Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
File: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft (raw, json)
Hash identifier: vKj5Z8TUoHS0qJCf2ao1pLrWjLaSgU+oKAgGpyw4IhI=
Subject key identifier: 36:83:81:6C:23:54:4D:C4:9A:9C:1C:20:CE:16:99:63:55:B9:41:CD
Authority key identifier: 0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
Certificate issuer: /CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Certificate serial: 019EBF5A690BF3D4081FA291FF978590111D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
Manifest number: 1838
Signing time: Sat 13 Jun 2026 05:00:33 +0000
Manifest this update: Sat 13 Jun 2026 05:00:33 +0000
Manifest next update: Sun 14 Jun 2026 05:00:33 +0000
Files and hashes: 1: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl (hash: qtaO0eAwUozMDHLWLZPvtEu+zLzboqWW9ETNMi8PRek=)
2: gM2StpLZVmvayJcUvILE4XZXuLw.roa (hash: KQMOAlvZrGCc1yTty62TEDax5SGCNvxrkbvizSS1atc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:69:0b:f3:d4:08:1f:a2:91:ff:97:85:90:11:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Validity
Not Before: Jun 13 05:00:33 2026 GMT
Not After : Jun 14 05:00:33 2026 GMT
Subject: CN=3683816c23544dc49a9c1c20ce16996355b941cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:75:3d:96:09:43:6e:3a:79:99:f2:c2:6b:
86:1d:49:2e:d5:f0:de:b3:df:a5:13:a5:cb:21:03:
b2:eb:6d:7f:32:d9:aa:ea:86:ca:00:9e:23:b9:0d:
27:06:fd:d1:bf:e9:9a:b8:6c:53:b6:bf:b7:42:7d:
3a:5c:19:59:60:f5:73:1b:2a:b4:d4:a7:44:be:b1:
43:6b:85:f5:b4:91:7f:71:f4:80:c2:eb:6a:1d:cf:
0a:9b:6a:66:9b:52:f1:b7:63:01:1e:2c:9f:67:b6:
da:c1:a8:e6:2a:ad:93:b9:c2:74:5d:82:32:3d:04:
5c:82:13:50:73:65:6f:52:93:0f:c6:05:e0:f1:b7:
ee:8c:60:ba:6e:a8:c4:91:a1:21:33:06:38:81:10:
b8:96:4a:1c:92:e3:9c:83:2e:72:74:2b:96:90:51:
21:9b:34:44:54:8d:23:70:88:75:21:ec:06:22:1d:
21:93:f0:93:0a:5f:32:d9:3f:51:ab:9a:33:a9:4e:
07:f0:a0:81:da:49:7d:1b:71:19:e2:c9:09:55:32:
3e:3b:ab:d2:e5:31:7a:a5:5b:a6:17:0c:2b:1b:16:
93:3f:79:d7:81:99:66:8a:21:e5:64:da:e6:42:3c:
ba:b7:10:29:ff:01:bb:57:e3:83:99:17:07:09:d0:
e9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:83:81:6C:23:54:4D:C4:9A:9C:1C:20:CE:16:99:63:55:B9:41:CD
X509v3 Authority Key Identifier:
keyid:0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:d0:be:3d:4b:c4:9b:49:82:03:95:13:e1:c4:76:92:2d:19:
7a:0c:12:d1:f7:22:cb:c8:75:89:a8:49:64:d6:77:8d:76:04:
6f:46:db:8f:a0:c3:1a:76:06:06:93:cc:2f:52:71:6f:83:a8:
bb:30:8f:cb:7c:fe:79:22:d4:7a:06:a5:ba:35:96:56:17:92:
4c:47:65:98:54:57:97:43:eb:3e:21:22:05:63:7a:db:b7:74:
f6:b9:b8:72:ea:b7:15:af:d4:d3:b3:19:f2:99:5b:65:2b:fa:
1b:2e:36:69:64:bc:db:f8:05:9e:94:63:e3:98:a3:b3:70:b7:
e8:c0:28:4a:d3:ea:3e:06:7f:47:7c:f1:6f:ab:15:45:ca:9e:
77:b9:96:40:64:c4:6c:91:86:1d:c3:42:ed:8d:e4:30:19:5f:
f9:90:4f:e4:ff:14:0a:20:aa:5c:2f:65:c9:a4:90:98:1a:65:
29:cf:1a:54:b0:f2:6d:e6:a5:ba:6a:06:b3:4e:e9:6e:aa:88:
39:c9:b1:44:ce:38:cd:1f:49:91:ee:f8:c3:af:89:d2:8b:e8:
c9:67:f3:4c:2b:f0:e9:69:0e:e3:e5:04:34:9e:48:9b:ed:68:
a1:54:9b:e3:45:59:41:1f:b1:2e:2b:9e:db:7e:ac:ce:ce:0d:
0c:a4:c3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:05:17 2026 by rpki-client