Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
File: DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft (raw, json)
Hash identifier: DLKQlT4OlVX/T40O6N/lKbZU2FxVWpWNl33XzQ4FfoM=
Subject key identifier: D1:09:61:BC:3D:97:32:13:A8:8E:F4:5B:D6:76:BA:2E:EB:2B:FE:2E
Authority key identifier: 0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC
Certificate issuer: /CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
Certificate serial: 019E1F1107F2E72A36B861E1E65385E0B994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
Manifest number: 1906
Signing time: Wed 13 May 2026 02:01:10 +0000
Manifest this update: Wed 13 May 2026 02:01:10 +0000
Manifest next update: Thu 14 May 2026 02:01:10 +0000
Files and hashes: 1: DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl (hash: OEtIf3/+bUwcxbbypzpIGdmvcImUjhFo7awFAfOPbGE=)
2: X2dW8Ddau0oR-gekYObrhkFfF_g.roa (hash: CXklzZ2YRKZLcPWGGWuQjQMp/BVjdo/rLeJlfyEGzHE=)
3: vEA8ukjZ43YZlzw8CBVOqmyggo8.roa (hash: tuYAox2HkNBn4tSAkZLkz/3INYGpptZYZBvxGb9Ksys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:07:f2:e7:2a:36:b8:61:e1:e6:53:85:e0:b9:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
Validity
Not Before: May 13 02:01:10 2026 GMT
Not After : May 14 02:01:10 2026 GMT
Subject: CN=d10961bc3d973213a88ef45bd676ba2eeb2bfe2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:95:6b:f3:7e:ea:46:6f:06:2a:29:50:64:37:
fe:da:ca:c0:6a:fd:5e:4d:ea:23:bd:46:6d:f9:dc:
37:8a:34:fb:19:73:31:40:80:2a:fc:af:ad:09:1b:
98:3f:96:14:74:64:f0:c5:62:a0:07:ac:d1:ff:08:
23:b9:7c:d7:08:44:17:a6:69:1f:dc:a3:1c:3a:9a:
02:58:f5:17:d2:16:34:02:e2:4a:db:f5:15:89:d0:
6c:d1:97:5a:26:63:10:61:43:73:35:d1:e9:98:0b:
9a:1d:a0:d4:e8:4a:d3:83:8a:5d:f3:d4:06:a4:8d:
56:d8:a0:dc:71:f5:ab:83:57:10:0c:fe:71:8d:87:
c7:01:a3:1e:85:67:c5:9b:10:6d:70:29:e6:ca:44:
ad:34:e6:1a:d4:a4:d4:bb:5b:cc:29:8f:b8:08:22:
db:55:19:ef:f8:ba:1a:19:1a:75:b7:57:b7:e7:b0:
e6:ef:e9:d1:e7:58:e3:cd:7f:1f:e7:1e:4e:4a:e1:
71:c8:53:35:83:b7:07:42:20:79:86:7a:cf:48:63:
bf:a8:4b:91:ec:ae:33:90:b2:45:27:4f:a1:f2:cd:
b6:ff:11:49:8d:07:62:8d:c5:4b:ed:86:11:7a:0b:
84:8d:88:87:8a:50:e8:08:a8:0e:d1:3d:ea:f4:76:
9d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:09:61:BC:3D:97:32:13:A8:8E:F4:5B:D6:76:BA:2E:EB:2B:FE:2E
X509v3 Authority Key Identifier:
keyid:0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:4c:78:c4:3b:49:de:6b:5b:c8:b5:26:93:84:df:9b:60:10:
96:50:5b:6c:ff:33:5e:e1:fd:37:6e:29:ff:41:d2:45:1d:95:
0a:e8:cd:c8:a7:3e:08:d3:f8:4b:09:df:d1:11:d7:0e:3a:95:
ac:57:0d:16:f4:8c:71:ef:f2:c2:81:c1:e5:56:17:a4:0b:ed:
86:e7:0e:af:03:8e:b5:25:99:9d:3f:6e:bf:ea:08:85:12:4d:
99:9b:02:13:28:b1:07:2e:f3:62:a2:48:f5:2e:d7:a7:e0:a7:
a4:5f:f7:b7:3b:93:aa:46:a6:7f:cb:c4:f7:22:e3:7f:17:d9:
fa:26:c8:fc:10:24:67:6e:3e:f9:3a:55:54:05:1d:bb:36:8a:
7d:50:06:3f:53:1a:d3:5f:87:52:91:62:a2:cb:2d:34:9b:4f:
23:45:3c:31:36:59:6a:a6:f8:4a:36:c4:39:43:b1:88:32:60:
ad:af:cc:c9:cc:ca:11:81:81:a7:69:d2:41:e3:5a:4b:68:f9:
28:6f:06:a1:c1:b0:d0:0f:ab:53:26:7c:8c:d6:00:82:ed:2f:
91:bd:a7:1f:d6:fe:96:0c:60:86:82:b6:dd:38:a2:86:d1:a6:
4f:b4:08:12:f5:ae:0d:99:18:6e:aa:ae:dd:dd:78:0b:77:c0:
14:3a:85:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:13:19 2026 by rpki-client