Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
File: D81k6vJZSCLz-aLrzRnbm3-nDZo.mft (raw, json)
Hash identifier: jOPYDcVNzpLWsOkZhAVdsga92mcJ9S/5qgI5mDMeq2k=
Subject key identifier: 46:38:2D:F9:44:65:87:A6:F9:9D:BB:B0:B5:83:9A:48:50:45:CC:0F
Authority key identifier: 0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
Certificate issuer: /CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Certificate serial: 019E2023864055A49FBF3E4BC4B622E28AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
Manifest number: 0510
Signing time: Wed 13 May 2026 07:00:59 +0000
Manifest this update: Wed 13 May 2026 07:00:59 +0000
Manifest next update: Thu 14 May 2026 07:00:59 +0000
Files and hashes: 1: 1HQ2oYdrkzbGmcEGuOKgDpKVA-A.roa (hash: +R86VJ/9zKCCo9on3dPLqNmwVLLy9nPRqGdyKqWuego=)
2: D81k6vJZSCLz-aLrzRnbm3-nDZo.crl (hash: riJVcTAGwKwPLp5L3MetwwWq74mLofgyecSaQLcK0xA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:86:40:55:a4:9f:bf:3e:4b:c4:b6:22:e2:8a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Validity
Not Before: May 13 07:00:59 2026 GMT
Not After : May 14 07:00:59 2026 GMT
Subject: CN=46382df9446587a6f99dbbb0b5839a485045cc0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b4:19:1b:50:ce:ef:cc:c7:5e:5c:14:97:0d:
18:3f:73:8a:85:29:c5:58:d4:61:60:39:ce:0c:23:
a5:fb:0f:a1:88:41:dd:75:73:7d:fd:a4:fc:3d:16:
91:d0:0f:73:0a:e7:17:a0:5b:c5:57:f8:0e:c3:c9:
8a:ad:69:2e:0f:d1:7e:df:f2:a3:dc:a2:e1:9d:48:
b8:f7:3c:1f:7a:b3:2b:17:e7:93:4e:ee:63:92:f5:
c8:b1:c9:7b:92:95:ce:f8:8a:66:ac:62:9a:79:4a:
16:5b:2e:ed:24:3c:9a:87:2e:c4:8c:8b:6b:61:1b:
35:69:f7:73:76:da:43:67:dc:6d:ed:d4:34:1e:67:
e4:01:4a:79:b5:65:dc:4e:f6:a0:fe:24:5b:4f:d9:
c8:b1:83:93:34:75:cd:9b:9a:54:fd:87:07:9c:b1:
90:9b:3b:d6:b1:b9:31:f3:87:14:04:e3:39:76:44:
03:46:ff:06:93:8d:d5:f5:d3:cb:ea:d1:fa:43:41:
6d:23:6f:16:60:7b:01:02:b1:e4:a4:ef:4c:e4:02:
cb:e3:28:e1:b2:45:5e:08:1c:db:0f:98:07:ba:0b:
fc:b9:6f:d1:75:17:66:30:29:de:a5:5a:dc:7b:a1:
b8:29:70:d9:3c:13:f6:a2:13:c6:66:67:7e:79:a9:
07:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:38:2D:F9:44:65:87:A6:F9:9D:BB:B0:B5:83:9A:48:50:45:CC:0F
X509v3 Authority Key Identifier:
keyid:0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:31:8a:47:cc:d7:44:cc:9d:e9:21:22:4d:69:b6:8f:09:af:
0c:58:2f:4f:c6:59:72:e4:10:37:f4:fe:dc:a9:1f:45:c8:76:
d4:ec:6e:f0:95:f2:88:91:6b:3e:36:8f:91:45:c9:e0:ee:05:
d8:c8:56:6b:16:7c:cb:de:da:cd:dd:c1:2d:af:32:55:e1:93:
4e:11:11:aa:b6:ff:cb:75:f1:87:f8:a8:bd:62:8d:54:32:92:
fb:12:8c:14:5f:24:d6:4f:5c:12:4c:84:a5:b6:0e:9b:c0:df:
71:d3:d9:31:3f:b6:ec:20:96:3e:c1:7e:25:fb:d9:be:aa:d3:
80:c1:81:60:94:2f:42:d0:6b:d6:ef:80:64:3b:af:71:ee:09:
fe:a6:61:63:f7:8c:19:f7:4a:5b:c2:48:7a:43:3a:00:a2:39:
f5:b9:ce:3c:85:88:09:6f:d1:e1:7c:43:88:0b:b9:ae:fe:34:
ea:2a:ac:ae:ff:6f:c2:e6:14:2a:58:d1:77:6a:40:9d:69:77:
44:29:d7:4f:9f:ea:98:c7:79:90:51:72:39:03:e1:35:c2:a5:
27:d3:fe:bb:1e:d8:6b:21:ba:49:cd:e9:95:d5:cd:e7:b2:0d:
b8:3b:78:6b:9f:21:54:ff:ab:da:ce:85:4e:5e:8c:0b:60:b2:
c4:85:58:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:37:56 2026 by rpki-client