Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
File: _dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft (raw, json)
Hash identifier: YndQTKX7mm60ahLx7CyWycuVMPeRR6z9CYAhj9Wyauc=
Subject key identifier: 3A:DF:7A:4F:80:23:57:AB:0F:18:39:C2:C3:31:CB:47:58:B0:90:77
Authority key identifier: FD:D2:B3:62:06:43:9B:BC:E1:5B:36:3F:09:EE:FF:1D:73:8C:EC:C7
Certificate issuer: /CN=fdd2b36206439bbce15b363f09eeff1d738cecc7
Certificate serial: 019D98F46282C0CA769D44C80F9176156E0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
Manifest number: 18D6
Signing time: Fri 17 Apr 2026 01:00:45 +0000
Manifest this update: Fri 17 Apr 2026 01:00:45 +0000
Manifest next update: Sat 18 Apr 2026 01:00:45 +0000
Files and hashes: 1: X6yij2F2wCS9SNyg0X2W1evj5UY.roa (hash: NA6kYJC1nLmQ9K7t2tSV4/j0mb+VEM1Maf4SLgSq/gU=)
2: _dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl (hash: 9NwFLCNQqccYjJ5PSE4+11iq2ntV5iCcXdRXRB5fCYM=)
3: cMI6xFuuN3kOOUkjFl-dw7vQpxk.roa (hash: QMhkNofXWtqJpzrnd1DVBgskNLYUlXU/ZSYppiY4PcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:62:82:c0:ca:76:9d:44:c8:0f:91:76:15:6e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd2b36206439bbce15b363f09eeff1d738cecc7
Validity
Not Before: Apr 17 01:00:45 2026 GMT
Not After : Apr 18 01:00:45 2026 GMT
Subject: CN=3adf7a4f802357ab0f1839c2c331cb4758b09077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d0:62:fc:f7:28:5e:0a:f4:34:f7:e6:ab:33:
e4:af:91:31:05:92:c1:6d:b1:cf:61:95:a9:90:a9:
45:22:56:fb:a0:92:99:d5:82:c5:9c:87:67:ae:16:
ef:60:0b:a3:58:39:0a:7a:5c:98:e5:3d:61:86:24:
7f:ce:ac:5b:d1:48:37:78:d1:ad:d6:df:5a:ea:a4:
58:01:b1:72:2a:39:07:85:5b:83:53:64:37:c2:04:
04:88:ab:a1:3f:4b:7a:0e:e6:32:0d:19:29:d4:cc:
56:41:42:26:31:66:2b:74:38:99:99:9d:d4:98:2d:
0e:05:6c:9a:6b:3e:02:2c:9d:c7:0d:9e:5b:65:1e:
a3:82:d5:57:06:7c:00:45:fa:c3:f1:e0:60:7b:02:
45:3b:b4:22:d3:01:34:ac:a2:a7:64:61:42:2a:15:
7b:c8:51:9d:1a:6f:b8:b6:24:8c:68:5a:9d:47:f1:
77:60:8d:d7:7a:9c:a0:b8:06:8c:56:1f:83:62:fc:
df:3f:fd:f9:85:cd:14:23:40:93:75:df:11:d0:2c:
bc:cb:b6:e7:66:40:6e:57:4b:18:cf:fc:3b:3a:54:
0c:0f:3a:f8:7e:b7:56:39:7d:14:98:74:aa:61:37:
1b:aa:e7:c5:02:2d:fb:4f:27:20:17:bc:4e:fe:d0:
70:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DF:7A:4F:80:23:57:AB:0F:18:39:C2:C3:31:CB:47:58:B0:90:77
X509v3 Authority Key Identifier:
keyid:FD:D2:B3:62:06:43:9B:BC:E1:5B:36:3F:09:EE:FF:1D:73:8C:EC:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:88:9a:d4:f1:76:e4:21:9d:44:9a:4b:a4:de:c4:ee:bd:ac:
59:b3:9d:3c:e4:c8:cd:53:70:86:1b:6f:c8:7f:51:df:ac:c5:
d7:ed:86:95:44:c9:7b:d4:4a:f7:0c:5f:3b:23:fa:26:8d:42:
f9:0d:bd:b0:92:11:66:95:d3:78:69:7a:bb:0f:16:6b:77:3a:
59:99:d3:de:24:9b:91:f5:9b:01:ce:2e:e9:4b:6b:13:4a:d9:
ff:49:fc:96:11:42:e9:3b:aa:67:24:42:34:6a:b0:df:8a:99:
be:82:2b:5d:68:68:3f:f1:49:3b:18:06:ec:f6:ce:aa:c1:75:
c1:92:58:be:30:91:9b:7e:41:f1:d1:c8:b2:da:94:16:bc:2d:
13:d9:e7:dd:9f:dd:98:b6:99:be:39:a4:79:f5:26:6e:60:36:
b7:c4:1f:17:57:ba:58:43:a8:70:05:73:e8:bd:44:30:f8:1c:
14:37:b2:23:1d:64:fd:a0:16:13:ab:07:c4:5c:5e:b9:b8:b7:
9a:6e:67:28:73:09:f5:7e:b2:25:16:80:9d:a7:eb:28:db:80:
7c:69:c1:ee:f9:45:fe:e3:30:a3:c5:96:92:0d:b7:7c:ff:da:
5b:3e:05:39:77:31:f2:6c:9f:d8:40:9d:b7:16:31:d3:99:6c:
27:29:7c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:30:51 2026 by rpki-client