Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
File: DY087TLjYPzUbBY1Vt4oqigksZs.mft (raw, json)
Hash identifier: Fe0Vu+KXB30SCSuG1IVDgFIeKwrbN5lUlbXgN7CZRXI=
Subject key identifier: 5A:D2:FE:91:3D:B1:3B:26:C6:38:FE:C9:AD:43:9F:C1:EC:DA:5A:15
Authority key identifier: 0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B
Certificate issuer: /CN=0d8d3ced32e360fcd46c163556de28aa2824b19b
Certificate serial: 019E1E3521836F87201802CDDAC0725BE528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
Manifest number: 03DF
Signing time: Tue 12 May 2026 22:00:58 +0000
Manifest this update: Tue 12 May 2026 22:00:58 +0000
Manifest next update: Wed 13 May 2026 22:00:58 +0000
Files and hashes: 1: 1-nukkIR6QW9cgqOuKheFLpvicPM.roa (hash: E0YmmZeDYH8nWMQd2BPTkT+OQ+zyRbNJxd4dp/aCenc=)
2: DY087TLjYPzUbBY1Vt4oqigksZs.crl (hash: HtztkLcaCd2x7nDZ4sAbGHsBIvwfP6QJw6eBZ2/4SEg=)
3: fW8Rb2ydTpsUsTrGa2SivBYDQlA.roa (hash: R0r5msaJunREx2IGezURTBwCC6OaeIbwcDABeHEl6S4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:21:83:6f:87:20:18:02:cd:da:c0:72:5b:e5:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8d3ced32e360fcd46c163556de28aa2824b19b
Validity
Not Before: May 12 22:00:58 2026 GMT
Not After : May 13 22:00:58 2026 GMT
Subject: CN=5ad2fe913db13b26c638fec9ad439fc1ecda5a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:03:ab:8a:f1:46:09:a9:c8:d2:c8:9e:8a:52:
0d:a9:40:fe:b5:1d:17:26:7a:79:63:18:f2:d9:92:
9b:5c:cb:37:ed:fa:ea:3b:1c:df:a3:d2:f1:43:ec:
18:94:27:4b:a1:c3:c6:eb:f1:23:3f:c5:4c:52:0a:
4a:6a:68:76:64:a2:0a:64:23:bb:00:62:c5:97:4b:
78:04:bb:19:ea:08:d5:ab:12:75:17:e2:d3:1d:ac:
86:6e:3d:6a:2e:3e:69:31:23:17:0b:99:33:19:16:
9f:a9:11:51:31:d6:cb:d3:1c:75:37:14:e3:89:b7:
bb:3a:42:65:1c:c1:38:f6:27:75:a4:d2:e1:f8:ea:
10:d0:d3:6a:98:fa:be:cb:50:17:95:c9:c2:4a:33:
01:08:d8:ff:6b:f5:ad:01:c9:e9:cb:13:89:80:85:
4c:a7:11:7f:94:40:03:70:e1:68:ac:ab:ba:8d:8f:
39:60:92:4a:b4:34:97:67:97:e7:ba:f6:ed:79:f4:
90:f5:40:b1:ff:d7:b9:85:91:46:08:1a:ea:25:4f:
23:30:6a:27:80:83:9e:d7:1e:3f:bc:29:70:7d:b7:
1d:64:91:2e:fa:ec:c9:05:48:0d:c1:be:14:39:c6:
75:61:5c:b6:7d:54:c1:0e:ed:37:96:e3:0a:01:8f:
27:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D2:FE:91:3D:B1:3B:26:C6:38:FE:C9:AD:43:9F:C1:EC:DA:5A:15
X509v3 Authority Key Identifier:
keyid:0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b6:aa:38:49:f7:04:d4:b2:ed:1e:d0:f1:32:cd:66:03:4d:
b2:c0:7d:43:c3:be:7f:b3:5d:a7:3e:6c:76:f4:ff:87:2a:88:
ba:96:cd:1a:eb:1b:24:49:9f:c4:93:1f:26:c6:96:69:44:02:
fa:05:24:cc:d9:b5:99:01:cd:44:73:5e:29:82:39:c0:ca:8c:
e5:1a:8f:41:f2:47:88:5a:13:ac:db:e1:11:f3:07:0e:c7:f9:
64:6b:d5:c2:27:5f:be:24:34:ba:9c:bf:d5:f7:9a:58:3d:a3:
fa:9e:dc:4f:6d:c1:aa:61:c7:14:cc:a8:9a:9c:45:48:c2:4a:
58:d8:b7:0c:f0:21:09:87:ca:f5:da:7b:2e:8e:4a:33:dc:d9:
ec:8b:98:7e:9a:c1:b7:1f:ef:32:f8:e0:04:9b:32:72:ad:06:
6e:0b:8a:a4:20:75:c8:37:72:1e:6c:93:cc:a1:19:af:cd:be:
cb:a7:81:ef:2a:f2:02:5e:d6:8d:e6:52:ea:3e:4a:c5:44:95:
af:53:77:0d:3d:34:f5:0d:9f:df:3c:28:05:28:57:3c:2f:06:
04:a6:23:e1:8d:00:3d:c6:c2:c1:e7:65:e8:e0:25:e9:7e:d3:
65:0b:ab:9c:a1:38:bb:29:7c:5b:2f:b1:8e:8d:1f:a8:c0:15:
01:4f:20:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:38:07 2026 by rpki-client