Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
File: DB5tXnLa9BCM9gvUfpNt8aHpciY.mft (raw, json)
Hash identifier: 1V10fc/5+qqJ+dF7QM4zWQ9MeDKiHcQLlGB4Rux2k50=
Subject key identifier: 38:22:E2:B5:99:21:7C:BC:A5:23:F7:E1:E5:32:05:C8:34:FC:37:9A
Authority key identifier: 0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26
Certificate issuer: /CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226
Certificate serial: 019E1D599CD26675980109E85303C9F94271
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
Manifest number: 122F
Signing time: Tue 12 May 2026 18:01:12 +0000
Manifest this update: Tue 12 May 2026 18:01:12 +0000
Manifest next update: Wed 13 May 2026 18:01:12 +0000
Files and hashes: 1: DB5tXnLa9BCM9gvUfpNt8aHpciY.crl (hash: UxiczYwxg0qbwC6LWfI0Wb0fSVX9xbik3ibosElkDmM=)
2: gYAU9kG86HbZ3YtQGu5MLj44xqI.roa (hash: vR6PgJKynGl8VT8dHy4Fb3OUdFphSgnDlBXNAPZOxik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:9c:d2:66:75:98:01:09:e8:53:03:c9:f9:42:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226
Validity
Not Before: May 12 18:01:12 2026 GMT
Not After : May 13 18:01:12 2026 GMT
Subject: CN=3822e2b599217cbca523f7e1e53205c834fc379a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ae:0e:47:58:de:31:c2:78:23:38:0b:71:b9:
ec:b8:10:15:2d:f8:bf:e5:5a:8e:5e:66:c0:b7:0d:
53:9d:e2:1d:b8:29:74:dd:40:55:38:a9:18:b8:97:
74:36:9c:dc:ad:8f:4c:26:70:44:aa:06:e9:17:62:
d3:7d:d6:45:40:a6:d4:7c:10:da:96:6b:f0:2b:35:
c4:55:58:13:b2:79:8b:48:19:5d:9b:53:55:63:9f:
11:69:ae:87:43:76:de:13:3c:51:e5:65:fa:5a:72:
44:a8:7f:72:fc:cf:b6:07:1d:e9:18:25:a8:a1:f9:
ee:b3:0e:35:f6:4e:d1:2e:e8:02:80:7b:14:27:ed:
cf:04:b9:ad:c4:8a:1c:f9:b7:15:5e:3f:5b:1a:48:
1f:55:f6:ab:2d:fa:53:2b:09:07:8f:8b:2f:5e:11:
51:3f:96:c5:22:58:6a:47:b2:00:64:d1:f2:fe:43:
da:b9:41:c1:2e:c8:ee:9c:e5:b8:74:70:ce:bd:93:
91:fc:79:66:50:f3:1f:bd:1b:35:cc:b1:28:a2:81:
cf:6d:8a:0e:1b:3a:38:c6:dd:f9:38:0f:01:31:89:
5a:cf:9d:a2:0c:03:f3:31:7c:57:89:fc:12:64:38:
75:77:53:79:26:55:db:62:9e:fa:3e:28:7a:65:f1:
1b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:22:E2:B5:99:21:7C:BC:A5:23:F7:E1:E5:32:05:C8:34:FC:37:9A
X509v3 Authority Key Identifier:
keyid:0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:34:0f:fe:53:9d:80:2a:fb:2e:d2:5c:ca:60:8d:ae:a6:c8:
3d:df:93:fd:6a:bc:2b:66:e7:da:5c:83:42:9c:9f:69:eb:82:
bc:3c:df:0d:17:1e:37:b2:5c:5e:e8:d8:3f:e5:4d:53:8f:96:
21:eb:34:a0:b0:1a:fd:c0:da:59:12:8f:be:ed:61:65:55:b9:
0a:e4:18:ce:6e:9f:47:fb:d8:71:64:ba:7a:2a:30:47:42:d9:
5d:0c:b4:13:70:c9:5b:10:f0:0b:56:3a:4b:57:83:aa:be:21:
25:35:d6:5b:08:01:a1:24:9f:94:0e:76:cb:4e:c0:69:4c:82:
20:a3:25:8e:73:d1:26:8a:b1:34:46:a5:7f:3e:9f:2f:bd:ef:
e9:96:ed:5d:fb:b2:dd:75:87:bd:18:ae:89:3e:12:82:91:81:
30:61:fa:e3:8e:0f:61:ab:f1:a6:4a:d4:5d:7c:1b:91:c2:a5:
b2:78:19:3b:b7:f9:73:35:e3:3b:ca:7b:cc:0d:f9:77:8c:2a:
2e:96:21:b3:60:a9:8c:ef:c6:8a:e1:33:05:f7:fc:b6:7b:70:
20:51:c7:31:09:06:17:c2:20:37:73:d6:40:78:bd:f1:e7:e0:
24:83:9a:57:ec:ff:ad:58:32:c9:65:bc:35:c2:8b:ed:f6:64:
87:5c:69:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:38:53 2026 by rpki-client