Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
File: D-cy5rJJCT55oaUHy82BlvAYF_o.mft (raw, json)
Hash identifier: /IR+cLBQ2Or280VPHJbx0tKDxGBCVlWhquYBQV+vUWM=
Subject key identifier: FA:A7:8E:72:44:71:27:2A:7C:CA:29:CF:6B:29:D9:AB:74:0E:56:76
Authority key identifier: 0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
Certificate issuer: /CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Certificate serial: 019D9A07000663523C15E9141765E72EA146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
Manifest number: 1359
Signing time: Fri 17 Apr 2026 06:00:43 +0000
Manifest this update: Fri 17 Apr 2026 06:00:43 +0000
Manifest next update: Sat 18 Apr 2026 06:00:43 +0000
Files and hashes: 1: D-cy5rJJCT55oaUHy82BlvAYF_o.crl (hash: LNq1826dHXzBJ+MCS/d33VsmUPnOj7NCNQb6vL0wfF0=)
2: KRcQChyIkdk17z-o88DTXwkNu_Y.roa (hash: k4ZBkPTraQNZ31kK5NnaOy56WVAVKO/c8Q/xt3FDIoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:00:06:63:52:3c:15:e9:14:17:65:e7:2e:a1:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Validity
Not Before: Apr 17 06:00:43 2026 GMT
Not After : Apr 18 06:00:43 2026 GMT
Subject: CN=faa78e724471272a7cca29cf6b29d9ab740e5676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:02:ee:7c:fd:17:67:2f:4f:d8:3a:a0:13:28:
9d:6e:0b:b5:96:f1:ab:28:ac:6c:7d:5b:e6:39:0a:
9a:e1:e8:a8:1a:4d:c5:6e:e9:d1:52:f2:38:9c:76:
64:42:de:c7:a1:9a:eb:d4:70:c7:34:b1:34:5a:54:
e6:a5:36:b3:22:20:60:95:b9:7b:49:ff:0d:b3:5f:
6e:72:e3:f5:c9:86:66:4c:f8:ae:b8:c6:0b:98:2d:
a2:bc:28:57:dc:86:b6:c2:bf:3e:2d:82:37:8d:25:
be:13:56:87:0f:da:fe:a3:8f:7a:59:18:b0:43:42:
5a:0d:20:0a:a4:79:10:11:ca:f1:fe:97:39:c6:b2:
d9:f3:6b:04:2c:db:7c:3d:6f:65:76:79:e6:22:06:
cc:1a:24:39:14:90:ab:af:85:d4:5b:fb:fc:b2:44:
86:4a:27:d9:99:74:42:d0:82:45:60:39:ac:4e:19:
d0:dd:ac:ef:d3:81:b7:dd:2f:3d:59:a0:6c:b6:fe:
42:05:a9:db:0a:a4:1f:1f:6a:ca:61:b3:7c:6e:c8:
72:04:72:2b:e1:92:5a:c5:41:e0:ea:18:4f:52:4f:
22:96:cd:eb:3e:af:64:5c:f0:3a:93:7b:d8:56:f4:
d1:a2:66:38:25:ff:76:8a:63:50:98:dc:f3:2f:fe:
56:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A7:8E:72:44:71:27:2A:7C:CA:29:CF:6B:29:D9:AB:74:0E:56:76
X509v3 Authority Key Identifier:
keyid:0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:32:21:b5:0c:e6:3c:6f:cb:6a:56:de:68:7c:74:08:c6:93:
ff:4f:df:ae:35:37:e0:8d:2a:bd:79:39:7c:c1:41:3d:11:77:
04:12:93:26:7c:c4:cd:c6:ef:0e:93:c8:a0:15:9f:82:26:9a:
f6:03:66:d0:de:01:d0:1a:7d:97:de:1e:ac:b3:0f:56:64:62:
3d:6b:67:fe:37:d6:fb:f5:c8:d9:0c:0d:31:24:03:41:bb:67:
c7:a2:2c:f7:6e:b3:cb:85:4f:e9:38:dc:bb:e8:ec:04:f7:50:
cd:3e:61:9b:f8:e5:f1:88:f2:77:34:d4:96:d5:37:7f:c9:90:
cc:b3:8e:af:36:28:59:27:41:f6:0f:34:df:fe:88:0e:20:67:
09:6d:c4:2a:4c:ef:a3:eb:35:c1:d7:3b:e0:14:9d:16:4c:b6:
c8:e2:6b:07:91:e0:42:17:a1:56:f5:fe:c0:89:ab:e3:35:ec:
e6:61:b5:6d:35:68:3c:c2:bf:38:fe:67:6e:17:6d:b6:71:ab:
5e:7b:90:fe:de:28:c5:b9:44:54:2b:0e:d1:ff:1a:1f:e8:18:
da:d7:de:17:b1:78:36:fc:51:f8:8a:47:5e:90:d1:ae:65:23:
60:b9:81:55:26:9f:49:57:85:4b:90:e2:a5:5c:7a:da:f8:18:
d7:49:3f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:18:54 2026 by rpki-client