Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
File: dOgVmhbXKz1s37qgltaROf3p0pA.mft (raw, json)
Hash identifier: k6wJEFLuiFJJTFR3BQQhrfvEl9m6Gl4mrWbJHkMXCu4=
Subject key identifier: 5D:6C:64:D5:87:E3:28:17:79:C9:3D:2B:A7:06:EB:6F:0F:F7:8F:1C
Authority key identifier: 74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
Certificate issuer: /CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Certificate serial: 019E1E6C5C93A71A24178E5EA7FCA6C15519
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
Manifest number: 09A6
Signing time: Tue 12 May 2026 23:01:18 +0000
Manifest this update: Tue 12 May 2026 23:01:18 +0000
Manifest next update: Wed 13 May 2026 23:01:18 +0000
Files and hashes: 1: dOgVmhbXKz1s37qgltaROf3p0pA.crl (hash: X1cuLl9F71yUq1VDfjwtGjE7H5Byx8bPfisCJCU+04s=)
2: qdFP8iSD0Z_J4wvN-DjLd-7BFwQ.roa (hash: 0D/tNJqnYIvzeRQq9p/CHZuxh+SBEqxg5rvNHFpn3cY=)
3: vrCign6erTM1LbQRKP4h0IonXBQ.roa (hash: AQYpWzYbq4r9zz5A/4U8pWZOmJvv2qppgX/OMFbKwks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:5c:93:a7:1a:24:17:8e:5e:a7:fc:a6:c1:55:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Validity
Not Before: May 12 23:01:18 2026 GMT
Not After : May 13 23:01:18 2026 GMT
Subject: CN=5d6c64d587e3281779c93d2ba706eb6f0ff78f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e7:ed:a0:f3:3b:91:80:1d:69:33:df:72:45:
1d:f7:b3:4d:35:9e:34:b9:3c:38:53:a3:b2:5a:3e:
03:37:15:2b:7d:3f:a8:c0:37:8f:96:16:73:df:0d:
e6:23:97:30:99:00:2a:ed:05:24:6d:b9:5e:70:af:
1e:03:49:de:6c:82:11:51:5b:10:34:b0:b2:77:22:
46:2f:cb:43:b5:aa:29:ea:4c:b9:ad:29:06:82:62:
3f:23:10:66:36:6a:e0:b4:2a:26:01:79:33:98:8e:
ff:15:26:f6:bf:3d:86:2b:9d:55:6f:92:dc:87:1b:
d2:f1:91:d2:6e:19:b2:6f:8e:f8:d1:23:b7:1e:b8:
f4:8c:2c:2a:19:c6:d5:86:18:76:43:85:f8:fa:0d:
7b:b3:69:2f:81:1f:0f:fe:f7:e9:69:65:a1:de:7e:
47:60:98:e6:4d:0e:a7:90:10:71:ee:7d:ca:17:6f:
3c:41:74:21:78:fe:62:de:00:5d:9a:dd:2b:03:54:
2f:84:9b:03:78:51:c1:f2:c0:d2:ec:af:11:24:db:
08:ce:41:d8:a1:53:87:3c:7b:e4:aa:c0:49:a9:5b:
5a:da:c3:ef:c9:1e:13:14:e9:d0:d5:37:7a:d3:05:
33:37:9f:63:58:cf:40:b4:ce:a3:22:fa:74:6b:e4:
04:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6C:64:D5:87:E3:28:17:79:C9:3D:2B:A7:06:EB:6F:0F:F7:8F:1C
X509v3 Authority Key Identifier:
keyid:74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:68:41:f6:2d:fc:b2:69:ba:4d:00:03:44:4f:15:3b:37:78:
95:b2:1b:c8:81:98:4d:88:c6:b1:81:bf:f3:68:1f:d1:d5:bc:
a3:39:0d:81:b7:b8:9a:b5:d6:1f:0a:97:77:32:b5:7d:6d:08:
7a:0d:c4:dc:c5:73:dc:e1:29:27:c2:56:a0:3a:82:d8:84:ca:
a6:ed:ff:8b:4d:3c:f5:5f:cb:bc:9d:b5:40:52:78:97:02:8c:
4b:48:b6:77:87:01:e0:d1:7a:76:48:e7:fa:49:f4:90:6a:5f:
af:87:23:88:ff:c3:a8:a7:12:d3:7d:42:60:74:77:16:9c:73:
40:92:50:20:7a:56:1f:1f:f9:ca:98:5f:41:84:95:2b:4b:e3:
8f:4c:d5:19:8d:38:35:76:10:16:ba:c5:70:1d:41:25:b5:72:
4c:b0:2f:4f:cd:cd:71:35:d9:6a:4d:3f:ac:16:e0:9d:dd:36:
34:5e:08:7c:da:8d:58:62:1f:1b:fa:38:52:20:28:69:d4:93:
98:20:4d:3e:a3:85:4c:27:10:e2:dc:69:44:ca:c0:f7:7e:33:
56:d9:c3:58:a4:56:c4:64:05:6b:09:ab:74:98:1f:d2:40:a7:
07:a3:92:75:f6:48:1f:b5:a5:a8:c3:11:c8:77:d5:84:08:cc:
e0:e9:6e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:43:53 2026 by rpki-client