Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
File: DaPL8eDoVupMU7WrroZZTsmTOYI.mft (raw, json)
Hash identifier: xJgVdQod+I6bMi0d9uvwSyVeSv851TX1TKftLQxQtmU=
Subject key identifier: 79:96:46:5E:37:5C:2C:AB:9D:CD:3C:80:06:8F:2C:20:DD:B1:BD:DB
Authority key identifier: 0D:A3:CB:F1:E0:E8:56:EA:4C:53:B5:AB:AE:86:59:4E:C9:93:39:82
Certificate issuer: /CN=0da3cbf1e0e856ea4c53b5abae86594ec9933982
Certificate serial: 019E1C104E7808B52C0832DF15C5B90F927F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
Manifest number: 1036
Signing time: Tue 12 May 2026 12:01:31 +0000
Manifest this update: Tue 12 May 2026 12:01:31 +0000
Manifest next update: Wed 13 May 2026 12:01:31 +0000
Files and hashes: 1: 5sITtlNKM7t60210AUBp_MNFelY.roa (hash: WCuNMPZvNV2cZDWHYzBYLEsyLHu/NPxJGgRX6UeNesQ=)
2: DaPL8eDoVupMU7WrroZZTsmTOYI.crl (hash: 5ou++K6libhJ1rO6rD5UEbu8oWytzuH04ev6l0W+9mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:10:4e:78:08:b5:2c:08:32:df:15:c5:b9:0f:92:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0da3cbf1e0e856ea4c53b5abae86594ec9933982
Validity
Not Before: May 12 12:01:31 2026 GMT
Not After : May 13 12:01:31 2026 GMT
Subject: CN=7996465e375c2cab9dcd3c80068f2c20ddb1bddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e5:93:d0:f1:c4:64:ac:19:48:b6:07:b0:c0:
09:33:cd:75:43:eb:27:d0:79:b2:be:63:f4:b6:df:
fb:07:e6:2c:f2:f4:27:0d:60:53:a0:95:91:5c:73:
89:6e:2d:35:6a:04:3c:b3:34:1d:48:46:ba:48:59:
48:f0:16:fb:c5:9b:2e:2e:ed:7f:cc:72:1d:35:a0:
a2:af:15:e5:9c:57:2a:06:b8:7b:c7:f8:c7:19:5b:
8e:5e:f5:55:b7:4f:c5:8a:8b:60:b0:a8:b3:fe:65:
c5:b7:62:3d:73:0a:4a:30:bc:be:aa:44:34:b9:1a:
0f:70:92:4f:de:54:58:0e:4c:07:17:e3:db:74:e7:
ff:36:8d:8b:74:26:7a:38:b7:0a:4a:5f:99:43:68:
0e:ea:df:76:b0:71:6d:58:db:d0:5e:68:00:4b:e3:
32:aa:e5:74:66:bb:6a:27:52:e8:be:e3:a0:50:32:
e5:72:8b:02:96:55:00:ac:17:5a:16:a2:c3:e4:f6:
b7:59:c9:7d:3d:39:a0:2c:21:5c:33:45:3b:a2:71:
e4:79:01:f7:a1:22:10:6f:ec:1d:e4:8b:c8:cd:51:
fa:5a:43:fa:63:1e:38:db:b2:9f:34:0b:e9:8a:60:
75:c8:1a:f8:6e:11:e1:0d:c8:13:df:6d:62:64:5a:
71:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:96:46:5E:37:5C:2C:AB:9D:CD:3C:80:06:8F:2C:20:DD:B1:BD:DB
X509v3 Authority Key Identifier:
keyid:0D:A3:CB:F1:E0:E8:56:EA:4C:53:B5:AB:AE:86:59:4E:C9:93:39:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:bf:92:97:c5:3d:b0:7c:88:1c:57:75:4b:d1:eb:55:10:2e:
a9:73:6f:25:38:e2:40:96:29:cb:d3:12:75:03:81:b0:60:53:
8d:03:49:12:f9:d4:a8:cd:52:96:7c:84:08:67:d0:71:df:10:
d1:4a:69:b8:4d:ae:74:8a:ca:b6:c1:f4:68:75:ca:4e:2b:34:
de:cb:51:e4:6f:17:93:85:4f:72:7b:c3:c5:04:e5:6b:d3:6b:
a1:8d:bd:3a:f9:bf:c4:ad:5d:f7:f9:99:af:22:a5:10:7e:50:
c3:b2:4e:af:1d:4b:f0:47:63:2d:4e:ac:28:83:b7:85:24:8d:
f1:62:02:cd:f0:37:90:00:5b:c4:dc:3c:e0:99:32:5b:21:d6:
46:79:1b:c1:e7:e4:43:b9:e7:4c:c6:35:4b:73:9d:91:a0:98:
90:54:30:c7:17:fc:59:60:ba:63:d1:bc:32:78:22:21:69:78:
ed:f9:57:9e:0e:3a:e0:7b:e6:f9:b1:85:bf:b9:26:d2:aa:f4:
e3:55:85:21:c3:7d:32:c8:dd:35:e7:26:da:4b:12:e9:a1:f3:
b8:9e:0d:aa:77:72:4f:f9:50:61:25:2b:81:07:e6:54:e5:c9:
77:39:53:20:b9:d6:de:a9:f7:fd:11:9c:1a:e0:8c:90:34:99:
ae:52:f3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:53 2026 by rpki-client