Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft
File: D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft (raw, json)
Hash identifier: iTRrF01mUCbhZoWYiZR3WUdrLgnupYcJOSC4Oh3eyEg=
Subject key identifier: E7:CD:4B:5B:7F:52:CF:76:2D:2F:7E:D3:3A:DA:69:36:C9:C6:5C:6D
Authority key identifier: 0F:65:BD:21:C6:83:20:7D:A0:C3:9F:B3:79:85:35:AF:49:E0:BF:F5
Certificate issuer: /CN=0f65bd21c683207da0c39fb3798535af49e0bff5
Certificate serial: 019E1CEB85AF242D13E98E7E4F5FAD631EED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2W9IcaDIH2gw5-zeYU1r0ngv_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft
Manifest number: 16E4
Signing time: Tue 12 May 2026 16:00:57 +0000
Manifest this update: Tue 12 May 2026 16:00:57 +0000
Manifest next update: Wed 13 May 2026 16:00:57 +0000
Files and hashes: 1: D2W9IcaDIH2gw5-zeYU1r0ngv_U.crl (hash: hRqw9gb7TuNhtDLuTBhNkMB3E4CDTcUS5wwkQfhnOyc=)
2: FVoehWVHfRAM9Wax2PLEzeuzUcQ.roa (hash: jKrRrki3jFgX40lflCLx2Zym5UZldktVdjD6ypmdCdQ=)
3: _FcCRW97Oyy-701A8ky-qnc9PuQ.roa (hash: TPZyrFAeXnN7pauwjeZRrcEQ8uCeSHffzbaYPf3BfAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2W9IcaDIH2gw5-zeYU1r0ngv_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:85:af:24:2d:13:e9:8e:7e:4f:5f:ad:63:1e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f65bd21c683207da0c39fb3798535af49e0bff5
Validity
Not Before: May 12 16:00:57 2026 GMT
Not After : May 13 16:00:57 2026 GMT
Subject: CN=e7cd4b5b7f52cf762d2f7ed33ada6936c9c65c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f1:8c:b0:2a:67:a6:66:72:b0:ee:bd:5f:91:
a0:f8:39:1f:4c:ae:2a:39:f0:d8:48:0d:ac:5e:38:
a3:95:b9:5b:c9:51:9b:fd:de:72:f5:fe:07:d0:ea:
d1:b2:60:b9:02:87:71:91:99:05:47:5f:de:1b:f2:
81:a5:37:77:5f:0e:d3:c6:dc:cc:af:10:a5:13:cf:
0e:b5:c8:d2:e2:00:bf:16:02:07:87:82:20:cb:bf:
70:93:8d:e0:94:ef:95:b3:e4:ce:74:ff:82:a1:b3:
6a:77:6d:9a:d0:e4:e4:22:d0:70:2d:e2:08:71:57:
d8:a7:b9:6e:1c:55:10:1f:44:e7:b0:24:a7:c0:52:
1b:11:81:8e:a9:bb:e4:af:93:a6:65:0d:2f:19:1d:
92:41:11:9a:0a:21:71:b3:3b:44:49:9d:f2:b2:6f:
09:49:ee:93:2c:de:1d:1c:df:90:64:48:5e:c7:a8:
9f:a2:ae:15:b9:03:3b:bd:cf:ce:1a:f5:04:41:1e:
b2:fe:39:db:4c:7b:d0:c3:e2:65:8f:03:68:1f:38:
01:0e:9c:76:d8:24:2c:82:9a:2c:c7:b6:8b:fa:41:
18:3b:95:2c:11:6e:95:9b:20:15:b7:a8:4c:90:58:
ac:af:39:7a:0f:78:68:75:83:e2:93:13:49:59:91:
70:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CD:4B:5B:7F:52:CF:76:2D:2F:7E:D3:3A:DA:69:36:C9:C6:5C:6D
X509v3 Authority Key Identifier:
keyid:0F:65:BD:21:C6:83:20:7D:A0:C3:9F:B3:79:85:35:AF:49:E0:BF:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2W9IcaDIH2gw5-zeYU1r0ngv_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:03:ed:bf:d5:ad:6e:7a:9d:49:fa:40:45:d8:75:51:51:1e:
31:b6:37:6f:c5:e1:bd:a0:29:ef:4d:b9:d3:4d:d3:ef:3a:25:
3f:ba:e8:8c:3a:6b:1c:45:57:32:29:dc:52:8c:1c:08:33:18:
8f:12:35:4a:fc:bd:ea:5c:07:7b:36:aa:88:a7:c8:0e:ef:d2:
d9:27:23:08:bc:2e:46:02:13:54:c6:5a:79:d4:eb:9f:be:c4:
40:96:0b:bc:66:bb:a2:11:7f:a1:85:f7:de:0e:fc:0b:72:7e:
8c:e1:02:89:67:de:ae:9e:f4:c0:bc:c5:1a:a1:89:a6:eb:60:
ff:0f:4e:38:9c:21:f4:ba:f8:2e:e9:45:12:48:6c:dc:5c:12:
5b:ab:5e:b0:ab:04:db:23:f7:3d:24:1d:cb:ea:a4:76:33:a6:
42:b8:46:9e:48:2b:2d:15:95:c4:e8:b6:bf:64:1a:84:fd:b9:
b7:04:62:54:b8:1e:27:75:04:f3:7c:c4:fc:b1:a2:0d:0f:19:
cb:67:ec:07:c0:6c:cb:7a:65:77:b4:de:65:ff:14:bc:46:b9:
e8:cf:8a:a5:60:db:c5:fc:e1:b9:55:cb:4c:0c:7c:43:90:9c:
b4:6e:5b:ed:2e:a3:ed:1b:8e:35:33:2b:5b:eb:f1:7e:d2:35:
79:59:be:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:59:08 2026 by rpki-client