Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
File: DB5tXnLa9BCM9gvUfpNt8aHpciY.mft (raw, json)
Hash identifier: MuPbsxXYZ1DJRBhF/MEKK5ArBE24XaGGgqAKX3vU6GI=
Subject key identifier: 40:F5:D6:1D:9B:99:CC:EC:98:BD:6B:48:9E:2A:F0:77:B6:25:DC:DE
Authority key identifier: 0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26
Certificate issuer: /CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226
Certificate serial: 019D9A07011BD56DE5482B182097D820EEC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
Manifest number: 11EB
Signing time: Fri 17 Apr 2026 06:00:43 +0000
Manifest this update: Fri 17 Apr 2026 06:00:43 +0000
Manifest next update: Sat 18 Apr 2026 06:00:43 +0000
Files and hashes: 1: DB5tXnLa9BCM9gvUfpNt8aHpciY.crl (hash: Seubz3x5mcGgwD3e5If7aOedhHKam+P0z072psd7rpE=)
2: gYAU9kG86HbZ3YtQGu5MLj44xqI.roa (hash: vR6PgJKynGl8VT8dHy4Fb3OUdFphSgnDlBXNAPZOxik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:01:1b:d5:6d:e5:48:2b:18:20:97:d8:20:ee:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226
Validity
Not Before: Apr 17 06:00:43 2026 GMT
Not After : Apr 18 06:00:43 2026 GMT
Subject: CN=40f5d61d9b99ccec98bd6b489e2af077b625dcde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:19:78:05:0f:89:5e:4a:a6:d9:dc:f1:15:33:
b4:bb:51:46:9e:ea:57:52:0c:29:9b:0b:67:af:ae:
2a:21:7b:e6:14:0d:11:03:73:b6:22:cb:4c:16:33:
ab:ce:ca:a1:9e:19:b5:b8:f6:4f:68:d8:8c:88:49:
46:f8:3c:aa:40:ef:90:ab:a8:e4:3e:4a:71:c1:fb:
b5:00:63:c5:f3:03:97:88:20:ed:84:fc:7d:cd:c5:
d4:26:7d:ec:4a:55:c6:f6:02:14:6b:97:52:96:06:
71:36:96:2f:29:65:48:b8:b5:5c:b3:b4:13:b2:d7:
93:68:f0:0a:10:4c:d1:e2:ba:de:72:e7:8c:f3:ec:
9a:bf:87:e6:ce:e3:8b:a5:d9:f1:60:5d:28:49:6e:
86:c3:f1:ec:ae:29:bb:a3:bc:3f:5e:21:40:48:95:
a1:72:d2:ff:22:f1:62:cc:b0:06:d1:9a:61:b7:bc:
e5:c6:e0:49:1e:c8:18:cb:31:c0:ec:dd:d7:fe:2c:
35:21:7b:e9:8b:98:fd:eb:ea:26:19:df:c1:45:b2:
87:f0:8d:5c:4c:f7:92:35:a5:13:4a:b0:f4:d1:17:
0d:ab:4a:63:f7:d9:61:86:cf:a0:25:05:a5:91:3b:
f3:88:3f:0a:6d:94:1f:b8:e4:04:11:06:4f:cc:38:
c0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F5:D6:1D:9B:99:CC:EC:98:BD:6B:48:9E:2A:F0:77:B6:25:DC:DE
X509v3 Authority Key Identifier:
keyid:0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:62:0d:ab:af:c5:c9:92:15:48:17:4e:e7:39:a0:a1:4c:b6:
eb:1f:66:e0:a6:79:1a:56:3b:a0:f3:e2:c4:f2:f6:dd:95:e9:
f6:0a:ac:7e:93:8d:e8:cd:9e:53:68:0c:62:b1:1f:6e:a6:0a:
45:a7:41:98:b6:67:59:5c:c0:9a:4f:a6:4b:da:d2:98:85:7e:
d3:25:35:1d:ec:4d:d5:84:93:08:e0:f2:33:e5:0e:8d:5e:75:
65:31:57:75:99:44:fe:37:c4:4b:e3:1e:bf:b2:d1:b6:86:63:
7c:ed:19:2e:ee:0c:92:02:bd:18:18:e7:ad:39:1b:5e:f6:99:
65:8d:d8:43:db:04:ef:45:fb:aa:ad:dd:ac:72:26:89:fd:ec:
24:72:4a:27:a7:42:d5:25:89:8f:57:6b:8e:e7:ad:b2:49:af:
3a:4a:f1:69:a0:3c:04:bd:6f:24:17:79:09:c0:c2:95:4a:b2:
64:ab:a2:a5:62:a7:69:5e:2f:dc:a7:d6:17:ba:e6:0f:d0:a5:
34:13:e5:cd:41:5d:8d:69:79:07:e0:19:c9:63:da:cf:a6:e5:
ea:01:19:25:0b:68:26:19:f0:9a:31:a9:7f:f3:46:c1:93:be:
7c:b8:d7:66:0f:9e:4c:8b:88:f1:07:8b:59:ed:f3:c9:fc:40:
50:bd:a9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:46:19 2026 by rpki-client