Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft
File: dIZPUCPsYmPvnxb5AYf18oBh0RU.mft (raw, json)
Hash identifier: 7ODIAoBDmkti+WOQW7d7+Dh4fh0Xur4iCvoEh8H0/q4=
Subject key identifier: B9:F9:EB:0E:A4:3C:43:45:1A:D1:FE:08:27:4A:C7:45:89:AA:94:FE
Authority key identifier: 74:86:4F:50:23:EC:62:63:EF:9F:16:F9:01:87:F5:F2:80:61:D1:15
Certificate issuer: /CN=74864f5023ec6263ef9f16f90187f5f28061d115
Certificate serial: 019D9A06F352C0DF4B2B62EB50C3B6996D2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft
Manifest number: 0EAF
Signing time: Fri 17 Apr 2026 06:00:39 +0000
Manifest this update: Fri 17 Apr 2026 06:00:39 +0000
Manifest next update: Sat 18 Apr 2026 06:00:39 +0000
Files and hashes: 1: Tk-54jiMCl3pRob8Ol0GyqafcTo.roa (hash: ogGPBYJpK3ICA3MgJGI7aFtZAb3lcTgOcAes1dNC4Q8=)
2: dIZPUCPsYmPvnxb5AYf18oBh0RU.crl (hash: PPC4Da5ifrkiqmPXNxq9MKYZVp3y4SbrqNyLAy32UGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:f3:52:c0:df:4b:2b:62:eb:50:c3:b6:99:6d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74864f5023ec6263ef9f16f90187f5f28061d115
Validity
Not Before: Apr 17 06:00:39 2026 GMT
Not After : Apr 18 06:00:39 2026 GMT
Subject: CN=b9f9eb0ea43c43451ad1fe08274ac74589aa94fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:78:3b:10:11:dc:7c:56:a0:e3:db:c6:69:f3:
ba:ed:49:5d:60:7e:27:99:f6:78:28:85:b4:93:5e:
e1:13:91:85:5d:e4:c3:b9:8f:bd:ac:70:0f:5f:cd:
c4:1f:62:38:75:0a:c1:58:8d:fe:2b:21:c1:df:e5:
e1:30:75:34:23:9c:a4:3e:79:fa:a4:8c:8d:8f:da:
eb:1a:0d:00:be:ea:35:30:bc:c1:e5:c2:5b:52:10:
4d:b2:ed:82:40:55:74:60:45:57:bc:f7:de:47:f2:
a0:66:12:1d:96:88:9c:24:92:c1:89:82:8c:da:c2:
b4:0c:26:d8:3e:62:bd:1a:66:07:34:c9:4f:c0:b3:
65:48:45:ce:26:8c:ac:22:1d:91:36:da:af:e9:ff:
5d:da:5b:a2:43:84:5d:ef:cc:7d:c1:41:1c:cf:72:
fa:cb:ed:80:56:61:9a:a4:2f:89:24:9f:bb:65:e7:
84:40:ec:b1:33:31:c0:fd:6b:81:22:b0:6d:b9:46:
00:0e:95:23:5d:ee:77:cc:fd:59:6a:39:00:41:4d:
52:89:3a:fd:1e:d5:b9:82:f2:a1:16:bc:fe:b1:2a:
c6:d6:34:ba:d4:78:10:38:69:b5:95:df:08:0c:b4:
03:b9:fa:0b:da:3c:8b:6c:8b:79:bd:15:bf:9a:fc:
ef:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F9:EB:0E:A4:3C:43:45:1A:D1:FE:08:27:4A:C7:45:89:AA:94:FE
X509v3 Authority Key Identifier:
keyid:74:86:4F:50:23:EC:62:63:EF:9F:16:F9:01:87:F5:F2:80:61:D1:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:f2:a9:9e:48:33:89:dd:40:14:71:a9:e0:d2:43:69:2d:bc:
53:85:83:c5:ec:62:94:e9:5a:ba:be:ed:04:fb:ea:10:a7:d5:
04:25:b6:d0:b9:cb:10:0d:9c:be:50:57:47:72:26:84:6b:af:
73:34:1b:38:fb:44:23:92:ed:a3:c9:68:24:a5:74:ed:5a:23:
62:7b:fc:76:c3:bd:73:c3:88:f7:1a:88:b6:ae:96:b6:4e:dd:
b7:10:b1:3b:b9:48:6d:85:fe:ee:8a:9c:31:bb:6f:3b:be:b6:
37:3b:22:45:88:73:98:5e:6a:f6:de:e6:b0:da:07:02:33:3b:
9f:43:3a:19:70:7a:66:4b:e6:44:0b:5c:6a:6c:3f:13:38:7c:
68:9c:25:d3:ee:6f:ee:56:d3:83:f3:af:4c:fb:2a:99:82:52:
36:71:5f:4d:d7:df:13:35:4b:b1:ee:91:cd:c6:62:6f:da:75:
93:ad:90:1f:fe:d5:e4:63:2c:ff:da:b0:2b:08:b6:f7:ac:5f:
47:37:0c:36:8d:86:98:ee:dd:06:f2:d0:6d:31:93:b5:2f:bc:
f4:07:4b:47:2b:b8:f4:3e:14:af:6c:17:88:c1:25:2d:47:34:
6e:dd:ac:0f:c2:26:1d:94:fe:1e:44:9b:5a:c8:ba:f3:a6:57:
88:dd:34:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:05:28 2026 by rpki-client