Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.mft
File: DAHrsNsEzE1pGCs47A30sIkiJ40.mft (raw, json)
Hash identifier: sbJ/i/XQhksni0NqQrDEUCgjR6kM/TdDYtgN6Uu09B0=
Subject key identifier: B4:A9:43:10:3F:FB:EF:C4:D0:E6:BB:2B:E2:F5:E4:E3:BD:EB:EE:CD
Authority key identifier: 0C:01:EB:B0:DB:04:CC:4D:69:18:2B:38:EC:0D:F4:B0:89:22:27:8D
Certificate issuer: /CN=0c01ebb0db04cc4d69182b38ec0df4b08922278d
Certificate serial: 019DA29C30C3B4677B6AC95AAA3A9A1F9C37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAHrsNsEzE1pGCs47A30sIkiJ40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.mft
Manifest number: 18C1
Signing time: Sat 18 Apr 2026 22:00:38 +0000
Manifest this update: Sat 18 Apr 2026 22:00:38 +0000
Manifest next update: Sun 19 Apr 2026 22:00:38 +0000
Files and hashes: 1: DAHrsNsEzE1pGCs47A30sIkiJ40.crl (hash: Qa/a4sJJva8bmXSsc0ITXZbQ3iD7kre0S7fc9LmgS4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAHrsNsEzE1pGCs47A30sIkiJ40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:9c:30:c3:b4:67:7b:6a:c9:5a:aa:3a:9a:1f:9c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c01ebb0db04cc4d69182b38ec0df4b08922278d
Validity
Not Before: Apr 18 22:00:38 2026 GMT
Not After : Apr 19 22:00:38 2026 GMT
Subject: CN=b4a943103ffbefc4d0e6bb2be2f5e4e3bdebeecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4d:c5:cb:13:13:11:28:ee:23:28:1e:72:7c:
dc:37:34:a0:a0:65:bc:65:7f:2d:be:e9:d6:b0:e4:
2f:df:38:30:6f:84:93:c7:03:82:94:16:63:34:50:
dd:00:11:f9:ad:a6:3b:b2:dd:94:74:a7:b5:b7:eb:
fe:da:61:91:e3:cf:a5:19:be:a7:01:b9:fc:d9:47:
6f:e2:a6:d4:2e:de:c9:68:fe:36:1f:04:fe:5d:4f:
e5:aa:dd:2f:f1:6e:1f:56:9e:7e:25:32:54:07:d2:
6a:77:b3:16:7b:8d:0d:6e:2e:21:dc:66:45:7a:0d:
0f:67:0a:ec:bb:0f:59:6d:2d:6b:e6:4c:0b:f6:60:
42:42:14:a9:5d:c9:dc:26:81:c3:de:7d:0c:e3:c9:
1f:67:d8:04:93:c4:de:2f:ef:28:1d:0d:31:07:0b:
fe:f9:cb:33:02:f0:b2:31:c7:a2:2b:b1:ff:3f:a2:
af:f1:7f:de:5d:f6:5d:7a:1c:04:d5:e3:85:fe:6a:
64:0f:c2:c9:a7:48:7a:39:f0:36:06:41:a0:7d:c0:
4e:39:10:f1:5f:0f:df:80:e8:b1:f1:25:ed:d5:14:
04:09:0e:f3:94:15:c7:1a:48:1a:d0:70:53:2c:72:
e0:4c:09:ee:e2:ba:58:a1:a4:ba:35:e7:f2:81:45:
2e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A9:43:10:3F:FB:EF:C4:D0:E6:BB:2B:E2:F5:E4:E3:BD:EB:EE:CD
X509v3 Authority Key Identifier:
keyid:0C:01:EB:B0:DB:04:CC:4D:69:18:2B:38:EC:0D:F4:B0:89:22:27:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAHrsNsEzE1pGCs47A30sIkiJ40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:5e:38:76:49:a6:b4:6f:83:31:00:42:17:07:fa:3e:95:26:
72:f5:27:86:82:c6:82:19:2e:16:2a:ff:ad:ae:56:85:3e:75:
39:41:75:af:80:6b:6a:9b:d0:66:a5:52:47:35:4f:7f:39:cb:
64:67:25:df:de:47:4f:05:72:88:99:66:c6:33:07:05:32:e5:
0a:ad:05:5c:85:05:29:1f:3c:85:28:79:19:bc:49:2a:57:0b:
ee:58:30:37:5a:ea:8a:fa:7f:f6:e4:f1:86:67:1b:30:3e:18:
a8:42:5b:ec:12:74:68:21:c9:86:5e:30:9e:ee:69:5c:73:19:
c7:39:90:e3:dd:fb:1f:5e:23:ad:48:27:e2:ef:4e:76:55:7b:
24:da:29:8a:fa:63:41:c8:60:d3:b8:e9:a2:71:5b:d5:93:ae:
28:ad:cb:4d:1f:77:ab:e5:4d:99:dc:82:04:a8:d4:5d:d5:61:
ee:21:60:bd:3c:9e:bb:d8:f2:1d:6b:9b:8f:a0:40:12:06:a4:
23:51:9a:30:2b:dd:2d:6b:07:e9:98:81:cc:c2:27:dd:17:70:
8e:87:9f:0c:f0:e3:ee:08:f2:0d:7d:72:8a:97:6e:01:f8:c2:
af:8b:2f:85:39:84:1b:9c:8e:9c:90:bc:56:c1:c1:6b:b7:f7:
48:95:b7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:58:02 2026 by rpki-client