Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
File: D97nlErE2jERKV2B4p3roAwWOpY.mft (raw, json)
Hash identifier: cqvdRM4Ylb2sP/57m84PZcpP/O3hsVgdSLzaVAZs14I=
Subject key identifier: 5C:90:66:AD:10:B2:45:67:D8:52:BC:87:C9:F0:19:88:DC:01:57:B3
Authority key identifier: 0F:DE:E7:94:4A:C4:DA:31:11:29:5D:81:E2:9D:EB:A0:0C:16:3A:96
Certificate issuer: /CN=0fdee7944ac4da3111295d81e29deba00c163a96
Certificate serial: 019E1C469D49C96C8A20AA8355B36EF477B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
Manifest number: 1300
Signing time: Tue 12 May 2026 13:00:50 +0000
Manifest this update: Tue 12 May 2026 13:00:50 +0000
Manifest next update: Wed 13 May 2026 13:00:50 +0000
Files and hashes: 1: D97nlErE2jERKV2B4p3roAwWOpY.crl (hash: nGXjQ8S+/89T+CJ6uFzhXs1czkL/hYzYIiXqXf54g1c=)
2: WgNv7-eEqKwSW95Nva_O1MQX1iY.roa (hash: 9ipqetu8ePvj0pp7eCO9cwEQqK0gXGR/o2mUfaHu77U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:9d:49:c9:6c:8a:20:aa:83:55:b3:6e:f4:77:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fdee7944ac4da3111295d81e29deba00c163a96
Validity
Not Before: May 12 13:00:50 2026 GMT
Not After : May 13 13:00:50 2026 GMT
Subject: CN=5c9066ad10b24567d852bc87c9f01988dc0157b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e2:c0:9c:d7:a0:99:f4:cd:81:c5:52:da:65:
21:bc:0f:70:ed:64:1b:9b:93:c2:24:9d:a8:ce:fd:
ef:e5:b4:0d:8d:27:fe:0f:94:d6:43:10:f3:e4:8a:
b6:96:f4:b2:27:cc:44:54:ef:88:3c:33:8e:cf:83:
c1:fc:d8:d4:47:8d:2b:bd:53:1b:80:2c:84:06:34:
40:19:c0:58:c4:6b:7b:fc:14:68:68:5d:93:cd:d4:
d1:15:76:f8:09:55:56:d8:90:b2:0c:32:79:23:4a:
60:f7:7f:b9:f5:ef:c0:a4:6f:7d:83:7c:92:4b:96:
52:53:1a:01:22:31:2d:c7:2c:04:6a:07:4f:84:39:
dd:b8:a2:ca:2d:26:5b:e4:7e:bd:f5:d8:d1:04:97:
bd:9d:bf:5f:71:e9:0b:df:74:d7:1f:bd:51:64:c0:
a1:91:6e:a3:fc:7c:b7:fe:7f:8d:71:36:bd:8d:a1:
20:30:5f:cb:58:33:cf:8a:e2:86:f7:82:c2:a3:a7:
ac:6a:43:4a:eb:5b:a3:f9:eb:cf:42:90:77:94:41:
53:e7:b8:88:46:a3:2b:cb:1a:25:84:45:b2:86:f3:
2f:ca:47:c3:17:80:f2:d6:7f:9f:cb:44:95:e1:2a:
8b:30:36:81:59:9d:1a:4a:7a:91:1f:61:8d:0b:16:
c7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:90:66:AD:10:B2:45:67:D8:52:BC:87:C9:F0:19:88:DC:01:57:B3
X509v3 Authority Key Identifier:
keyid:0F:DE:E7:94:4A:C4:DA:31:11:29:5D:81:E2:9D:EB:A0:0C:16:3A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:3c:60:f5:06:8d:9e:70:c8:6d:42:f1:f0:9c:4d:89:0f:d6:
9d:de:7d:2f:d5:83:33:5a:d6:af:e0:1a:e4:1d:34:ae:6a:82:
29:9c:b6:74:88:ba:89:4c:ae:ca:e3:43:a2:bd:23:5e:10:6b:
a6:8f:e1:bd:7b:c8:5c:f3:da:42:9a:a9:ce:44:d3:00:13:f4:
c4:a7:5e:d7:6d:34:bb:7d:34:ab:c6:a0:c5:66:ce:91:1a:de:
45:51:0a:fc:0b:cf:3c:63:9f:cd:e7:12:50:aa:4d:ee:53:6d:
05:00:2a:e6:15:ad:a0:6b:03:28:c3:f4:e4:7c:2d:11:aa:a4:
30:a0:a0:d1:9f:df:fb:b2:fc:9f:99:03:ca:4d:a7:19:5a:e0:
95:0d:f8:83:fd:75:22:77:78:5b:75:ee:79:f4:d0:7d:82:ac:
ab:4b:4d:ba:22:4b:fe:33:db:6f:e8:47:1f:87:ea:ba:00:1d:
5f:3b:f0:94:90:35:15:06:cd:6c:ff:06:ca:a7:9e:71:6e:aa:
4e:bc:81:2b:ac:79:32:ef:6d:4d:1c:39:1e:fe:0e:62:a9:38:
06:10:39:43:12:2b:ff:13:32:a4:c2:90:21:9b:b7:02:71:68:
73:97:d5:de:42:08:f9:fc:26:06:c6:47:9c:e5:d4:57:87:86:
96:59:a1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:55 2026 by rpki-client