Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
File: _dD9aMG2tWm598SBOsEt7Wrl6Ks.mft (raw, json)
Hash identifier: AmsUMeGa0HvDyGOJjSFbZ/wEsTUHDv6IgA25IHz78Q4=
Subject key identifier: F6:D2:48:24:5A:17:97:49:90:90:78:C1:72:95:74:A4:26:AE:54:E8
Authority key identifier: FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
Certificate issuer: /CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Certificate serial: 019E1EA2C744A9609985A5369D3417CCE4BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
Manifest number: 0DAC
Signing time: Wed 13 May 2026 00:00:44 +0000
Manifest this update: Wed 13 May 2026 00:00:44 +0000
Manifest next update: Thu 14 May 2026 00:00:44 +0000
Files and hashes: 1: CEtSnynucMTXjmsVQI2XO0Vay7g.roa (hash: 2YbIxKxSxNLbUsVeSSXam6c2lBbX/6A1TDycN6DbUfg=)
2: KfM_Z_Z-SNR188s2cAL37I8urEE.roa (hash: UID52aiMOKJSN+qhsE3djfMdcKj7BbWtDHOsP/vEFqQ=)
3: _dD9aMG2tWm598SBOsEt7Wrl6Ks.crl (hash: DTSlZPP3fgTtSRObO1BGu0YtX0HwWmzuSFmFxqi3jfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:c7:44:a9:60:99:85:a5:36:9d:34:17:cc:e4:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Validity
Not Before: May 13 00:00:44 2026 GMT
Not After : May 14 00:00:44 2026 GMT
Subject: CN=f6d248245a179749909078c1729574a426ae54e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b1:9e:32:69:3f:6a:35:44:54:c3:81:0f:73:
29:ec:e9:25:ba:29:1b:56:83:3d:2e:ff:58:ce:a3:
b4:21:11:a5:6f:73:22:8f:23:2a:4b:a2:67:e6:37:
9f:64:d2:62:40:e8:46:4f:e7:88:75:fd:c8:4c:31:
2f:30:21:76:3d:8d:e9:08:ee:03:3a:0a:3f:10:11:
f3:6c:a1:80:c8:dc:ae:26:44:47:fd:b9:53:71:c3:
9c:4e:86:43:25:5b:51:9b:36:38:65:16:6c:4e:41:
90:4b:aa:10:77:76:67:5c:cc:d6:74:e8:3b:44:7a:
f0:ed:e2:99:ed:db:aa:ff:e7:dc:24:e1:e3:bf:11:
16:ae:a2:15:18:ff:f1:ca:a5:87:a5:bf:a6:a4:a8:
97:6b:1f:e9:a6:b5:72:a3:9d:82:11:52:0e:e3:8a:
86:c8:bc:b5:de:3a:21:00:40:0e:d2:84:d0:d4:64:
bd:36:b3:5c:a8:80:5a:de:e6:da:90:a2:fe:71:06:
3d:cb:42:f9:e8:49:19:53:a6:0e:db:87:e4:35:47:
cc:1e:23:0f:49:58:4a:b5:78:f0:fa:35:87:f4:fb:
2f:07:16:eb:ab:e1:ce:be:d3:c7:5b:b8:51:ae:07:
ae:6a:9b:1e:99:6b:06:59:91:ae:d5:9f:1b:c5:48:
87:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D2:48:24:5A:17:97:49:90:90:78:C1:72:95:74:A4:26:AE:54:E8
X509v3 Authority Key Identifier:
keyid:FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:af:58:b7:0d:3d:11:86:b6:41:9f:80:5a:32:bb:da:84:91:
b8:0a:28:39:93:2b:0f:4d:ee:29:b0:2e:fb:8c:da:6d:8d:3e:
3f:17:d9:9a:c6:63:60:c1:b0:2c:4d:ca:61:08:f6:91:48:16:
0e:40:de:f4:75:8e:d3:26:47:78:af:f3:c6:03:be:47:bb:54:
31:ce:f5:a0:0b:e7:64:57:ba:d7:65:86:c7:18:a4:9c:27:c9:
3e:74:67:fc:82:dd:99:fb:fb:d2:d5:4b:ff:4e:22:43:42:5a:
82:88:63:a2:1b:a3:a0:37:52:dc:56:07:1d:10:49:74:97:76:
fb:f6:78:ec:f8:2a:c6:ed:9c:03:46:23:65:7b:18:c2:98:bd:
72:74:04:91:a1:0f:95:ac:15:19:a1:74:0f:a5:e8:93:80:90:
d1:cc:80:40:74:58:f8:db:8e:4a:bc:ac:09:1b:71:92:5a:c2:
5a:50:56:ab:d3:ae:b8:52:46:9a:46:b6:b8:5f:93:ce:54:71:
4c:d6:6b:c8:1b:01:6e:9e:ca:18:7b:9f:7f:a9:d1:59:02:71:
a5:cb:ba:b2:b3:d6:7e:91:dd:aa:3a:90:58:4f:d4:88:f1:ab:
0b:b0:47:a4:9b:ea:c4:21:96:bb:80:4d:1b:98:0c:f8:4c:bb:
f0:34:c6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:57:22 2026 by rpki-client