Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
File: D2vaHb-nfHTacoBe7lQY0_DMU50.mft (raw, json)
Hash identifier: jfbr0N81sqSPDJXigpKnLUapFvVFxInAs9gLQlM4HWI=
Subject key identifier: E2:99:E8:80:04:63:61:82:8A:FE:5E:9A:32:7C:0D:64:54:9C:E7:6E
Authority key identifier: 0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D
Certificate issuer: /CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d
Certificate serial: 019E1D9057AADEB2E18347B400EFBED07B9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
Manifest number: 1629
Signing time: Tue 12 May 2026 19:00:59 +0000
Manifest this update: Tue 12 May 2026 19:00:59 +0000
Manifest next update: Wed 13 May 2026 19:00:59 +0000
Files and hashes: 1: D2vaHb-nfHTacoBe7lQY0_DMU50.crl (hash: 0spZdId9TzGSAZJvhd92c7sBIby7eGHFaKQg8ueY5Us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:57:aa:de:b2:e1:83:47:b4:00:ef:be:d0:7b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d
Validity
Not Before: May 12 19:00:59 2026 GMT
Not After : May 13 19:00:59 2026 GMT
Subject: CN=e299e880046361828afe5e9a327c0d64549ce76e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:90:ec:32:8c:de:38:65:f8:0e:b3:ce:49:aa:
45:09:d1:7c:31:05:42:2d:0a:33:71:48:4f:91:a4:
84:e6:20:9f:1c:27:a9:1e:e0:ff:cd:e3:29:78:13:
0e:7b:9f:f1:e7:80:5e:67:fe:f4:82:88:42:f3:cb:
6d:e3:67:27:f9:60:44:7d:0f:1f:14:b7:11:16:57:
1d:75:af:38:dc:c1:fc:68:94:44:e7:09:5e:11:52:
64:33:41:2e:2d:8b:bb:dc:5e:d1:1f:c3:19:9f:75:
6d:7a:55:d8:ca:45:52:12:45:d3:68:c3:6f:ec:91:
ff:ae:24:58:c3:22:0c:6a:9c:a3:22:f1:22:43:dd:
b2:08:d1:c6:2e:5b:a9:8b:81:7e:1c:79:68:de:f0:
57:74:39:f3:c5:f0:45:b5:23:2c:8b:b0:3e:6c:23:
b5:c3:a4:d1:c0:ee:c7:ad:ce:9a:5b:1b:59:75:34:
d3:ba:e8:95:f6:38:f9:e8:33:cd:87:f3:d1:48:94:
70:89:48:3c:1b:c3:f2:4b:67:76:95:f7:ae:f0:42:
70:97:7b:fa:62:7f:41:ec:08:20:be:f2:f4:df:5d:
fb:f7:96:66:c5:32:7b:b8:8b:64:9c:f2:27:68:57:
98:1c:a6:00:56:50:9e:4e:ee:4c:ec:b7:51:f3:c1:
6a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:99:E8:80:04:63:61:82:8A:FE:5E:9A:32:7C:0D:64:54:9C:E7:6E
X509v3 Authority Key Identifier:
keyid:0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:e5:ad:3b:25:36:7c:b8:d8:67:9a:81:b4:84:61:fd:7b:5f:
07:8a:76:f1:63:c7:d7:84:cc:47:00:2f:0b:40:82:f8:14:87:
24:70:bf:31:06:99:75:78:53:1c:68:9e:71:a2:b4:90:0b:44:
82:64:8f:96:5d:09:b1:a6:26:1e:5a:d4:4d:98:5f:78:1f:94:
9c:5e:a5:44:34:0a:b1:aa:08:bd:c0:df:19:bf:a5:fc:20:92:
3a:8c:39:70:97:59:5c:88:09:ba:85:3f:4f:c2:d8:17:63:8f:
2f:8a:a3:71:14:74:cc:12:80:89:c2:59:0c:0c:bf:2d:91:8b:
d1:59:f2:d4:db:be:08:f4:a1:90:52:c8:1b:47:68:7f:08:65:
8d:5f:80:df:be:a2:f7:81:67:d9:80:25:c3:0a:58:69:65:3b:
5e:82:19:9c:5c:d7:cb:55:dc:ac:6a:b3:80:2c:a6:2a:28:e5:
9d:98:cc:b9:fc:86:07:80:e0:de:48:fc:98:30:c4:19:62:82:
7f:8e:b5:07:98:7f:49:7e:00:12:05:08:0f:2d:b7:12:e5:c2:
68:64:01:04:02:c5:9b:75:f8:1f:4a:8c:d1:46:2e:47:ab:af:
bf:2c:63:e9:18:50:d0:1a:12:5a:bb:3a:cb:d2:b5:6c:5b:93:
9a:c1:1c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:01 2026 by rpki-client