Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
File: DgE0-vunLgYznK3FXV8TuuSCsS0.mft (raw, json)
Hash identifier: aIAV5InMrbdBAe0DTykjWEm5jnBgYowixIAyj+optEs=
Subject key identifier: 8B:21:1B:39:BD:C7:24:0B:9A:66:92:51:15:82:F2:C5:9C:31:41:A0
Authority key identifier: 0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
Certificate issuer: /CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Certificate serial: 019E1E6C98E6227043AD8B4C0BA138FC2BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 23:01:33 +0000
Manifest this update: Tue 12 May 2026 23:01:33 +0000
Manifest next update: Wed 13 May 2026 23:01:33 +0000
Files and hashes: 1: 8TaBsBYidW6NwN4w-r-_-frpmPw.roa (hash: d3cj9imIBJIrG7w+OMuxucJCXGk/PoAG60c7YkaGWUU=)
2: DgE0-vunLgYznK3FXV8TuuSCsS0.crl (hash: 4tvX6x3b05p8mlx/reRO+6PqrDqSUuP64e1DBdO126Q=)
3: cfuyV7WY5uCzefphkg9dkFiDF4o.roa (hash: 56j+8wClcw9KajdQHM4PT6tZ5VXaRrrlOf4m/1pMO8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:98:e6:22:70:43:ad:8b:4c:0b:a1:38:fc:2b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Validity
Not Before: May 12 23:01:33 2026 GMT
Not After : May 13 23:01:33 2026 GMT
Subject: CN=8b211b39bdc7240b9a6692511582f2c59c3141a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ff:c5:32:a0:ac:eb:70:18:24:09:22:e3:f0:
e0:c6:9c:49:71:5a:82:9f:3b:4b:ba:37:86:af:03:
22:61:f2:1c:64:2d:88:3e:46:f3:b6:01:fd:65:e2:
1a:39:35:01:04:3d:dc:59:4c:66:e1:8a:12:58:d1:
d3:50:81:0c:a5:48:4e:b9:83:5f:f2:2f:d8:72:32:
ce:b4:72:13:c5:83:63:5a:e5:65:01:fe:4f:bc:6f:
48:90:07:12:92:d2:6e:a8:7a:70:02:ba:63:3f:36:
f9:e4:a6:bf:3e:1f:0b:51:a3:57:c7:cb:93:d2:90:
9d:56:ec:54:57:8e:46:56:12:a5:53:8c:7d:0b:c2:
f7:a7:bc:44:d5:9c:7f:38:d3:d7:4a:b7:36:1b:5a:
14:f5:17:54:02:0c:47:58:c9:c7:25:56:8f:5b:4c:
35:77:5b:6c:05:2a:63:d1:6c:71:e0:fa:4a:1d:cc:
7b:c4:ed:bf:ca:49:6a:18:ee:3f:e6:cf:92:28:0d:
e0:2e:be:bd:c3:66:ea:7b:30:f3:29:f7:e6:62:eb:
49:11:55:69:75:51:2e:73:96:59:d3:3f:2d:0d:da:
ba:df:67:61:ef:0d:ac:05:7d:47:af:c6:af:c0:95:
37:ee:1d:31:49:d9:59:a1:0a:3f:5f:ae:c1:0c:09:
b0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:21:1B:39:BD:C7:24:0B:9A:66:92:51:15:82:F2:C5:9C:31:41:A0
X509v3 Authority Key Identifier:
keyid:0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:83:a4:a2:b7:61:60:7f:af:39:e6:35:d9:0b:2f:e3:05:f8:
fe:29:a1:13:f0:5d:ed:42:fd:dc:b3:dd:4e:bd:a3:44:2e:6a:
d0:e7:2f:e2:64:f0:58:48:a6:cc:58:a3:50:0f:3f:b1:6c:7b:
df:a3:19:d0:b9:3d:a6:b4:fe:82:68:ce:00:21:0a:b0:8b:08:
94:7c:4c:a0:9e:b5:45:10:2a:8a:29:32:24:30:fd:f2:08:cc:
1e:14:b9:f6:d6:48:5e:67:20:31:6f:4e:bb:6b:70:02:b7:8a:
90:2d:b2:19:b3:64:fb:2f:11:3b:f7:92:da:02:ca:57:0e:ab:
1b:a9:4b:d7:07:24:ef:39:11:c5:61:68:95:8e:8b:b5:b7:ea:
83:98:c1:03:a5:61:93:7d:cb:f6:01:76:ff:9d:bf:78:6f:06:
55:2a:c9:39:03:8c:bc:72:f5:9e:25:4a:c1:5c:9c:f3:66:ee:
39:67:78:a1:86:2b:40:a1:21:bd:ca:d6:3d:75:d9:63:e0:3f:
97:3f:c9:3c:7f:62:22:77:f5:4b:da:24:08:de:b3:be:87:14:
58:3a:ec:6f:d8:64:af:cc:26:85:e8:97:75:b7:bd:78:2a:af:
21:5b:3c:4d:26:e4:06:70:ec:20:0e:3f:12:20:29:74:4c:11:
e4:7e:5c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:05:17 2026 by rpki-client