Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
File: dh55HzroOuiyY-PNtoKjR1tXB98.mft (raw, json)
Hash identifier: 4EGkg1KugLenqOs9/hLkTSNyhGCk5Kj+KQ1r4397Ubo=
Subject key identifier: 35:0C:30:A5:1A:8E:94:10:AB:E9:50:08:52:64:4B:D4:66:ED:73:F4
Authority key identifier: 76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
Certificate issuer: /CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Certificate serial: 019E1F47EE37787396C32C91A62F1D39B910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
Manifest number: 1906
Signing time: Wed 13 May 2026 03:01:08 +0000
Manifest this update: Wed 13 May 2026 03:01:08 +0000
Manifest next update: Thu 14 May 2026 03:01:08 +0000
Files and hashes: 1: HeTj1rlCLTtvBYW1onGZ7LauPQY.roa (hash: weFl57AveWg1aEff8nmfajyotthwbCTL0U0EBzxk8Zk=)
2: dh55HzroOuiyY-PNtoKjR1tXB98.crl (hash: blwqAUwQC466y7gQT181Y/3LiK0V3cavH8BYkoADYlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:ee:37:78:73:96:c3:2c:91:a6:2f:1d:39:b9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Validity
Not Before: May 13 03:01:08 2026 GMT
Not After : May 14 03:01:08 2026 GMT
Subject: CN=350c30a51a8e9410abe9500852644bd466ed73f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7c:a2:c6:d9:0a:ce:9a:18:2b:55:60:4a:83:
d2:a6:9c:4d:67:eb:bb:d5:57:9b:a6:1e:9c:91:e5:
8e:7a:56:52:34:32:e9:46:51:59:e4:0a:fd:c0:50:
ae:ce:3d:42:7e:a4:b7:dc:c3:b7:70:c4:73:e5:51:
c8:ec:bc:56:2b:f8:73:cd:21:c0:04:15:9f:c2:c6:
e8:04:73:a2:77:5f:cf:3d:f9:b5:80:f9:9f:a4:73:
6e:cf:7e:01:ba:0d:ae:00:f3:3e:c6:3b:a0:f4:de:
1c:48:34:a0:75:1b:e8:ef:60:81:3c:b5:10:51:49:
b9:1f:87:8e:0a:78:82:c7:8c:62:4c:3a:f2:90:e1:
a3:e7:4a:4a:34:e1:48:44:0e:e4:f0:e6:9d:67:c6:
e2:6d:d8:2b:b9:ae:d7:13:0d:d8:36:96:ef:78:82:
19:42:e8:f2:29:eb:97:30:02:4f:f6:75:0c:64:db:
bf:7d:16:0c:68:f1:ff:02:d8:8f:21:c6:91:c5:3a:
f7:c4:40:37:45:f1:94:a7:1c:cf:47:d4:0c:ce:b5:
c1:0d:9b:88:14:6c:12:9b:d4:24:fc:f2:18:fa:16:
c9:d5:c1:a5:b0:4d:e2:50:7b:f6:0d:7d:a7:aa:f8:
6c:f0:df:1a:18:5d:22:dc:8d:80:f6:ff:69:47:75:
20:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0C:30:A5:1A:8E:94:10:AB:E9:50:08:52:64:4B:D4:66:ED:73:F4
X509v3 Authority Key Identifier:
keyid:76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:d4:bf:80:a4:60:69:66:05:69:2e:05:29:e7:65:1d:0e:a0:
14:20:22:04:ef:88:da:8c:0b:11:0a:5b:66:9c:2d:18:5d:02:
72:b8:12:bf:c0:b1:2a:56:cc:c5:53:c5:bc:7d:68:45:97:55:
84:37:59:9f:37:ab:92:4a:bd:44:81:e9:fb:d9:59:a5:9f:6e:
42:24:a6:1c:a9:1a:26:bd:97:da:4e:cc:c0:af:88:85:eb:30:
39:18:7e:33:81:cc:b7:7a:5c:40:6f:28:f6:d8:06:71:4f:22:
1e:15:be:27:5a:5d:de:61:6c:3c:83:ae:ef:16:96:68:b2:9c:
8e:8a:5b:20:7f:2a:84:48:0f:75:60:bf:f0:7f:61:d5:ae:78:
11:95:0a:1a:65:70:dd:ec:81:05:14:70:13:0c:8e:a5:c5:2e:
82:42:3b:13:cf:da:b6:84:b0:89:59:13:ee:6f:c7:73:46:7d:
a6:af:31:b3:ab:24:2f:b6:ad:c9:6c:17:b0:9d:8d:3d:2e:fd:
0c:10:6c:39:26:99:ce:8e:7a:c3:09:b4:23:80:9b:fb:c3:8c:
ac:5e:18:78:86:89:3e:90:56:26:a3:f2:a7:17:ca:cf:9f:11:
d8:8d:45:22:1c:03:72:60:ee:6e:82:92:a1:5f:05:8e:1b:d4:
8c:5b:6b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:12:40 2026 by rpki-client