F2cby7L1fi45lXJI.roa (hash: p2d61mUjDisc5jYXXPmal+v44ksSKZ1nKZ0hR92ybdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD2KpDg1BKMa_0sAaBCga88DBa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:14:ae:bd:ed:76:a4:42:8b:5c:bf:9f:a3:e1:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d8aa4383504a31aff4b006810a06bcf0305ae
Validity
Not Before: May 13 00:01:04 2026 GMT
Not After : May 14 00:01:04 2026 GMT
Subject: CN=dd82dba52a4530078d6b22b4a11d71664d842cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b2:e9:af:13:12:12:c8:a3:7f:01:56:63:9b:
b3:ea:c1:5a:dc:09:1d:b0:17:c0:a2:ff:d0:c3:5a:
e4:74:d6:ab:2e:5b:83:e6:b0:cf:00:05:8a:9c:a6:
c7:c0:33:63:56:7b:03:b5:94:e5:3c:f0:73:94:a1:
93:df:c1:3b:f8:b0:20:9b:cc:a7:7b:b9:e5:20:23:
23:13:d2:c0:64:9f:88:c7:41:92:6d:4f:86:61:73:
1b:5c:3a:b0:a9:7c:25:e8:a3:69:d3:5d:24:ed:81:
98:49:47:d7:04:45:b2:0a:40:b8:60:77:d0:d0:31:
96:25:5f:06:d6:90:f6:53:77:88:8c:4f:ec:d3:5b:
13:6f:b0:96:df:55:04:a9:4d:ec:d1:59:07:8f:c0:
33:cb:50:b0:f0:2a:b7:2b:0c:42:74:13:4f:05:ab:
34:8e:b2:9d:e2:2b:be:8c:84:7c:b8:d1:0d:c0:ed:
f2:9c:ac:55:6e:aa:b2:48:4f:fa:b1:c8:0d:8f:ba:
9b:48:bb:bc:f9:9a:bf:7f:d5:6d:34:07:f0:2a:50:
76:c3:9f:1b:93:a3:33:06:ce:ec:13:8c:70:be:44:
65:85:f9:18:10:13:91:0b:44:51:d6:a4:3f:df:6d:
34:b2:a4:9d:43:40:3a:c3:d0:4d:25:e5:38:9b:0a:
6f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:82:DB:A5:2A:45:30:07:8D:6B:22:B4:A1:1D:71:66:4D:84:2C:CA
X509v3 Authority Key Identifier:
keyid:7C:3D:8A:A4:38:35:04:A3:1A:FF:4B:00:68:10:A0:6B:CF:03:05:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD2KpDg1BKMa_0sAaBCga88DBa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:15:e3:9f:de:17:56:f5:33:eb:8b:64:8c:f5:75:7a:0e:b0:
e1:1f:e9:d9:03:c9:ac:63:61:81:8e:8b:7e:22:67:e7:87:8c:
2d:54:06:9f:7c:9b:cb:99:66:13:89:df:74:d6:8b:5f:7d:57:
56:6a:b8:e3:36:d3:0b:27:68:9b:66:cd:ab:fe:68:31:d8:5e:
95:d0:74:f2:56:36:9b:83:2f:c9:92:88:73:b1:aa:6f:01:68:
f5:d8:6a:cb:b4:fe:7b:05:53:b7:eb:ad:9c:3d:b6:e3:a2:45:
a0:d3:b8:4f:9c:85:da:5d:3a:71:73:51:cd:f8:f5:82:b3:b9:
e8:da:a0:c9:2e:b8:c3:f0:41:ba:d5:52:80:11:ad:eb:ca:39:
a0:dc:06:03:47:85:bc:b2:55:49:2e:21:0b:3e:09:33:68:55:
ac:7f:f9:2d:c3:37:a1:57:90:4f:78:e0:b2:73:77:97:e1:ad:
87:0e:e3:9f:72:8a:09:d5:96:fc:47:3c:4b:75:13:d1:9c:17:
46:19:89:81:2b:01:f6:9c:f7:a0:f4:4c:d2:ed:d2:de:76:77:
e0:27:5e:ce:0c:c0:b0:d5:a4:1b:7b:6e:59:25:b9:aa:e4:c2:
bb:f5:2c:99:79:30:e1:92:25:52:a1:67:0e:4a:10:da:c0:e1:
55:47:91:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:13:30 2026 by rpki-client