Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.mft
File: D1pCPdyX3TDeyLhnPCSWjic3JnY.mft (raw, json)
Hash identifier: B+dpYTvIOYrZo+1SKMVfjPlLmWVlqk+Maf3kNwy3qh0=
Subject key identifier: EF:7E:3A:6B:33:5A:BC:23:7F:63:C4:8B:05:02:6E:6A:6F:5D:74:1B
Authority key identifier: 0F:5A:42:3D:DC:97:DD:30:DE:C8:B8:67:3C:24:96:8E:27:37:26:76
Certificate issuer: /CN=0f5a423ddc97dd30dec8b8673c24968e27372676
Certificate serial: 019E1D230068B4E53FC7478E6401D63474EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1pCPdyX3TDeyLhnPCSWjic3JnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.mft
Manifest number: 03C9
Signing time: Tue 12 May 2026 17:01:33 +0000
Manifest this update: Tue 12 May 2026 17:01:33 +0000
Manifest next update: Wed 13 May 2026 17:01:33 +0000
Files and hashes: 1: D1pCPdyX3TDeyLhnPCSWjic3JnY.crl (hash: Tj3/9eNHMBWP8AY/KsybSPgAPj0qL3FaZQLYok5KLes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1pCPdyX3TDeyLhnPCSWjic3JnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:00:68:b4:e5:3f:c7:47:8e:64:01:d6:34:74:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f5a423ddc97dd30dec8b8673c24968e27372676
Validity
Not Before: May 12 17:01:33 2026 GMT
Not After : May 13 17:01:33 2026 GMT
Subject: CN=ef7e3a6b335abc237f63c48b05026e6a6f5d741b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4f:d6:87:18:f0:66:d9:cf:6a:0a:eb:ea:81:
a0:48:a3:ae:e8:92:0b:77:5d:45:f4:92:54:aa:fd:
a2:c7:50:1e:c7:62:d7:ea:01:8a:75:cf:c6:ed:16:
d1:0a:f0:4e:c6:54:26:8c:a6:fc:2e:b7:92:f6:a7:
91:8a:f0:84:a8:c6:9c:39:9c:c2:02:4a:4a:c4:67:
fc:64:92:7a:75:ad:eb:a7:00:8e:65:25:d6:76:88:
34:c4:fb:ce:f2:78:a4:21:29:05:9e:ad:04:ff:b0:
7f:35:a2:85:e4:0b:b2:58:1e:34:cf:cc:d3:57:30:
3c:95:02:e3:66:0f:68:1a:e7:c8:31:2f:0e:9e:b2:
b2:e5:09:ac:d7:33:c7:4e:ab:6e:14:29:67:da:65:
b6:7c:ae:d9:46:c5:c6:85:3a:48:0d:78:29:0e:2f:
0c:a6:8a:46:f2:61:08:cd:a3:de:85:df:43:de:3f:
78:fd:4f:8b:bb:dd:77:93:ed:44:91:b7:1d:97:85:
97:cd:2e:6a:b3:86:eb:87:90:90:d5:67:6c:ca:7a:
bc:85:da:9a:1c:3b:a7:6c:db:4d:16:88:ea:8d:6e:
09:08:57:a1:ee:8e:ed:cf:2f:01:aa:33:fc:84:f8:
fd:1a:b7:a7:2e:94:cd:37:a5:1a:a9:15:56:ca:3f:
7b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7E:3A:6B:33:5A:BC:23:7F:63:C4:8B:05:02:6E:6A:6F:5D:74:1B
X509v3 Authority Key Identifier:
keyid:0F:5A:42:3D:DC:97:DD:30:DE:C8:B8:67:3C:24:96:8E:27:37:26:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1pCPdyX3TDeyLhnPCSWjic3JnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:54:9a:12:ff:07:d4:b9:c5:13:79:40:29:04:d7:ff:4a:4b:
81:76:68:26:e1:45:d8:dd:7b:31:af:f8:0b:34:db:ec:93:50:
6c:82:be:d3:3e:6c:bb:ee:9c:bf:00:a4:91:f7:2e:73:f9:62:
8b:f7:1a:68:ae:ac:13:6e:a6:cf:05:6e:cd:e9:72:ec:10:bf:
49:ea:67:9f:a0:0d:92:22:50:3b:3f:30:56:a7:5f:aa:d8:d4:
3b:57:05:99:96:a5:4b:4e:53:17:0a:12:79:27:23:04:b4:bc:
42:66:e3:52:fb:c3:9e:b8:14:f1:5f:96:f2:07:95:80:20:45:
c2:75:c0:6e:fa:db:bf:ca:e5:60:db:89:3e:46:50:08:d2:99:
3c:c4:f8:71:63:4d:50:ba:ff:14:2e:c2:31:18:0b:98:e3:8c:
d0:2b:2b:6d:3e:eb:9b:e2:ba:b1:9f:6f:bb:6d:86:8c:2d:03:
a2:b1:f6:74:b0:96:77:6d:a5:54:7d:29:ec:2f:3b:1c:38:32:
ee:64:68:90:c0:8d:ae:21:a2:a8:4e:86:e9:02:2c:45:c1:37:
a5:1a:d4:6a:ad:62:b4:45:63:cf:a8:07:2f:4b:ce:f5:9d:41:
bd:f1:61:4a:3f:1a:39:d9:84:d8:12:99:90:c6:14:e6:35:c4:
42:71:7c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:50:36 2026 by rpki-client