Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
File: DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft (raw, json)
Hash identifier: BrK2jFEe6ElT3l/aN4/vsVmV9HdIA6rri6wXkjywIAk=
Subject key identifier: B5:EE:01:C6:8C:16:8C:89:14:79:36:E0:1B:7E:EF:E8:32:5F:A3:CA
Authority key identifier: 0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
Certificate issuer: /CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Certificate serial: 019D9B19F683A45D5E2F8BB828F4B722E186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
Manifest number: 0ECD
Signing time: Fri 17 Apr 2026 11:01:03 +0000
Manifest this update: Fri 17 Apr 2026 11:01:03 +0000
Manifest next update: Sat 18 Apr 2026 11:01:03 +0000
Files and hashes: 1: BCXtQModd3nAhdeMkRMBuZx_cZc.roa (hash: jtOOBxUO8skySjopVxcruyx6WiDS/7xnyuAQI3lDFqk=)
2: DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl (hash: SMSqCH23IEjBuoqgH48Li2+2d90mRO8tLCPTzyuKlME=)
3: L9a6XlmixBDgTngX3OesnHMjCvQ.roa (hash: yfr3OyuPpoSecdibTgJg+ch8pCeShfs+7iwZpZSIKv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:f6:83:a4:5d:5e:2f:8b:b8:28:f4:b7:22:e1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Validity
Not Before: Apr 17 11:01:03 2026 GMT
Not After : Apr 18 11:01:03 2026 GMT
Subject: CN=b5ee01c68c168c89147936e01b7eefe8325fa3ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:84:7f:7a:b9:46:1b:a3:68:cc:b5:d4:40:94:
9d:e8:31:76:54:bf:16:22:db:3d:a3:08:e3:89:51:
46:dd:91:8f:e7:66:a0:5c:87:72:d8:07:d7:30:23:
2e:69:9a:1d:ae:db:09:7c:0d:fb:78:f7:d4:48:85:
33:c4:c1:04:80:e6:f2:3c:38:2c:e5:cb:bf:7e:4e:
c8:5e:e8:b2:8c:d1:57:7c:08:4d:5d:0e:f7:97:db:
a2:eb:e8:28:d3:6b:48:a3:95:98:98:e9:6c:1c:0c:
6a:bb:da:22:9d:10:f8:6e:14:03:f2:e6:3d:79:68:
f3:bf:01:11:6f:2f:72:e8:3c:61:8e:98:18:a6:05:
29:e8:ad:a8:24:67:45:9b:86:a7:96:11:c9:d1:03:
af:40:96:4f:7d:98:c7:c0:c2:c1:25:7c:6a:46:83:
05:06:b0:0e:18:7e:81:d4:d9:ad:e7:33:46:f6:af:
24:50:0e:aa:9f:d7:3f:a1:f1:85:91:21:08:9e:a5:
2f:b2:f5:64:f3:71:9b:7c:b7:be:9e:c7:6f:f4:11:
6b:fe:5a:29:33:23:8d:9b:e6:18:1c:7d:57:fc:aa:
b7:52:5c:02:66:79:24:2f:e1:5e:b1:9b:f9:8d:07:
5c:23:f4:62:53:38:dd:a4:4f:a5:1a:6e:fa:bb:ae:
57:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:EE:01:C6:8C:16:8C:89:14:79:36:E0:1B:7E:EF:E8:32:5F:A3:CA
X509v3 Authority Key Identifier:
keyid:0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:19:18:cb:32:4a:7d:52:0c:ec:6c:82:36:9b:77:c2:98:ca:
c6:68:8e:c1:a9:da:99:38:e0:b3:04:70:59:f0:e2:9e:24:f9:
95:f2:d3:b7:15:39:ef:1a:b2:05:fa:48:cd:b2:2f:76:39:48:
fd:8e:f4:29:ee:f1:49:66:ce:a0:9b:49:2b:2e:fd:43:9a:0d:
4f:5a:0f:3b:bc:aa:a3:08:00:cf:36:d2:56:88:cf:ba:90:57:
2b:13:a3:93:bd:76:4d:66:41:2c:93:bc:2c:55:3a:f4:ed:1f:
77:60:d7:38:74:a6:0f:3b:f0:17:88:ac:33:b1:1b:87:f8:76:
83:e1:93:a1:cb:a5:53:af:a7:58:31:dd:f9:71:47:4f:de:45:
d5:28:d1:46:16:a1:8d:65:1c:7e:23:1c:41:25:cf:2d:cd:96:
95:05:a1:b4:d9:11:f0:ce:2d:2d:1b:71:82:23:b3:31:93:1e:
9f:d5:27:5d:44:0a:9c:ea:52:85:88:46:e0:28:a5:5b:a1:00:
2e:81:8b:17:3e:41:ab:45:f5:45:99:30:db:42:5e:43:5c:30:
1e:a8:74:39:c3:1e:4c:a2:de:b7:0d:20:64:55:48:32:34:cd:
36:44:aa:38:20:be:88:b9:e9:0b:3d:91:22:96:14:04:86:45:
55:e3:c5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:42:45 2026 by rpki-client