Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
File: Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft (raw, json)
Hash identifier: CDpMDYnSzIcdIw6sELJ8RHPVGJ+jI8zh+wgikpFeXv4=
Subject key identifier: 7D:DD:F9:E2:E2:AD:B1:DE:8C:99:45:8D:83:2E:B3:DE:29:44:E9:56
Authority key identifier: 0D:CD:A5:D0:60:BA:93:66:BB:43:25:82:8B:57:03:3B:EF:18:E3:C0
Certificate issuer: /CN=0dcda5d060ba9366bb4325828b57033bef18e3c0
Certificate serial: 019DA453734417C0F5C5D4070795C33474D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
Manifest number: 18C7
Signing time: Sun 19 Apr 2026 06:00:25 +0000
Manifest this update: Sun 19 Apr 2026 06:00:25 +0000
Manifest next update: Mon 20 Apr 2026 06:00:25 +0000
Files and hashes: 1: Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl (hash: 9wNj8LOodrJ9kayeW5/0g+BO29ZclenOUxzH712k+LQ=)
2: xOh8rPz0fCu_Rdtl4qREsx0riTQ.roa (hash: 51BbJDIoI2b7sQWeISHrMYtf3JjGMl3uwds3WWJ64wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:73:44:17:c0:f5:c5:d4:07:07:95:c3:34:74:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dcda5d060ba9366bb4325828b57033bef18e3c0
Validity
Not Before: Apr 19 06:00:25 2026 GMT
Not After : Apr 20 06:00:25 2026 GMT
Subject: CN=7dddf9e2e2adb1de8c99458d832eb3de2944e956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:34:6b:95:3c:fd:01:3b:77:80:b5:29:f4:16:
87:a1:e7:48:57:a7:06:80:1b:b1:03:d8:a8:66:19:
c0:6f:e4:0c:ab:c7:25:b1:7a:03:c0:88:a2:e7:08:
07:c2:a8:21:d5:72:e4:ac:0e:cb:13:6d:11:28:8c:
17:c6:48:26:c8:b4:c3:db:3c:54:06:ff:81:62:07:
9f:2b:da:b9:b6:a9:dc:1d:f2:13:11:f5:b5:e8:20:
ff:d9:22:36:68:83:e3:ce:0a:14:d1:84:3f:0b:78:
99:78:11:5c:7f:05:69:d5:17:41:fc:a3:5c:45:7e:
7d:38:5f:b0:92:73:c9:5e:e3:2f:54:74:80:54:83:
a4:98:5f:80:15:8f:2e:80:3d:d7:f7:31:91:9e:d3:
0c:04:d4:21:e6:c1:c3:96:d7:e0:5e:76:e7:b3:77:
38:14:f3:cf:7d:4c:87:9d:34:f0:cc:68:35:49:52:
5a:39:5e:75:27:92:e2:2f:d4:96:71:a8:af:6d:64:
00:d0:2d:be:44:a3:5d:a3:4e:81:ac:55:27:86:d5:
a7:c7:79:c6:04:cf:6c:31:44:04:b1:73:a0:cc:7c:
93:a0:0b:a5:93:e4:81:8e:92:8a:82:3b:b9:f1:45:
1e:aa:2f:23:4c:25:b0:67:07:ec:e4:13:57:99:73:
68:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DD:F9:E2:E2:AD:B1:DE:8C:99:45:8D:83:2E:B3:DE:29:44:E9:56
X509v3 Authority Key Identifier:
keyid:0D:CD:A5:D0:60:BA:93:66:BB:43:25:82:8B:57:03:3B:EF:18:E3:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d2:31:c0:56:68:1d:3f:18:21:92:97:8d:a7:c6:e9:84:af:
45:cb:d3:bc:1b:f6:ea:f1:40:75:5b:c6:97:b8:5a:43:75:64:
fc:5e:b5:b1:10:d3:52:76:08:69:4b:71:f1:03:d0:c5:6c:06:
1e:34:3a:79:03:61:97:3d:d5:a1:43:a2:db:e5:94:2b:16:d6:
2d:04:5b:e7:3d:e5:ad:d6:ee:ec:94:8e:4f:41:f4:3a:4d:e2:
02:7e:68:ff:89:52:b2:b5:a1:cf:25:e8:99:28:84:30:64:c4:
6b:a9:5a:08:76:e7:7a:05:bb:b8:d1:1a:3f:f1:b5:2d:97:51:
62:03:98:b1:96:d9:8b:6d:94:3b:3c:83:ff:45:97:bd:77:20:
9b:7b:fd:d6:6a:0d:a4:07:62:f9:5a:f8:86:35:e1:e6:3c:1a:
28:41:6a:92:c8:c3:a4:e2:71:cf:6d:10:ee:86:b4:5a:96:9c:
c5:2e:0b:86:68:99:5d:07:05:74:34:55:aa:45:6b:2f:db:d6:
70:d9:c8:c1:9f:5e:df:6e:90:e1:b6:06:47:ac:63:79:20:a7:
c7:b1:20:c8:62:26:dd:fe:74:fc:1b:9d:e4:6e:41:68:6b:81:
d8:07:4c:42:0b:e9:e6:2a:f2:19:b5:69:ff:80:3b:30:ac:e1:
f2:22:b5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:56:09 2026 by rpki-client