Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/6069c2-9625-4fff-b737-cc265b0461c2/1/15dPQ3RodlWDV_H7kcOFKlg6FFM.mft
File: 15dPQ3RodlWDV_H7kcOFKlg6FFM.mft (raw, json)
Hash identifier: hlo6aMDbmHQKFIkWoJnIdw6sL3fgGcuLu3w0ebVXdLI=
Subject key identifier: DC:CF:59:2D:07:CA:3A:B3:48:55:7A:EE:BC:45:F9:60:C6:69:3A:1C
Authority key identifier: D7:97:4F:43:74:68:76:55:83:57:F1:FB:91:C3:85:2A:58:3A:14:53
Certificate issuer: /CN=d7974f43746876558357f1fb91c3852a583a1453
Certificate serial: 019E1CB49D02E376540367E3413BCBD9D72D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15dPQ3RodlWDV_H7kcOFKlg6FFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/6069c2-9625-4fff-b737-cc265b0461c2/1/15dPQ3RodlWDV_H7kcOFKlg6FFM.mft
Manifest number: 0CBB
Signing time: Tue 12 May 2026 15:00:59 +0000
Manifest this update: Tue 12 May 2026 15:00:59 +0000
Manifest next update: Wed 13 May 2026 15:00:59 +0000
Files and hashes: 1: 15dPQ3RodlWDV_H7kcOFKlg6FFM.crl (hash: H3kHJudI2Wfm/14vqomF+93E/DZko5fNqXGqg8Yb64Y=)
2: VzTt_U2Xq4HtkF0N31czQeZ4QJ4.roa (hash: sGTjG5nzZ1Busaiz9AdE7PDlfqVXk+5CXP96twOrlCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/6069c2-9625-4fff-b737-cc265b0461c2/1/15dPQ3RodlWDV_H7kcOFKlg6FFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/6069c2-9625-4fff-b737-cc265b0461c2/1/15dPQ3RodlWDV_H7kcOFKlg6FFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/15dPQ3RodlWDV_H7kcOFKlg6FFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:9d:02:e3:76:54:03:67:e3:41:3b:cb:d9:d7:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7974f43746876558357f1fb91c3852a583a1453
Validity
Not Before: May 12 15:00:59 2026 GMT
Not After : May 13 15:00:59 2026 GMT
Subject: CN=dccf592d07ca3ab348557aeebc45f960c6693a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4b:6d:4c:55:e4:c0:12:09:a0:30:b5:8d:b4:
3b:cb:03:28:4d:27:e5:13:6b:2b:51:f4:ca:a3:6b:
49:ab:ae:a9:18:fe:08:f8:19:7f:92:7a:5e:67:41:
ad:be:0a:5c:ac:3e:14:5c:39:20:cd:20:a5:91:1f:
12:e7:3e:30:78:1f:8a:34:ea:cc:e8:c6:45:de:cf:
8b:1e:43:6c:65:a8:9d:0d:2b:f8:29:c9:e4:74:cb:
2d:6d:12:c7:6b:c1:74:bd:51:87:bc:82:c2:28:18:
65:88:52:49:65:e3:6b:d4:18:14:4b:d9:ff:6e:78:
5a:81:07:08:d7:dc:fd:f6:10:71:97:93:39:be:43:
c4:79:2e:3a:6f:45:1e:da:8f:29:29:64:60:c5:ac:
27:7b:63:2e:6d:41:83:2e:b8:e9:f2:ae:15:e2:9b:
68:7d:48:d1:49:cb:06:17:5f:12:68:ef:4a:dc:c3:
32:e8:ca:28:c5:6b:f9:37:3f:30:c5:74:20:2e:22:
e9:6a:74:3a:23:31:1d:03:d0:57:b6:7d:92:69:a9:
cd:7f:f5:46:af:e8:cb:89:60:2a:98:36:3c:3a:7c:
f3:d0:3a:e7:49:7d:88:80:9e:e8:51:cf:cb:52:6c:
2a:2d:46:21:c2:3c:3f:1c:7c:01:95:d0:24:dd:4a:
4d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CF:59:2D:07:CA:3A:B3:48:55:7A:EE:BC:45:F9:60:C6:69:3A:1C
X509v3 Authority Key Identifier:
keyid:D7:97:4F:43:74:68:76:55:83:57:F1:FB:91:C3:85:2A:58:3A:14:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15dPQ3RodlWDV_H7kcOFKlg6FFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6069c2-9625-4fff-b737-cc265b0461c2/1/15dPQ3RodlWDV_H7kcOFKlg6FFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6069c2-9625-4fff-b737-cc265b0461c2/1/15dPQ3RodlWDV_H7kcOFKlg6FFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:fc:3c:e9:b5:26:ae:41:88:09:dc:ad:e9:83:c4:72:66:22:
47:f5:30:83:de:b4:fb:00:11:2c:da:e8:3b:f1:91:03:31:d1:
7f:91:10:c6:5c:38:58:50:35:7e:40:b8:da:9b:ab:5f:2e:75:
5b:06:20:ac:9b:fc:22:3f:99:58:6c:f2:91:2f:bd:fa:cb:61:
80:47:23:81:38:43:37:09:6b:c6:f3:47:af:29:8c:58:fe:49:
9d:51:2d:ec:4b:5e:cd:ab:76:9f:90:57:93:49:f8:a4:05:53:
c1:89:63:15:0e:f8:a9:48:e8:2c:fa:94:ed:03:f8:29:91:07:
39:fb:b1:f6:bf:91:73:06:f2:b0:24:d5:9d:0e:a2:23:11:ae:
d6:36:87:55:46:bc:f1:e8:e8:1f:f4:1f:3a:81:1d:43:e5:c8:
02:f6:f1:a0:44:e0:a5:ae:22:75:64:47:45:82:7c:63:ba:94:
4a:50:27:b9:5a:ed:ad:c5:c3:25:d6:f5:aa:3a:85:e2:bb:24:
19:89:1c:3b:42:bb:73:a1:01:51:14:a0:20:0e:60:b9:12:d7:
f7:7e:5b:73:5b:03:b1:c5:5c:b7:29:13:4a:a6:e5:af:8e:c8:
65:43:eb:0b:fe:21:fd:95:1e:8b:20:8c:7f:26:b3:32:0a:9b:
1e:18:45:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:23 2026 by rpki-client