Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
File: DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft (raw, json)
Hash identifier: Heh3beHPgP031fel1VlpdLtmD42o9F3xQCNVKnZee54=
Subject key identifier: 55:8A:FD:D7:EA:74:CE:6C:0B:16:A0:2D:4A:DD:C6:78:C8:C1:41:D9
Authority key identifier: 0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
Certificate issuer: /CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Certificate serial: 019E1CEBB21BCA432319114FCA19D6F5504C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
Manifest number: 17F7
Signing time: Tue 12 May 2026 16:01:09 +0000
Manifest this update: Tue 12 May 2026 16:01:09 +0000
Manifest next update: Wed 13 May 2026 16:01:09 +0000
Files and hashes: 1: 2lfnmN1-dLZH09vmQWL0x_KLc8Y.roa (hash: JmmqwM4dV5ZCDyqAq/Au9vdb5ogccNfE+4IrV1SqD54=)
2: DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl (hash: iDQP1JH66+w675zq/kXpie2ld15hZov2mUn7H1S93aw=)
3: cpBLfVVbG2Bg4TA77UzT5VjhgRE.roa (hash: N0d6jFAymHdRViLXYwxHMPIvLpjH51TdzFY5Ek5D56g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:b2:1b:ca:43:23:19:11:4f:ca:19:d6:f5:50:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Validity
Not Before: May 12 16:01:09 2026 GMT
Not After : May 13 16:01:09 2026 GMT
Subject: CN=558afdd7ea74ce6c0b16a02d4addc678c8c141d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:77:02:91:b9:f4:d9:33:b5:88:87:d6:b7:cc:
70:07:d1:80:f8:8d:aa:5a:e3:fd:9a:a0:b8:34:48:
0b:8a:eb:92:bd:60:d6:96:ba:34:c0:04:fb:b8:89:
25:b2:fc:36:90:13:c7:f9:2a:e1:96:4f:39:35:bc:
dd:c1:bd:31:15:31:f9:78:35:3a:ab:3f:f4:26:f4:
e5:6a:1e:47:6f:75:d4:99:a1:39:bc:82:c9:a4:9b:
e2:ea:a7:df:8c:65:3a:85:c4:27:eb:7d:20:be:f6:
9b:a9:1f:e7:8a:c8:fb:ff:60:03:30:bc:73:62:fb:
d7:2d:81:50:cd:cd:b7:6b:73:8c:b9:79:2d:35:24:
87:e6:71:16:40:ca:c7:7d:83:3d:30:92:0b:2e:08:
b9:09:90:90:d8:8a:23:33:5e:d6:ea:72:d4:72:57:
eb:ed:32:e7:08:4c:21:e6:ca:47:c5:12:71:1a:e1:
ee:ce:a2:09:a3:bd:0f:ce:52:7d:26:d0:c8:cf:34:
2a:46:a7:b4:ce:9d:f3:25:c3:7a:4b:bc:6e:56:36:
dc:7c:f0:fd:b3:48:c7:3a:20:02:02:34:09:e0:c0:
01:66:8a:eb:e8:e9:db:cc:80:f8:80:8d:2a:a4:44:
70:fe:f6:fd:43:1a:fe:ba:c0:44:39:3f:ac:52:46:
bf:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8A:FD:D7:EA:74:CE:6C:0B:16:A0:2D:4A:DD:C6:78:C8:C1:41:D9
X509v3 Authority Key Identifier:
keyid:0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:03:f5:db:f1:aa:f5:61:b2:dc:5b:56:01:15:ce:73:cf:ad:
5b:03:6f:ae:08:c3:54:c9:7c:01:46:37:a7:89:bd:2c:85:94:
97:0c:e6:27:fe:f2:48:d4:b7:bb:17:a3:73:6a:a6:f9:49:ba:
14:f6:a0:fd:c2:5f:36:a6:67:41:51:a7:f5:a0:c7:1f:56:33:
6c:b2:f2:d8:46:2d:c3:20:41:2e:b0:8b:7d:a5:dd:0d:31:e5:
1f:a8:d3:48:79:b8:f9:1c:fa:1d:ca:35:cb:0f:e6:8f:86:ce:
82:b4:82:ce:67:cc:52:9a:08:cf:2b:60:ca:cd:b8:3d:ff:ad:
e1:8b:f0:f3:d4:b9:3a:a6:62:2b:75:af:69:12:a8:6c:b2:b7:
25:9e:9a:46:70:8e:08:ac:c7:70:8b:73:97:07:86:09:e2:52:
4e:00:43:95:4a:bf:10:df:8c:09:82:2b:01:88:3a:c6:77:c0:
ba:e8:8e:25:d4:22:29:e2:93:33:60:b4:a8:6b:fa:56:a7:bc:
4c:fe:b0:ab:f3:71:ab:87:c2:f6:22:63:60:a0:a2:44:00:9f:
48:17:7e:53:6a:b6:0b:e0:8a:b2:f8:85:32:d7:3e:08:46:1a:
2a:8c:58:eb:39:e8:7f:60:22:a0:97:1b:7c:28:70:8a:24:09:
69:ef:36:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:37:40 2026 by rpki-client