Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
File: diY1mUnOzyQYxaLbIayrhd2Rk9g.mft (raw, json)
Hash identifier: PkEAbA6XS6csf6zYexQ4mgBMVTTSDBggmji8nrrtlXo=
Subject key identifier: BD:01:3B:F1:1C:91:87:90:E3:20:0A:D6:2C:52:91:16:DE:B0:B4:2F
Authority key identifier: 76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8
Certificate issuer: /CN=7626359949cecf2418c5a2db21acab85dd9193d8
Certificate serial: 019D996310DEE67C4DDD2CA3299FA360A38E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 03:01:39 +0000
Manifest this update: Fri 17 Apr 2026 03:01:39 +0000
Manifest next update: Sat 18 Apr 2026 03:01:39 +0000
Files and hashes: 1: Ra_O1tJPqxceyq_rAhiwFMOrKjw.roa (hash: Rmyhdy6TeiiXlYpWyq2MVfXDcJgMeLMhA0axqCrhBSg=)
2: diY1mUnOzyQYxaLbIayrhd2Rk9g.crl (hash: OFoRn6PZNylRL+aJxxOstdFISL84qQjDoCNiLsDAaK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:63:10:de:e6:7c:4d:dd:2c:a3:29:9f:a3:60:a3:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7626359949cecf2418c5a2db21acab85dd9193d8
Validity
Not Before: Apr 17 03:01:39 2026 GMT
Not After : Apr 18 03:01:39 2026 GMT
Subject: CN=bd013bf11c918790e3200ad62c529116deb0b42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ad:bc:a4:1f:75:b5:e0:a0:b9:f1:61:ea:9e:
bd:41:20:d2:67:ea:65:52:19:87:c7:36:01:26:41:
fa:ec:04:50:11:a9:72:c0:84:69:c8:94:dd:05:7d:
2e:e4:92:90:93:3a:f6:f4:ab:0d:d1:b7:ca:e3:b1:
4f:53:6a:a3:0f:99:a6:86:dd:74:79:8b:51:13:4f:
46:8a:f6:21:d5:dc:f2:1e:c1:c3:ba:3f:f4:ce:2f:
4f:24:77:52:6a:24:4e:85:db:e0:b1:83:cb:47:c3:
3e:95:53:79:54:9d:5c:1d:02:f7:77:3d:66:ec:80:
04:9e:c0:cf:cf:8c:fe:25:f6:5d:44:c3:81:7c:f2:
fa:82:fd:f7:01:8f:40:a7:ce:e2:e0:d0:d3:a1:6d:
7b:e1:5c:f9:17:e9:d6:ba:7d:9d:85:5b:85:8e:cf:
a4:36:7f:b7:92:ed:c7:8d:94:21:95:95:47:9f:89:
4b:13:4f:c8:d8:ef:e5:2d:75:3b:c7:62:61:32:91:
dc:49:86:a4:ae:5f:49:d8:6d:46:e1:01:06:19:d2:
f7:d5:4d:79:79:97:89:d8:14:ee:b1:8a:f7:d3:53:
c3:7c:48:f0:9f:28:f1:08:c8:68:d1:a9:28:b9:aa:
31:27:2b:9c:e8:49:24:32:93:20:e9:a5:f6:48:33:
9b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:01:3B:F1:1C:91:87:90:E3:20:0A:D6:2C:52:91:16:DE:B0:B4:2F
X509v3 Authority Key Identifier:
keyid:76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:da:af:95:ac:fb:89:bd:8b:31:d3:18:19:9a:e1:56:f4:8d:
07:72:32:de:f9:d1:d3:02:61:36:c9:fd:8b:e3:94:f0:96:44:
3e:99:1e:fb:43:cc:cc:e2:db:6b:c8:9c:a9:a3:1c:56:43:11:
6b:f4:59:b1:fe:78:48:4e:33:55:46:01:69:51:ed:9a:5e:5b:
e1:13:49:34:22:64:06:8c:d0:12:7e:03:ab:4d:ff:6d:10:31:
1a:ab:b3:1e:3a:c8:90:5c:7c:8b:b7:d4:6a:3a:59:9f:fe:4a:
f1:65:4c:8a:d4:b8:c4:ae:cc:19:9f:a8:ba:33:19:60:ba:48:
e2:dd:e0:9a:81:88:9c:71:9e:a3:2c:c8:06:1c:17:5b:7c:55:
c8:19:aa:b0:13:8e:36:89:04:c9:ae:cf:b0:f9:32:19:93:6d:
15:ca:a6:00:46:4f:d7:17:39:c7:8c:80:8d:7f:33:0d:d6:34:
cb:66:77:46:ce:37:63:16:14:06:38:5b:ec:35:25:8e:a4:84:
8b:81:b8:50:2e:5d:fb:e5:9b:54:11:6a:b7:d9:3a:eb:6f:71:
70:4d:2f:af:c2:30:ac:84:52:63:6e:81:13:2a:f5:d0:0f:64:
38:3a:35:c8:2f:fd:7b:f2:61:14:5f:3b:ed:97:c9:70:24:c1:
6e:73:a9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:39:46 2026 by rpki-client