Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
File: DZHf1FaDQonB_QOg_vG1Kl79HZE.mft (raw, json)
Hash identifier: gj9M9JzYxgQA/w713KtFOp01T6fDFQTPmGjBvQ73q+o=
Subject key identifier: 42:C4:52:FC:9C:64:E6:A9:7C:11:88:01:18:8D:A4:29:9B:31:BA:8F
Authority key identifier: 0D:91:DF:D4:56:83:42:89:C1:FD:03:A0:FE:F1:B5:2A:5E:FD:1D:91
Certificate issuer: /CN=0d91dfd456834289c1fd03a0fef1b52a5efd1d91
Certificate serial: 019E1F111BBF91F1BF1E43845099AC6448E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
Manifest number: 116E
Signing time: Wed 13 May 2026 02:01:15 +0000
Manifest this update: Wed 13 May 2026 02:01:15 +0000
Manifest next update: Thu 14 May 2026 02:01:15 +0000
Files and hashes: 1: DZHf1FaDQonB_QOg_vG1Kl79HZE.crl (hash: 5l8j4+8j8g99Mpa3yOS6CKZPrZmtElQGTZhyDgrNx9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:1b:bf:91:f1:bf:1e:43:84:50:99:ac:64:48:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d91dfd456834289c1fd03a0fef1b52a5efd1d91
Validity
Not Before: May 13 02:01:15 2026 GMT
Not After : May 14 02:01:15 2026 GMT
Subject: CN=42c452fc9c64e6a97c118801188da4299b31ba8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:78:1c:9b:84:05:8a:0c:d8:74:c5:3e:c6:b5:
8d:70:45:0a:f4:c3:62:a3:c4:37:27:5c:56:c6:a2:
17:b3:5a:2d:8f:e0:12:9a:d5:49:b7:29:f6:18:ba:
69:9d:d3:3c:1d:a0:60:f6:b7:a9:cb:4a:13:c1:07:
52:ac:95:73:c1:63:11:2b:cd:11:87:0b:68:b3:f0:
fa:b2:2a:ea:7a:72:d6:f6:5e:78:29:8e:67:53:de:
db:2a:05:4f:5c:70:57:0a:5a:37:83:48:ab:72:b9:
e0:4f:90:30:d5:5d:b4:75:5e:dc:48:4c:03:80:91:
9e:a8:31:3a:46:ce:89:2c:90:46:af:6c:3d:80:10:
32:33:86:14:e6:1b:63:e9:e3:c7:a1:7d:71:48:da:
49:24:f8:10:8e:45:63:f5:f3:e5:18:8c:ba:db:c2:
3a:7c:dd:eb:eb:a6:9c:4b:75:c9:c3:57:75:3d:1a:
fd:24:f9:30:e4:2d:cc:7d:45:4b:61:0d:88:0d:d8:
b9:02:d2:0c:60:94:7e:e9:45:97:23:d1:52:0a:cb:
a9:51:93:d9:96:56:68:ff:cc:46:a0:b7:ab:a1:f5:
52:c7:4c:40:8a:97:13:6d:04:46:49:3c:a5:a6:6b:
75:2d:07:85:e6:b0:99:84:84:21:b0:b8:ec:6a:15:
f7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C4:52:FC:9C:64:E6:A9:7C:11:88:01:18:8D:A4:29:9B:31:BA:8F
X509v3 Authority Key Identifier:
keyid:0D:91:DF:D4:56:83:42:89:C1:FD:03:A0:FE:F1:B5:2A:5E:FD:1D:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c0:a3:cc:15:46:b7:fb:f8:79:e1:7c:b4:ab:44:46:65:ad:
45:b7:c3:d5:e6:16:8b:0b:e6:b4:d5:71:4b:23:ea:08:b4:17:
51:e7:65:12:62:d9:e4:7d:6e:b0:0a:1c:e9:ac:77:0c:59:4f:
4a:26:36:6f:fc:98:a6:ae:67:9c:9c:f7:d4:f2:29:ec:b3:d2:
6c:b3:a1:ce:6d:02:3d:ec:3d:c2:1c:78:a6:cf:59:a6:27:a2:
7a:bc:4e:da:37:51:cb:af:bf:37:cb:7b:92:03:81:f4:27:d8:
5d:70:6f:cc:82:e3:ab:f0:bd:e6:11:66:d8:10:9f:9b:29:ca:
eb:59:ed:bc:16:a8:80:37:70:c0:4b:5f:50:21:e6:8d:aa:e0:
1e:10:a8:a2:7e:ba:69:6a:b4:57:56:d7:a6:8e:3c:09:4e:83:
11:04:dd:07:53:94:ee:de:7f:34:51:00:cd:29:62:03:9e:62:
98:c2:06:0c:bf:35:fa:b9:f7:a8:5a:0d:ec:ab:c8:64:75:a9:
5a:f7:e2:9d:68:03:39:60:7a:54:71:02:fc:dc:1d:9f:ac:ac:
ff:47:38:df:52:c0:be:0a:1e:4f:2f:c2:d6:ff:23:37:20:db:
49:2c:ec:d7:15:fc:c1:c7:98:8a:fd:7b:65:27:58:4a:78:cc:
de:a5:bf:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:21:45 2026 by rpki-client