Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
File: DiKD5uavmRQidDcR96cjE3aA5p4.mft (raw, json)
Hash identifier: SycOAfJXE7mOYo7ii+NXCiyRzOOSp3N69Ub7d287XKc=
Subject key identifier: E7:08:07:02:6B:E2:D2:80:19:33:BB:EB:63:44:4F:31:98:B9:11:2B
Authority key identifier: 0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E
Certificate issuer: /CN=0e2283e6e6af991422743711f7a723137680e69e
Certificate serial: 019E1D903F9F545A831542D6BC06EA6D9E60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
Manifest number: 0721
Signing time: Tue 12 May 2026 19:00:53 +0000
Manifest this update: Tue 12 May 2026 19:00:53 +0000
Manifest next update: Wed 13 May 2026 19:00:53 +0000
Files and hashes: 1: DiKD5uavmRQidDcR96cjE3aA5p4.crl (hash: K9JOoDLJmHJQ0B46giWB9Jp4uQIABR/9lik3ljduwD0=)
2: YWPvVhMhWOdJq4IgusjcDgptc9E.roa (hash: VwHMf9+Fwh3KRyIosC2+XI4IaINip+46g+Oe4aIU/sk=)
3: oZhmNHo1g-fLhYbLEUh1GW508Ns.roa (hash: pc/tqbY3tzsPX8Y1oHBCD976XbZr/U1sHfOZb8voLLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:3f:9f:54:5a:83:15:42:d6:bc:06:ea:6d:9e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2283e6e6af991422743711f7a723137680e69e
Validity
Not Before: May 12 19:00:53 2026 GMT
Not After : May 13 19:00:53 2026 GMT
Subject: CN=e70807026be2d2801933bbeb63444f3198b9112b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:74:86:44:77:5f:02:91:c6:18:84:35:7a:f9:
89:1e:07:24:0b:97:c0:56:d9:c2:36:c3:18:c9:1a:
9a:f4:10:e1:17:b6:aa:26:f5:7e:d6:31:fb:91:69:
ea:0d:0e:b0:a7:6f:dc:c3:f3:ed:1b:dc:7d:4e:80:
77:4c:e1:1e:20:e0:75:69:01:32:0b:f6:e1:54:1b:
b8:29:68:14:72:d6:db:86:1e:b3:ca:e2:f3:7b:5e:
fc:93:76:08:6b:a5:9e:bc:33:05:4f:ed:10:51:18:
d4:1b:46:0e:99:5c:27:e8:e6:a2:a4:a0:a0:e2:0b:
cf:31:dc:0b:22:5b:16:bf:2f:97:65:2d:5b:c3:c5:
3b:93:76:3e:6b:4d:c4:2e:5c:ea:26:5a:fc:11:f6:
90:bf:d7:ef:00:1d:e9:90:a3:59:ff:d3:a3:15:6f:
42:f2:f9:f7:5d:09:7b:e5:0f:36:95:6e:55:9c:7b:
f0:cc:0c:b4:b9:28:d7:16:e2:a1:9b:18:e4:a6:87:
25:da:6c:1c:52:26:8f:79:d0:8a:31:92:1f:de:38:
18:05:45:a3:d9:09:a4:78:5b:73:b0:05:f1:67:ed:
b3:01:5d:cd:21:4d:d3:c2:dd:c1:c8:93:83:ed:4d:
96:eb:2c:cb:b7:46:40:2a:95:e9:56:93:59:3c:d8:
6e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:08:07:02:6B:E2:D2:80:19:33:BB:EB:63:44:4F:31:98:B9:11:2B
X509v3 Authority Key Identifier:
keyid:0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:22:83:b0:e5:2e:44:60:75:d0:b0:8f:05:d0:ef:a7:25:a1:
78:60:fb:6b:fc:17:1d:c3:85:f6:5e:3d:65:df:6d:fe:4d:76:
9a:9b:9f:5e:00:45:44:7e:ce:9e:f2:8f:79:b1:e7:a5:e9:2e:
58:84:77:5c:ef:fe:63:a9:6b:36:e6:26:8f:e2:32:c3:73:47:
f8:0b:54:01:fe:fe:44:f0:6f:f7:28:e0:9d:f2:fb:5f:fa:a6:
6b:b7:8a:5e:cb:e0:e2:7d:d7:96:76:40:54:db:00:80:4b:69:
c9:08:55:f4:5b:34:8b:44:50:bb:25:31:27:43:e3:6c:f1:18:
00:86:fc:19:14:c7:00:81:5c:87:fa:11:95:f9:e1:7b:5d:2b:
0f:63:8a:6a:fe:10:85:a2:31:d4:ea:a4:40:5d:6b:fe:93:7e:
14:c3:f4:2c:46:04:e3:79:5a:ba:4a:3f:aa:20:53:d0:13:5a:
e5:c3:e8:91:31:25:c1:86:f7:8c:2d:6f:6b:a6:e6:ae:89:21:
fd:43:59:77:97:46:2c:3f:27:79:4f:a7:29:53:ed:88:15:63:
34:ff:98:98:6a:c6:f3:9e:a0:b1:93:f6:41:4a:24:ee:19:66:
84:1a:f2:2a:77:fb:57:d6:bc:da:b6:06:83:1d:26:c2:dc:4c:
28:c2:9f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:04:38 2026 by rpki-client