Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
File: DNLKvrHXJOekjdYemn4MUKTpv1A.mft (raw, json)
Hash identifier: bS8A/M88Zx9CwNDIkGOTgZ8517CU955ZZJaAK2vqIKg=
Subject key identifier: 72:01:AF:BC:1E:55:7A:30:AF:AB:97:68:50:8C:F3:36:82:E0:5E:52
Authority key identifier: 0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
Certificate issuer: /CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Certificate serial: 019E1DC739C322BCACDBA37D692DEA58CD9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
Manifest number: 09D6
Signing time: Tue 12 May 2026 20:00:56 +0000
Manifest this update: Tue 12 May 2026 20:00:56 +0000
Manifest next update: Wed 13 May 2026 20:00:56 +0000
Files and hashes: 1: 1--Z6Q8BarjYadI1h8WmhE35LM8U.roa (hash: pUDJuTCmc9bQJt1IcbDsRbQfB75IO5Jl60DjnzyNbKQ=)
2: DNLKvrHXJOekjdYemn4MUKTpv1A.crl (hash: DcxTWuLwgxtv1qDIGyzUOvCqi1nFR5YIgKzr2qscDSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:39:c3:22:bc:ac:db:a3:7d:69:2d:ea:58:cd:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Validity
Not Before: May 12 20:00:56 2026 GMT
Not After : May 13 20:00:56 2026 GMT
Subject: CN=7201afbc1e557a30afab9768508cf33682e05e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:37:3d:8e:6d:8e:7b:5c:0f:f1:41:ce:84:c0:
a2:e2:5c:ed:91:86:a1:9e:20:94:97:85:bf:c2:c2:
55:16:85:eb:28:52:1e:e5:da:80:db:30:08:84:6e:
82:92:20:ec:09:4c:f8:ce:1d:95:e2:a9:c1:d7:4f:
63:3c:f4:f7:0a:ca:7f:b5:9c:65:89:90:c6:27:08:
e2:99:e6:78:ef:23:b9:3d:f3:52:f5:9f:4b:85:f7:
21:68:db:6c:aa:66:61:75:93:82:98:9d:c8:31:9e:
b5:3f:4f:c1:7a:44:c9:53:51:95:6c:36:de:65:23:
30:15:0f:60:0e:43:b0:1c:c1:a5:a7:0a:28:81:d5:
f5:d2:32:1f:21:ea:3d:7a:e6:a5:94:25:56:06:1a:
ca:75:e8:ce:df:28:55:8c:69:e7:4b:65:28:37:7d:
99:e0:47:ed:4c:93:6c:2a:cd:69:41:7f:46:44:4f:
85:75:10:ca:70:13:af:8c:62:ba:00:ee:68:1e:5c:
b6:ab:36:63:1b:6f:e9:05:f4:2c:a4:9c:15:87:b1:
10:8f:89:f4:da:26:f7:d9:ee:d1:7d:83:d9:18:db:
c5:34:00:8e:c9:75:83:f0:a4:06:bb:d1:b0:49:2b:
85:94:02:79:9b:80:2c:fd:6d:50:07:2b:7f:ca:e1:
83:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:01:AF:BC:1E:55:7A:30:AF:AB:97:68:50:8C:F3:36:82:E0:5E:52
X509v3 Authority Key Identifier:
keyid:0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:69:ce:63:dc:0d:af:86:1f:23:58:f4:ef:a8:44:46:d6:6b:
eb:18:61:c2:92:0d:68:cb:eb:e5:0f:7e:bb:44:b4:72:c0:4c:
bb:6b:b9:30:c2:f4:a0:29:4e:c0:31:07:9d:3f:d6:0c:30:ef:
8d:b4:df:91:9c:d1:8a:97:d7:a4:9d:f2:fb:3f:a0:32:7d:c9:
5d:1d:5e:a2:d8:46:2c:05:30:50:ed:a0:45:f4:4c:56:4a:c3:
e4:77:5a:be:21:ea:1b:7c:9f:22:25:12:13:92:db:3c:00:80:
ee:fb:23:7a:f1:8e:eb:62:ea:5b:99:15:41:f3:20:f5:19:52:
71:23:fb:1c:11:ab:0d:60:4b:6a:50:e2:98:d9:e4:7a:8a:99:
f1:96:08:34:b9:21:51:e9:18:d1:4e:e2:17:ab:9b:4d:13:53:
65:10:d5:bb:9b:d6:fc:ba:36:28:04:de:e0:74:be:30:21:13:
fb:86:4a:b1:ba:cc:fa:0b:e4:33:f5:84:66:f5:f7:1c:83:2d:
10:b8:54:c7:31:b9:13:c3:ca:3d:ca:d5:4f:a4:28:55:fe:eb:
20:e4:b2:f9:3a:99:61:d7:03:64:ae:ba:04:8f:c9:3c:fb:90:
cb:68:cf:55:f3:78:e9:c6:cd:51:f2:b6:70:88:ee:49:ba:57:
37:07:f3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:49:24 2026 by rpki-client