Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft
File: dWyevH_4dZ2KEG__rzNeo0b66lc.mft (raw, json)
Hash identifier: 3m6L4A3CexPYoGvZZdySS8tfo1JeIKXRCfv/gRr6XL0=
Subject key identifier: 44:8A:43:63:87:A2:16:43:78:44:1B:43:24:B1:0F:E7:97:3D:07:D6
Authority key identifier: 75:6C:9E:BC:7F:F8:75:9D:8A:10:6F:FF:AF:33:5E:A3:46:FA:EA:57
Certificate issuer: /CN=756c9ebc7ff8759d8a106fffaf335ea346faea57
Certificate serial: 019DA453DC2576EDF686D3D38327C6F45B69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft
Manifest number: 18C7
Signing time: Sun 19 Apr 2026 06:00:52 +0000
Manifest this update: Sun 19 Apr 2026 06:00:52 +0000
Manifest next update: Mon 20 Apr 2026 06:00:52 +0000
Files and hashes: 1: AVxiOXJDrisHfmZgr2aXeclmtwU.roa (hash: 4L7UFMqLp3HNu/xc7sjo2ZgReOCpLyizZvJkZ1OP7h0=)
2: dWyevH_4dZ2KEG__rzNeo0b66lc.crl (hash: zhxK77/Fk62f6KpO+OWPVtw2oSqoGHfj2LT7PG52Ofw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:dc:25:76:ed:f6:86:d3:d3:83:27:c6:f4:5b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756c9ebc7ff8759d8a106fffaf335ea346faea57
Validity
Not Before: Apr 19 06:00:52 2026 GMT
Not After : Apr 20 06:00:52 2026 GMT
Subject: CN=448a436387a2164378441b4324b10fe7973d07d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d1:88:c7:fd:cd:d0:15:96:64:50:c7:13:35:
4b:95:1b:49:92:d3:20:44:a7:34:b9:1d:d2:7f:fd:
83:d8:55:ad:7d:d3:f9:08:49:ab:b4:76:54:2e:14:
20:2e:b4:42:a4:9a:8a:bf:38:88:7a:da:a0:a5:c9:
7c:ac:36:ea:6f:e2:08:ef:8c:75:fb:61:bd:79:e0:
d1:12:4f:8b:30:bf:8f:5d:be:a8:66:99:a4:df:9f:
f1:20:00:2a:8d:14:a3:0f:57:50:8d:17:f5:56:28:
7f:97:ea:e3:d9:d0:76:58:c9:25:81:f3:3f:ff:a2:
08:46:0d:61:7f:c1:f5:9a:56:f8:22:4e:1b:f3:b6:
0e:8b:43:11:cf:f2:8a:b1:a5:06:40:2e:8d:22:98:
74:49:bf:1e:10:28:9f:3a:e2:46:79:d5:a0:63:31:
1e:0b:47:4d:b9:50:41:c5:ab:78:f0:98:d0:1e:6a:
4c:02:ab:16:28:59:5e:8e:d9:13:9d:be:12:d0:a7:
47:f4:5a:dd:f5:c1:75:b5:07:c0:33:49:53:ba:4f:
03:ac:e8:ad:d0:e0:fe:6d:eb:d3:4c:44:17:9f:8a:
b6:c1:79:e2:9c:48:86:ce:5e:c4:a0:1e:96:c8:df:
fd:76:8d:15:cb:b0:08:46:52:89:a6:e1:84:d7:f1:
58:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8A:43:63:87:A2:16:43:78:44:1B:43:24:B1:0F:E7:97:3D:07:D6
X509v3 Authority Key Identifier:
keyid:75:6C:9E:BC:7F:F8:75:9D:8A:10:6F:FF:AF:33:5E:A3:46:FA:EA:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:95:dd:74:c3:80:8a:a2:fa:5e:5b:83:2a:a9:9e:3f:08:47:
2d:f9:11:bc:c5:bb:c2:3a:8f:89:43:04:ea:cd:20:db:8e:78:
23:d1:48:b3:98:c2:cb:27:b6:87:1a:cc:7b:c4:1d:2e:00:5b:
85:de:5e:6c:c7:1c:13:d1:51:2e:bd:a5:ff:51:90:b3:43:2d:
66:9b:e3:cb:b7:a8:03:a1:9d:01:8f:2c:4b:69:99:9e:c5:7f:
24:9e:3a:2d:8e:3b:30:fd:dc:33:2b:a1:27:02:bc:6d:ed:4f:
5e:59:c0:2b:15:75:cb:6d:6c:3d:93:55:6a:93:96:9c:4e:87:
9d:bc:b1:e1:94:da:83:6e:9e:72:2a:ae:3a:17:95:da:8f:ac:
15:13:63:12:bf:02:0d:ab:c3:b8:35:0b:af:17:a1:6e:50:0a:
0c:0a:77:f6:74:78:12:ee:40:b0:3d:ce:6a:f9:99:2d:cc:e8:
7d:7f:a2:b4:5f:e7:27:7e:3b:e1:1d:12:af:61:c5:9c:f8:f6:
0f:51:e7:0f:b4:f4:97:db:40:ae:e1:82:15:47:af:2a:74:1c:
2f:36:e4:39:d9:2f:87:9e:4f:98:86:30:81:91:fc:61:a3:ea:
bd:2e:96:aa:14:bb:80:a0:66:9d:56:8b:e6:5f:92:b4:6e:3c:
eb:2b:6a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:59:59 2026 by rpki-client