Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
File: Di1CDmYchlcQif8LUZZahuDXvHU.mft (raw, json)
Hash identifier: S1tOusXygPXwXuYFXKaZaeonsnrQhcGlI/hw55PDqJY=
Subject key identifier: F5:A5:D7:0F:20:51:61:59:D6:6F:43:1F:FE:DB:5B:8F:BD:1E:C6:F5
Authority key identifier: 0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
Certificate issuer: /CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Certificate serial: 019E1D59DD24D69E7F8D8C7EB4702DC170AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 18:01:28 +0000
Manifest this update: Tue 12 May 2026 18:01:28 +0000
Manifest next update: Wed 13 May 2026 18:01:28 +0000
Files and hashes: 1: Di1CDmYchlcQif8LUZZahuDXvHU.crl (hash: 4EpGZEHhJWN2FZOWeVsOmlVflS7vd0YkeZOa8FKixGw=)
2: qB9Z-zHdmjEFSIG2vfJGfIMdpA0.roa (hash: MxW4mBfsVBC2g/oHLcgSIPQNdBtdZMBf3Vv3p/+UNxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:dd:24:d6:9e:7f:8d:8c:7e:b4:70:2d:c1:70:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Validity
Not Before: May 12 18:01:28 2026 GMT
Not After : May 13 18:01:28 2026 GMT
Subject: CN=f5a5d70f20516159d66f431ffedb5b8fbd1ec6f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:79:1c:60:0f:ba:9c:33:78:34:9e:18:d8:bf:
d7:da:88:bd:25:b4:e3:36:4d:8c:2d:86:1b:6d:f2:
5c:8b:b4:42:e8:bd:4e:30:f2:d8:b7:92:54:b6:69:
c2:32:f4:6e:af:0a:8f:d8:19:19:41:32:49:4b:5f:
e0:30:62:f7:c8:b1:65:a5:16:17:89:66:f4:f2:eb:
c0:4d:d1:17:3c:3b:5f:6b:64:90:c0:f1:9a:71:dc:
6e:20:31:b0:c4:7f:d9:fd:30:42:ed:07:79:fa:df:
bd:d6:7d:50:d3:fd:5c:0f:7a:81:ba:be:47:1f:92:
33:a3:cb:53:28:24:40:90:bb:fe:ff:0d:59:37:f9:
9b:63:27:78:aa:e5:07:16:05:91:b4:6c:ca:64:e5:
31:25:db:7f:a0:49:d6:65:39:89:7c:3a:66:6e:ed:
2f:3f:2f:7f:6b:80:61:05:1b:be:7c:1f:de:cc:f0:
2a:ae:23:6e:9f:ab:ef:28:21:22:2b:f0:fa:52:b3:
14:10:f5:02:4c:9c:93:71:25:f7:9c:1b:61:01:38:
54:ff:57:92:6c:2e:c6:ec:92:32:92:bf:d8:b0:86:
d1:cb:91:04:0c:c0:ba:1e:fd:46:0c:01:67:5d:1c:
4b:b1:a7:b1:f3:20:5e:32:13:95:57:a3:c3:29:85:
e2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A5:D7:0F:20:51:61:59:D6:6F:43:1F:FE:DB:5B:8F:BD:1E:C6:F5
X509v3 Authority Key Identifier:
keyid:0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:65:79:c2:be:40:21:1d:93:d5:6f:f4:db:77:cb:cf:9a:fe:
0f:78:cf:56:ef:9e:a2:ce:e2:94:f7:29:6f:c3:31:c4:4b:ea:
51:6f:f1:bc:bc:9c:c6:ef:66:66:96:04:67:3c:c2:ac:71:c3:
a0:8f:b0:6b:45:e5:33:ea:57:2f:0b:ef:6d:d5:ee:53:91:c8:
cd:8b:d2:9f:b6:82:7d:3b:4c:26:41:a1:4e:b8:dc:df:d6:c6:
24:ea:6f:e5:14:22:69:d5:b0:e0:6d:d9:55:7f:7b:70:5a:26:
f6:83:35:a4:4c:9b:0a:09:95:45:fe:0c:83:1e:08:5c:ac:df:
96:f2:98:63:12:4e:10:0f:09:ff:a4:78:44:b6:f5:7c:af:a4:
2e:bd:e4:cc:cc:e6:30:a5:87:1a:a7:71:44:86:35:52:da:6d:
8d:6d:4c:85:69:fd:78:12:be:cd:9d:be:c6:99:a0:4f:0a:93:
24:19:23:01:3a:a7:98:ec:58:f1:a1:26:ea:9d:7c:e3:54:38:
2f:8d:02:32:3f:e1:9f:70:93:90:ed:0a:5e:35:a6:c2:dc:a4:
1e:94:e0:48:24:3b:14:bc:2c:c9:45:1b:f8:fc:b0:a5:1c:9b:
5d:10:ea:64:8f:90:44:49:fb:65:ca:6f:fc:ee:24:ca:33:72:
2c:b9:82:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:20:11 2026 by rpki-client