
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
File: dE3LcujLR4z8SyWusfA7QGJmN1w.mft (raw, json)
Hash identifier: vnXJznbXlCYyKnGGFZd9+VkkyU/I3MPvdt35iGG/wHY=
Subject key identifier: 58:ED:80:11:E3:AB:03:5E:3E:D6:4C:4B:CC:71:AC:71:F9:CA:BB:3A
Authority key identifier: 74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C
Certificate issuer: /CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
Certificate serial: 019EC0DB61A81FFBBBDA914C000A0BBDB52A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
Manifest number: 0DA8
Signing time: Sat 13 Jun 2026 12:01:03 +0000
Manifest this update: Sat 13 Jun 2026 12:01:03 +0000
Manifest next update: Sun 14 Jun 2026 12:01:03 +0000
Files and hashes: 1: dE3LcujLR4z8SyWusfA7QGJmN1w.crl (hash: hKp1jJQeGomOUV/qWAp8lrN8QYkC0dtbbWayvm0ojdM=)
2: tCljQdoQCYAGdZbsiUMFE-XsaJE.roa (hash: 00v6c7Mm0TodzD2o33hMR8x5qaiYr+lOoZwclNiSZ/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:61:a8:1f:fb:bb:da:91:4c:00:0a:0b:bd:b5:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
Validity
Not Before: Jun 13 12:01:03 2026 GMT
Not After : Jun 14 12:01:03 2026 GMT
Subject: CN=58ed8011e3ab035e3ed64c4bcc71ac71f9cabb3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d4:be:10:8a:4a:3e:d3:bc:d0:a9:83:58:db:
eb:07:c2:c7:ff:19:d2:d7:a6:4f:29:2c:07:52:88:
86:66:0f:1f:33:a9:b3:d6:c7:db:fc:d4:55:b2:26:
f8:90:35:a6:6a:7b:2f:6f:31:e8:04:d9:8a:83:9a:
15:8a:5f:db:88:b9:02:57:ac:5f:59:41:b1:7d:fb:
7d:d7:bb:e5:14:95:28:03:27:88:4e:fa:e7:06:df:
07:2a:04:b7:03:c6:ad:1e:53:19:fa:f9:e5:68:1a:
87:f3:bf:14:21:40:62:a6:8b:32:3f:ab:2b:24:7a:
e3:d0:58:87:40:f8:89:ac:b6:19:3f:6d:0b:05:7d:
ae:d8:b6:c8:98:e0:32:32:da:9f:9a:b1:1c:32:ed:
05:dc:e0:d2:39:9f:f2:09:23:d8:64:7c:20:0e:fe:
b4:93:56:7b:b1:de:0f:de:f4:cd:0c:a6:d1:ab:1c:
bc:55:9d:f8:89:79:7c:35:ed:ec:35:97:d5:bf:ec:
31:10:ed:8c:d0:0b:70:5c:ee:cb:88:4e:60:d1:5f:
0a:be:59:83:aa:62:2b:a2:d9:cf:d8:c9:5f:f5:c1:
e5:ae:d5:44:69:f5:92:b9:3d:e3:db:f4:06:0d:b5:
89:06:cb:ab:ef:20:b0:10:f3:20:69:89:40:db:31:
bc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:ED:80:11:E3:AB:03:5E:3E:D6:4C:4B:CC:71:AC:71:F9:CA:BB:3A
X509v3 Authority Key Identifier:
keyid:74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ce:8f:5a:09:36:2a:4f:47:a4:8f:86:81:af:04:8c:4f:d2:
3d:05:25:83:a5:08:21:37:03:c7:32:6a:03:da:a6:08:ed:a5:
78:dd:3f:96:cc:4a:6b:14:03:26:de:95:45:6c:27:21:6f:06:
08:1d:f6:29:24:55:4d:83:31:16:ba:6a:a4:19:79:17:77:27:
ae:70:ae:7b:06:fa:f9:4a:57:46:74:b4:07:65:b9:82:00:74:
eb:a4:df:c7:0f:43:34:31:63:e6:e4:8b:de:b4:ff:e8:b8:c4:
c5:da:e1:fe:5e:0e:2e:c4:70:32:f3:43:99:aa:90:5c:77:bb:
ff:8e:5e:04:22:49:e1:59:04:e1:08:2b:b3:72:d8:ff:d0:7c:
ef:85:42:ae:10:00:7a:b9:d5:d1:77:19:68:fe:90:fc:3e:8f:
77:87:14:17:6e:9d:d3:4a:60:9b:0a:d2:79:b0:f4:fc:90:bc:
3d:47:27:f0:90:f3:ba:d7:e0:c0:90:60:e6:a2:4b:26:ee:e4:
6a:35:0b:b1:cf:ca:07:31:b8:37:e4:df:2b:16:1a:81:6c:93:
c1:46:f0:3b:dd:e5:a6:dd:bc:42:ed:a8:79:c0:fe:49:73:00:
1c:d8:11:9d:96:1a:32:59:b0:7d:46:14:cc:9a:3d:14:9a:df:
a9:59:de:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:19:53 2026 by rpki-client