Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
File: DG8YKAS1blCKo3LAPM63PvjCxos.mft (raw, json)
Hash identifier: I6xN8F0Vwg6ZOGQDWpTTZW+NB1NXDuSqVtjmkeYakfc=
Subject key identifier: 40:55:33:59:F3:F3:89:20:4A:4C:FA:01:89:5F:1A:BF:4D:EE:3D:07
Authority key identifier: 0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B
Certificate issuer: /CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b
Certificate serial: 019E1D9077410F3F023C40313F43C8742422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
Manifest number: 190E
Signing time: Tue 12 May 2026 19:01:07 +0000
Manifest this update: Tue 12 May 2026 19:01:07 +0000
Manifest next update: Wed 13 May 2026 19:01:07 +0000
Files and hashes: 1: DG8YKAS1blCKo3LAPM63PvjCxos.crl (hash: OaHfUL6znfvBeJEXixekm+wZzgSW3OhpijDU5x7xGsA=)
2: anGfaLD7Sw-uBHUL7ZCjm1E0Zuo.roa (hash: odjCBhO2fg7tVXSaHs+W/QeZyJocuWu2JrcGva0i788=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:77:41:0f:3f:02:3c:40:31:3f:43:c8:74:24:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b
Validity
Not Before: May 12 19:01:07 2026 GMT
Not After : May 13 19:01:07 2026 GMT
Subject: CN=40553359f3f389204a4cfa01895f1abf4dee3d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c2:37:5f:55:65:3c:67:af:34:4b:30:8f:4d:
35:82:48:25:7d:35:9c:b8:76:52:94:70:b9:c5:39:
af:2b:6d:5f:cf:58:37:2d:9f:55:f6:8c:b4:1a:4e:
f4:9f:74:22:5d:f2:14:b5:52:2f:22:a6:8a:59:0e:
5f:69:d7:1a:28:90:d9:0c:7e:e2:eb:f2:6c:90:65:
c0:c8:3a:3b:8e:e7:39:9b:d0:e1:bf:4e:05:8e:af:
cc:1f:03:33:b8:6a:35:85:d6:74:e7:0f:67:6c:39:
8b:1d:44:1b:ef:80:7c:74:ad:96:80:e0:ab:06:38:
6e:ee:f6:60:d8:36:5b:25:54:57:64:7c:e5:fc:d6:
1e:18:f9:a3:19:b8:70:05:fd:f3:38:3e:ad:18:7a:
a8:d2:ad:27:40:ac:6a:52:66:ea:b5:26:7c:f4:f1:
7a:d8:74:b5:dc:21:98:50:bf:7d:e8:a0:9c:b8:1d:
2e:df:4e:ad:71:a8:68:c1:02:81:76:0b:fb:a3:a6:
23:ae:eb:0a:50:87:8f:d3:65:54:5d:b1:2e:f6:1c:
94:73:96:22:f0:2b:f5:45:cd:3e:75:11:73:45:cc:
d0:75:63:ee:82:a3:eb:94:94:d8:cd:79:f3:44:2a:
be:cf:e3:e6:c8:11:6b:10:24:b9:8a:9d:6a:9f:73:
dd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:55:33:59:F3:F3:89:20:4A:4C:FA:01:89:5F:1A:BF:4D:EE:3D:07
X509v3 Authority Key Identifier:
keyid:0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:72:9b:f0:a0:49:e6:11:2c:23:2c:aa:0a:d5:30:97:38:f9:
0a:2e:05:de:74:be:42:51:01:19:ed:5e:3c:5e:4f:64:0a:ba:
23:3c:65:18:d5:14:5c:19:21:83:c6:93:3e:1b:36:98:71:eb:
3d:e6:64:03:ae:48:0f:42:08:5a:9e:1b:2a:67:72:c4:14:5b:
41:5f:97:f4:f9:24:d0:d8:7d:c3:c9:ac:8d:53:f5:6c:d2:02:
67:2f:74:ed:5d:c2:42:f1:bc:91:6e:62:95:99:90:16:dd:93:
0f:f0:7a:d2:44:8e:1f:5e:bb:a9:a8:c9:10:0a:6b:c7:1f:a5:
3e:ad:ac:1f:4b:d5:b1:5e:ec:a8:56:41:67:19:43:4c:c8:e7:
39:03:67:bc:29:e3:f5:10:8d:53:51:6b:e4:bd:fb:15:d6:5a:
6e:94:1a:96:0b:0b:5d:74:be:8f:72:fe:56:37:bf:2d:cc:a8:
34:2c:04:5c:a5:31:67:df:a3:86:08:15:0c:c8:2a:63:0b:03:
44:9a:d2:b0:d1:fb:f9:8b:11:27:83:4d:11:c9:82:05:4e:77:
24:f8:de:ed:4a:a2:42:56:a3:09:d5:71:1b:7e:60:c1:29:ea:
84:63:c3:b9:16:51:b8:6a:73:33:e7:2e:d5:98:b4:90:83:51:
79:84:18:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:06 2026 by rpki-client