Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft
File: DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft (raw, json)
Hash identifier: HdyysHsG/03+pr2HEtayJES3A2ezfP0PpPmzAnfygzM=
Subject key identifier: BE:C4:E4:5C:F7:69:D7:91:46:0C:EA:18:D1:C3:46:9A:C0:E2:0A:87
Authority key identifier: 0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11
Certificate issuer: /CN=0c6fa156c57c4e885b9e6af8230b654d796a5611
Certificate serial: 019E205AC2162E25E96BBBC58AD74F609BCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft
Manifest number: 15A7
Signing time: Wed 13 May 2026 08:01:19 +0000
Manifest this update: Wed 13 May 2026 08:01:19 +0000
Manifest next update: Thu 14 May 2026 08:01:19 +0000
Files and hashes: 1: DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl (hash: lCXfaEQ403LnLRdiAm39Bx7zgF6jT4xLuxz4NWF7ds8=)
2: u6dKU2x8O3xV7S3OaviPva82180.roa (hash: 9A10Ud5zhJp6APcwr5M/hOCYfKIxkVszIE4bdVZOg/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:c2:16:2e:25:e9:6b:bb:c5:8a:d7:4f:60:9b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6fa156c57c4e885b9e6af8230b654d796a5611
Validity
Not Before: May 13 08:01:19 2026 GMT
Not After : May 14 08:01:19 2026 GMT
Subject: CN=bec4e45cf769d791460cea18d1c3469ac0e20a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:62:cb:60:54:83:dc:50:63:7b:ec:7a:97:6c:
f0:f6:0a:23:53:b2:0b:b3:54:27:64:d9:ee:86:0d:
41:e8:af:28:51:93:4d:c2:c0:80:e6:80:30:13:97:
e8:8e:ed:22:94:3c:30:09:f8:88:b5:21:49:98:d6:
75:9f:af:92:1b:75:79:24:94:ad:77:44:62:c2:3a:
91:75:6e:80:1c:42:4f:a7:5e:48:69:bb:2a:f1:26:
af:2f:f1:9b:06:ea:97:2c:eb:56:d2:e6:19:1c:2c:
fb:5b:5b:b1:d8:16:c5:4d:09:87:c7:7f:b5:2a:fc:
3d:f8:3d:fb:d0:af:d3:58:c3:b5:19:28:2e:ab:89:
ee:f7:fa:24:37:d1:d8:29:c1:7d:a4:a1:7a:ec:43:
b1:79:22:04:4a:ab:cf:aa:23:ae:db:36:36:95:2a:
85:c2:d1:b9:d6:5c:74:3a:19:9b:33:af:6b:c6:0f:
24:8e:bb:8d:34:01:02:ee:14:45:8a:88:6d:cd:a2:
c7:9f:4b:34:b9:56:2e:57:25:9f:26:c4:fe:e3:ea:
a3:34:02:04:13:81:07:50:4f:a8:ff:37:1d:e6:fe:
e1:f3:f3:36:cd:0e:c7:e9:ca:07:5d:df:c0:f4:00:
f3:25:5e:91:e3:3b:d5:74:6f:b0:91:a4:fa:73:ae:
2b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C4:E4:5C:F7:69:D7:91:46:0C:EA:18:D1:C3:46:9A:C0:E2:0A:87
X509v3 Authority Key Identifier:
keyid:0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:aa:65:63:0c:f3:27:40:13:01:45:b2:51:ce:8b:27:1a:39:
df:0d:a8:d2:75:6b:dc:71:86:cc:91:b3:6a:5c:e2:9c:c5:9a:
ff:51:f8:d5:3a:4a:a5:a8:49:7e:41:e1:14:cf:83:cf:b4:40:
26:63:42:ab:66:f6:9d:24:7c:f3:b5:93:6e:01:75:ea:fa:c6:
a9:9f:f3:6c:86:30:07:d3:66:16:4c:c9:77:e0:82:ba:c5:81:
d7:da:05:9f:f5:82:92:9b:6b:43:df:cc:c7:04:81:79:14:1f:
e0:95:69:5b:cd:cf:70:95:7e:a9:33:79:68:33:f8:f6:75:11:
fe:bc:a0:71:ef:98:d5:8c:d4:57:4c:94:84:1e:8a:56:70:02:
c9:d2:12:3e:72:6d:29:2f:fd:73:05:a7:68:4c:8a:75:92:44:
3d:41:92:c5:de:9b:26:8f:0e:cf:e3:cd:c6:28:49:e7:b2:a5:
d3:1a:e2:44:77:1f:83:ee:6a:04:d3:f4:0a:aa:28:5d:a2:ea:
9f:84:da:8f:03:5a:c9:c1:82:11:59:f8:ce:29:a5:92:24:33:
ac:27:89:c1:cb:0e:eb:bf:58:60:8e:e0:ac:09:54:3f:32:eb:
27:42:26:30:54:3b:8e:0c:78:cf:95:62:98:43:58:ac:c1:b1:
bc:e9:60:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:16:02 2026 by rpki-client