Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
File: DlNS2UQbZcIBbtjrfi8jWVRDT10.mft (raw, json)
Hash identifier: Jal+Mx8h+rcBmlR9h9i/CJALmuk/fToxMBx4nAnxPcw=
Subject key identifier: 4B:18:A4:80:22:7D:D8:11:10:F7:0D:6F:EF:C6:26:60:01:AB:1F:60
Authority key identifier: 0E:53:52:D9:44:1B:65:C2:01:6E:D8:EB:7E:2F:23:59:54:43:4F:5D
Certificate issuer: /CN=0e5352d9441b65c2016ed8eb7e2f235954434f5d
Certificate serial: 019EC3372A4A3A5D63294340D1BD03208775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DlNS2UQbZcIBbtjrfi8jWVRDT10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
Manifest number: 0503
Signing time: Sat 13 Jun 2026 23:00:32 +0000
Manifest this update: Sat 13 Jun 2026 23:00:32 +0000
Manifest next update: Sun 14 Jun 2026 23:00:32 +0000
Files and hashes: 1: 7HIHyHGDiVhFywfB2aUFsNjko-M.roa (hash: Iv4sArJJwlkOrpiX31eTz3pS1dqhRbw3dXCKTSlvosg=)
2: DlNS2UQbZcIBbtjrfi8jWVRDT10.crl (hash: RFf+r3YxiLWeZMKwgobLiRjQu/m+wBdVdGi9GODcE0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
rsync://rpki.ripe.net/repository/DEFAULT/DlNS2UQbZcIBbtjrfi8jWVRDT10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 23:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:37:2a:4a:3a:5d:63:29:43:40:d1:bd:03:20:87:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e5352d9441b65c2016ed8eb7e2f235954434f5d
Validity
Not Before: Jun 13 23:00:32 2026 GMT
Not After : Jun 14 23:00:32 2026 GMT
Subject: CN=4b18a480227dd81110f70d6fefc6266001ab1f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:35:8d:53:3c:e1:eb:e0:65:db:0d:1a:bc:76:
89:e7:67:a8:2c:68:1d:32:da:b8:e2:62:fd:92:1c:
cd:cf:0c:58:39:30:1b:c9:fd:ae:3f:97:f2:3e:e1:
47:66:3d:40:47:35:9d:71:64:50:4a:88:af:cf:3d:
25:8b:7a:6e:13:46:ee:ed:d3:4a:05:82:c0:a3:f3:
ea:ab:5c:f9:ca:55:fd:f8:5e:30:fd:67:b9:bf:e7:
86:0d:c0:58:79:83:c2:95:52:d3:17:7a:2f:44:93:
d9:48:60:a5:22:57:c2:3a:ac:ad:f6:e0:b9:78:40:
c4:7c:14:95:76:f9:3f:cb:cc:17:9f:71:83:45:51:
e9:90:fa:d7:79:db:5c:3f:44:c6:39:b6:38:cf:74:
6e:9b:14:7a:6c:81:c5:e1:b7:a3:56:ff:d0:62:19:
a1:1d:9c:c8:ec:da:18:b9:5e:82:8e:8e:a8:9d:d2:
cd:65:78:da:f3:d0:f7:3b:d1:1f:27:ed:59:27:87:
ea:9f:89:49:cc:f5:b5:b3:d5:66:0d:00:6c:4f:09:
47:e3:3e:c7:55:80:dc:70:cd:5c:65:1b:8f:3c:9c:
2b:cf:2f:02:2b:00:1c:4a:89:87:83:51:b9:b8:0c:
dc:4d:84:c9:be:4f:b6:de:c8:61:9f:9b:c0:ec:ae:
fe:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:18:A4:80:22:7D:D8:11:10:F7:0D:6F:EF:C6:26:60:01:AB:1F:60
X509v3 Authority Key Identifier:
keyid:0E:53:52:D9:44:1B:65:C2:01:6E:D8:EB:7E:2F:23:59:54:43:4F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlNS2UQbZcIBbtjrfi8jWVRDT10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:0b:1d:df:4a:5a:1f:d6:b7:2b:79:b1:24:fb:b6:62:e7:1e:
96:62:b7:fc:ea:5a:60:a1:70:b6:7a:d8:0c:a9:0b:78:04:9c:
3f:fb:74:be:0a:79:73:01:85:5a:6e:32:1f:9a:f7:0e:06:c9:
96:ad:3e:8d:19:04:8e:fa:1d:2e:70:b9:8f:2e:55:23:a7:2e:
89:1d:04:b2:24:d5:44:ad:56:83:70:0b:68:7c:65:7e:95:dc:
c5:31:fd:89:20:c3:69:94:65:86:b3:91:ac:21:2e:47:9b:f4:
90:ce:8c:3e:ce:c0:9a:4c:73:04:2f:11:91:c0:e6:5f:1b:72:
f2:ca:ad:33:68:7b:ce:67:75:95:18:5f:78:56:c9:12:75:f9:
d5:b9:6d:f3:3e:6b:e8:07:44:0f:d8:af:d2:80:6a:dd:67:92:
53:99:4b:39:31:ed:9b:4b:34:5f:b4:eb:60:6a:70:b8:9d:d6:
95:d5:f5:9e:9d:46:e5:13:e7:ae:14:b0:80:58:3c:2c:d5:bf:
fe:9b:90:e9:59:6b:12:85:65:d5:70:2a:73:85:53:49:3a:f8:
f9:b6:46:27:ad:54:10:81:5e:78:be:e6:5f:59:4b:ed:db:15:
28:ea:1d:5b:a9:55:22:79:78:0b:79:4e:9b:a5:66:d0:27:ed:
fb:97:a7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:57:16 2026 by rpki-client