Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
File: DXj57XHKOklrjVS5fxR5GNrbnFQ.mft (raw, json)
Hash identifier: +1wPqqtdZJx84XgqI1A4zdaAels1Vg4l1HIM6V7mfE4=
Subject key identifier: 40:DC:FB:31:0B:AD:38:A8:D9:C2:97:DB:7D:55:5A:24:8B:CC:23:4E
Authority key identifier: 0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54
Certificate issuer: /CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54
Certificate serial: 019E1EA340B024A8322E8D6070303506903B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
Manifest number: 049E
Signing time: Wed 13 May 2026 00:01:15 +0000
Manifest this update: Wed 13 May 2026 00:01:15 +0000
Manifest next update: Thu 14 May 2026 00:01:15 +0000
Files and hashes: 1: DXj57XHKOklrjVS5fxR5GNrbnFQ.crl (hash: CR7Sc/eHELi0uKDSLETWMdglrLtmMgob2Wy8B/Z4k4Q=)
2: WBE9XqEf7MFyalSUqu-vF0MYUwE.roa (hash: dqMxE1BdW8dFl07KbG3IeIB419vd91Jj1Eyr9ex+Uk0=)
3: WBO5Gvlksp1h2Nj2XcuQWgWe3aM.roa (hash: 21Q33n7ktv9Mw0KQGNV5mbgpviM4S02U0e8hX8gzv14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:40:b0:24:a8:32:2e:8d:60:70:30:35:06:90:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54
Validity
Not Before: May 13 00:01:15 2026 GMT
Not After : May 14 00:01:15 2026 GMT
Subject: CN=40dcfb310bad38a8d9c297db7d555a248bcc234e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d3:f1:d0:86:e6:e5:6e:30:82:78:ad:d5:c3:
72:44:db:d1:11:a6:b3:f3:a2:a5:0d:4e:ca:11:c6:
f5:52:39:dc:72:52:7b:02:22:78:f9:0e:51:fb:ed:
e8:c3:49:dc:f1:b5:6d:b4:ea:a8:54:6e:0d:af:8d:
63:a5:35:d6:68:0d:66:29:e8:c2:31:a5:ad:36:be:
0d:2e:95:be:52:5c:01:c2:23:dc:0a:7d:98:52:2d:
78:32:68:cb:91:39:92:a2:b0:18:89:bb:f0:00:f1:
d8:29:31:c2:42:c5:f7:74:96:0c:a7:e4:a8:be:7b:
d3:92:67:56:d7:35:47:d6:dd:11:c1:2c:ea:e7:cc:
c4:53:82:ab:60:80:82:e4:a6:5a:0b:be:c7:58:c1:
93:92:54:87:4a:ab:bc:39:a7:b5:d3:18:a8:7d:ea:
6c:c4:46:6b:16:59:8e:a8:bc:1e:f4:d4:c2:85:89:
9e:57:10:18:7a:cc:8c:50:fb:7e:8c:53:27:2d:ca:
72:e4:d3:ee:31:28:59:a1:9c:5d:9d:c2:ad:f8:a0:
27:88:b5:77:e6:e6:a7:bb:6a:46:b6:e1:1b:6c:b2:
b1:e3:a4:fd:75:b6:57:56:30:87:43:10:22:5c:8e:
52:f0:38:ef:f6:27:3b:82:e7:24:f4:19:23:21:4e:
42:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DC:FB:31:0B:AD:38:A8:D9:C2:97:DB:7D:55:5A:24:8B:CC:23:4E
X509v3 Authority Key Identifier:
keyid:0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:db:56:4e:fe:6a:7b:de:09:40:62:8b:63:f4:7b:af:89:da:
72:25:bd:86:85:74:5a:14:8d:aa:12:b7:e0:62:14:40:3b:74:
a3:e0:32:0a:58:d1:c0:ef:24:a9:d1:49:db:5e:33:d5:62:2f:
98:94:f7:2d:5e:77:35:55:0f:9b:70:e1:f5:ca:e6:cb:eb:3d:
1d:6b:5b:33:93:b0:80:0b:24:1c:83:5f:cb:55:21:ca:67:f7:
10:4c:31:18:1a:34:dd:38:77:b5:bc:c6:68:a2:77:ff:90:29:
79:31:81:bf:08:6d:70:a4:49:77:17:a2:d7:ed:5c:8b:e3:a4:
88:cc:06:c8:da:41:1d:5e:0a:c8:6d:97:7b:6f:55:af:3e:96:
4a:d8:49:53:d6:66:0d:e7:6f:ac:4b:8e:da:d7:c5:b9:39:91:
23:97:f3:4d:98:60:89:45:91:7a:11:c4:cd:70:ca:91:20:bd:
be:2a:c2:7c:ef:5a:8e:5a:80:66:10:8a:8d:21:2d:38:d2:a4:
1b:00:22:06:cd:c0:fb:41:51:da:6c:0a:7a:04:e1:7e:30:41:
23:d9:ec:1b:c7:26:3c:93:86:b8:8c:6b:a5:3d:c5:91:a6:c9:
16:6c:43:72:09:af:f3:db:2e:79:34:97:26:ea:ce:4a:f4:03:
b0:3f:89:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:07:32 2026 by rpki-client