
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
File: DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft (raw, json)
Hash identifier: JL1Xg7NoJKs1bqOGqNZaXCp9Ttdfx5Q1454Uovph4lc=
Subject key identifier: 6D:5C:86:4C:E5:60:AC:9E:2B:7C:B4:FD:07:A1:C2:52:54:28:08:54
Authority key identifier: 0E:43:FB:42:5B:C1:C3:52:57:7E:0A:9A:DE:5B:FF:59:C0:B4:C5:82
Certificate issuer: /CN=0e43fb425bc1c352577e0a9ade5bff59c0b4c582
Certificate serial: 019EC0DA9E945495D78E60F5274D3BF7FDA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkP7QlvBw1JXfgqa3lv_WcC0xYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
Manifest number: 0155
Signing time: Sat 13 Jun 2026 12:00:13 +0000
Manifest this update: Sat 13 Jun 2026 12:00:13 +0000
Manifest next update: Sun 14 Jun 2026 12:00:13 +0000
Files and hashes: 1: Atp7ou_dWLqF9yrUFBSaGu8i1NQ.roa (hash: iX6v9+WjPW25JV4dSQdrR9Ylqr6/LIAKembF0Rx+4SM=)
2: DkP7QlvBw1JXfgqa3lv_WcC0xYI.crl (hash: NHevO9CLAIChiHSdkjRNASZPB0ZAyV1EMI+liv9TFVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DkP7QlvBw1JXfgqa3lv_WcC0xYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:da:9e:94:54:95:d7:8e:60:f5:27:4d:3b:f7:fd:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e43fb425bc1c352577e0a9ade5bff59c0b4c582
Validity
Not Before: Jun 13 12:00:13 2026 GMT
Not After : Jun 14 12:00:13 2026 GMT
Subject: CN=6d5c864ce560ac9e2b7cb4fd07a1c25254280854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3b:04:33:6f:b9:fa:30:d3:bf:06:02:2e:62:
1e:45:b0:d5:72:ed:31:09:df:e5:59:1c:66:f6:93:
ed:65:85:0c:81:46:f2:93:5e:ff:bc:2d:86:9e:14:
17:bb:d2:db:a9:24:a2:a8:4e:11:f2:f1:3c:27:1c:
2c:71:91:00:68:3d:74:64:af:66:0c:98:28:a9:13:
0e:e3:0f:4c:b3:36:ed:db:65:c1:dc:52:fb:fc:9f:
47:fd:84:bd:0b:d2:e2:56:38:ad:ac:1a:f1:36:17:
79:6d:7d:1c:c9:4b:35:39:c4:f2:a0:c2:b9:33:f3:
c3:12:c8:5a:c0:1e:5b:78:89:71:b8:15:bc:8e:28:
10:df:8d:2c:d3:e8:38:7b:19:fd:3a:02:d5:c5:2f:
c5:25:7f:c3:d0:c0:51:fa:06:28:4c:63:b4:f2:1b:
c1:82:cb:3b:78:1c:61:24:59:c0:25:2f:ff:b5:52:
ea:72:1b:7f:27:03:f0:0b:ae:45:be:b1:8e:67:3a:
ce:6b:dd:42:91:2d:2a:93:ec:64:84:ee:87:64:e7:
17:f7:c9:25:f2:e8:7e:cc:5e:13:b2:73:02:5a:ff:
fc:47:e1:b3:2e:00:5f:d3:4d:b0:3f:13:90:ae:6b:
38:bf:08:5c:7f:4d:5e:97:e7:3c:44:54:55:42:8a:
92:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5C:86:4C:E5:60:AC:9E:2B:7C:B4:FD:07:A1:C2:52:54:28:08:54
X509v3 Authority Key Identifier:
keyid:0E:43:FB:42:5B:C1:C3:52:57:7E:0A:9A:DE:5B:FF:59:C0:B4:C5:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkP7QlvBw1JXfgqa3lv_WcC0xYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:29:fe:92:76:db:c0:ad:9a:15:1d:bc:9a:8a:59:77:0f:61:
47:27:47:83:82:52:a4:ce:41:d6:db:ca:f1:76:65:41:cf:d3:
f1:46:09:35:ea:32:70:8b:e0:ca:a1:2b:ac:d2:b3:ad:5c:d2:
b0:f2:d5:de:cd:8f:2a:3a:2d:a5:d6:21:a3:58:70:90:de:99:
c8:07:66:80:93:cf:3c:b4:8c:e8:c4:fb:a1:9c:f0:01:c1:6d:
02:c7:c7:22:fc:24:57:25:bb:eb:6a:fa:ae:70:4b:9d:f8:c2:
74:6b:1c:c5:f0:15:69:f6:5b:9d:ff:c9:3e:42:e0:13:1a:0a:
03:62:ad:85:d6:ab:04:7a:54:40:af:35:e4:c9:50:bd:da:3a:
3a:85:b9:e3:64:1d:28:b5:5a:da:09:f8:4e:bc:8f:eb:57:9a:
ee:c4:7f:f5:ef:80:1f:12:ce:a4:72:04:99:4b:4e:89:bf:ce:
e2:12:5e:dd:02:1b:f3:6b:c3:0a:cd:a6:31:3b:e2:1b:1f:1a:
86:a6:5f:db:37:2f:25:be:17:8e:80:64:ce:d0:52:e3:d3:ef:
48:b9:87:37:4f:55:72:06:49:54:5a:a8:40:15:83:15:11:c7:
ee:87:72:99:19:33:46:0e:b7:ce:f9:ce:5c:61:1c:7c:92:bf:
90:10:7e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:21:19 2026 by rpki-client