Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
File: dkL9PzNs5u6Z5h-pdwSabGqSPko.mft (raw, json)
Hash identifier: UZFp3p86PfofB53VlA0/EDgUukpsrXlJWaw6vYzRTpM=
Subject key identifier: 4F:86:7D:94:79:11:C5:FC:CE:76:33:F9:DE:6A:18:B3:E5:F4:3C:14
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 019E1D90BFA87950B593F43777D7E137985A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
Manifest number: 198A
Signing time: Tue 12 May 2026 19:01:25 +0000
Manifest this update: Tue 12 May 2026 19:01:25 +0000
Manifest next update: Wed 13 May 2026 19:01:25 +0000
Files and hashes: 1: aTug7YNO613h0EdhaVanobAofs4.roa (hash: JO+eAjDs3aZGB9gkmGCHWKFzmsIX3/pwIhE/HLe+REE=)
2: dkL9PzNs5u6Z5h-pdwSabGqSPko.crl (hash: 8yaGevSqGL4xeXKhJ4ypaQgJetM5t5KHn68b6oJLCN8=)
3: tZk_CaKCryAvJRReN7aPc9CJl5Q.roa (hash: GDF5SYSr5M1uY12BBc2vpgU4RwEGW3L9n697ONqnZ8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:bf:a8:79:50:b5:93:f4:37:77:d7:e1:37:98:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: May 12 19:01:25 2026 GMT
Not After : May 13 19:01:25 2026 GMT
Subject: CN=4f867d947911c5fcce7633f9de6a18b3e5f43c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bb:eb:17:3f:d9:b3:89:3b:4a:02:54:a4:2f:
51:3e:2f:f7:b0:92:4e:12:d7:c8:70:b0:2a:17:3c:
37:1b:e3:ab:a0:3b:7e:f1:f1:4a:61:66:93:e0:d1:
13:34:17:be:4c:8d:71:b7:49:e5:03:4a:cf:04:25:
35:5f:1f:af:a4:a0:6b:72:2e:2c:6d:14:44:2f:cb:
18:8f:a8:3d:18:56:2f:54:13:04:b0:2c:5b:2c:5a:
28:e5:37:52:5d:3b:7e:6a:29:3d:95:8a:3e:f8:8b:
11:be:5a:de:7b:b1:c7:0c:9b:09:0c:1d:31:be:cd:
a1:d5:a6:ec:f5:09:dd:e8:4d:d5:b1:8e:4e:90:02:
e5:9f:d9:3c:5b:d1:c3:74:f2:6a:f4:79:e0:68:a0:
d2:9b:c3:a2:1b:77:89:7d:08:69:fa:9d:02:b0:9e:
f4:b6:bc:f7:61:4d:98:f1:80:9d:d5:5d:92:e1:41:
6b:9d:34:12:21:53:f9:92:d8:d7:2d:19:81:23:75:
0a:42:47:8a:27:ec:57:8f:43:60:68:9c:bc:0e:09:
49:56:06:5b:b3:e9:89:7c:6c:b6:d7:5e:a5:96:18:
b1:49:c9:e4:30:85:07:75:97:89:fb:c1:45:6f:3d:
f0:55:70:5f:69:6a:eb:f8:fa:31:6d:d9:31:12:7f:
8b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:86:7D:94:79:11:C5:FC:CE:76:33:F9:DE:6A:18:B3:E5:F4:3C:14
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:bc:90:d1:cc:36:96:56:02:1d:ff:83:45:f4:07:74:53:e1:
95:a3:d1:03:3f:28:13:84:61:46:5d:4a:4e:70:f2:38:76:be:
79:b3:f7:bc:5f:f2:6b:cf:68:2b:f1:28:e1:af:7a:37:44:20:
91:81:1f:8f:1a:2a:62:95:27:3a:1d:8a:75:ed:73:3f:e4:23:
7d:91:53:15:a4:d9:85:7e:c7:73:01:27:18:6e:26:a4:a7:75:
0b:4c:1d:a2:ec:06:26:53:60:9d:7f:d7:b0:a2:7a:44:33:c3:
13:70:ea:77:f1:b4:89:d1:e2:23:73:52:a2:5c:9c:22:ba:9f:
7e:02:20:08:1f:63:32:ca:b6:3f:dd:21:9c:e7:65:93:37:3e:
2f:03:ff:1b:28:da:20:c8:e6:3d:82:c1:a1:de:13:9e:e6:44:
60:de:d9:05:c1:d5:4b:55:2d:ea:f4:d5:64:e0:87:15:0e:f1:
33:de:e2:9c:2c:8c:98:64:ce:67:af:2c:75:38:c1:5b:50:58:
d0:50:6b:66:c3:b5:50:db:42:bd:ba:e3:b8:7a:03:1a:02:c2:
d3:dc:29:40:4f:d5:41:70:ee:f0:cc:17:b5:99:f0:ad:dc:50:
0c:23:b0:bc:c6:1d:cd:97:5d:dc:04:e4:ff:22:9a:f2:d4:c8:
95:e9:c2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:04:38 2026 by rpki-client