Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
File: DflWa2LehAS4VsVgBMxJvmITVOg.mft (raw, json)
Hash identifier: mRf+TUeOBHHYHu9NjucWuNILSeaVVXG68Ee4Xgwjcuk=
Subject key identifier: 70:D6:C9:74:41:C2:97:99:7A:CF:E6:2F:AD:80:89:C0:DC:C9:96:B3
Authority key identifier: 0D:F9:56:6B:62:DE:84:04:B8:56:C5:60:04:CC:49:BE:62:13:54:E8
Certificate issuer: /CN=0df9566b62de8404b856c56004cc49be621354e8
Certificate serial: 019E1C7DF44B2F22844605A42E7B3CBC3626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DflWa2LehAS4VsVgBMxJvmITVOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
Manifest number: 5C
Signing time: Tue 12 May 2026 14:01:17 +0000
Manifest this update: Tue 12 May 2026 14:01:17 +0000
Manifest next update: Wed 13 May 2026 14:01:17 +0000
Files and hashes: 1: 5Z3rFTTUVFarxCx0ETOf8OX-AHY.asa (hash: qLcSsDup2eDHzjPG2eNkixnT3xnxS5Fkg08aTdj0wws=)
2: DflWa2LehAS4VsVgBMxJvmITVOg.crl (hash: qTRdP+y2KksHXM+RLegsk6AwMURnI0DWTUo/LAKk+pI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DflWa2LehAS4VsVgBMxJvmITVOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:f4:4b:2f:22:84:46:05:a4:2e:7b:3c:bc:36:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df9566b62de8404b856c56004cc49be621354e8
Validity
Not Before: May 12 14:01:17 2026 GMT
Not After : May 13 14:01:17 2026 GMT
Subject: CN=70d6c97441c297997acfe62fad8089c0dcc996b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:18:49:b6:b1:52:ed:fe:92:37:d7:c5:5d:12:
6c:c4:47:9e:cf:a2:50:e9:9c:0e:7d:b7:43:38:c1:
1e:5e:c9:40:9f:ce:1c:0d:5e:9e:d9:1f:fb:5f:2d:
77:4b:7a:8e:ab:52:0b:7d:b0:db:49:2c:55:0a:ff:
7a:86:2d:4b:60:c3:39:47:d6:cb:48:f0:83:9c:1f:
ad:81:20:54:5a:44:c2:2b:9d:7f:a0:57:d7:54:65:
05:fd:8f:cc:12:e8:71:28:d1:1e:0a:78:3f:e1:a3:
89:44:2f:5e:23:b5:29:cf:f4:73:1b:20:39:e2:b2:
ff:e5:8f:f6:4a:0b:11:46:83:73:20:f2:c4:dd:74:
36:cb:74:0e:25:43:2f:a0:62:40:9a:19:0e:29:1a:
0c:19:d8:49:eb:35:a7:9c:35:42:a7:7c:40:78:d4:
85:04:72:65:be:6c:20:d7:8c:ae:a8:61:fc:e4:cd:
a7:2d:17:08:3e:a4:71:64:3c:e3:bd:e2:e1:fb:25:
83:9e:c3:62:1b:d7:7a:48:85:be:a0:69:02:2f:0a:
4e:0a:9b:be:da:58:ac:bf:b2:59:f8:32:e1:85:85:
40:d1:53:1f:82:94:68:c9:44:d0:fd:8c:59:04:7b:
f7:e8:3b:52:b8:c5:86:df:62:ab:38:a0:3e:a7:e9:
17:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D6:C9:74:41:C2:97:99:7A:CF:E6:2F:AD:80:89:C0:DC:C9:96:B3
X509v3 Authority Key Identifier:
keyid:0D:F9:56:6B:62:DE:84:04:B8:56:C5:60:04:CC:49:BE:62:13:54:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DflWa2LehAS4VsVgBMxJvmITVOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:5a:53:2a:7c:41:75:20:b8:f4:de:05:2d:fe:07:e6:09:24:
e3:61:dc:57:7c:f9:6c:33:a4:63:68:1d:7d:59:5f:2f:db:ab:
99:2a:cf:0a:6d:a3:3a:e4:a2:8a:37:b0:54:12:c5:98:87:44:
63:08:28:8f:c6:64:72:f9:93:94:63:6d:8a:13:7f:bc:a5:dc:
ae:f3:a1:cc:0e:a5:90:7b:7d:20:52:97:07:91:18:36:89:82:
54:d0:44:5e:83:15:8c:19:e7:d0:e4:f6:f6:bc:e6:e9:71:e9:
7f:61:5e:cb:d3:3f:ef:c8:fb:1d:9a:88:44:f7:45:66:c7:41:
79:5e:a9:af:1b:6e:21:61:00:b7:de:63:6e:6a:1f:4e:37:c1:
9f:21:e9:26:14:e8:17:58:bd:12:39:4a:85:79:79:73:aa:b3:
48:82:56:de:8b:dc:6d:5e:8a:20:cc:f2:7f:02:cb:bf:3a:c8:
ad:3e:b1:b1:11:d8:5b:7c:bf:e3:30:b6:2e:eb:fa:3f:08:3b:
5d:b2:9a:1a:bf:4f:ad:6f:b5:bd:6d:38:87:4a:15:49:e6:49:
fc:a4:0f:94:67:d4:08:4b:96:8d:4c:23:b4:25:c1:f2:11:a9:
6f:bb:57:ad:0f:73:c1:85:77:e7:f8:2e:a1:2c:3b:36:14:d5:
65:1f:a6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:39:35 2026 by rpki-client