
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
File: dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft (raw, json)
Hash identifier: SaWk4iw+vQx1ILXC/JxiSlQBtHoGPRfSC0UlPsr1C5E=
Subject key identifier: 22:6D:49:73:2C:B7:28:5B:87:45:04:9B:D4:E3:F0:EF:8E:7A:F7:7E
Authority key identifier: 75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94
Certificate issuer: /CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94
Certificate serial: 019D99D03FE10C56545B705C4D2740651591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
Manifest number: 06D6
Signing time: Fri 17 Apr 2026 05:00:55 +0000
Manifest this update: Fri 17 Apr 2026 05:00:55 +0000
Manifest next update: Sat 18 Apr 2026 05:00:55 +0000
Files and hashes: 1: dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl (hash: w5oELpKwoe5Xyd+nKKg8GDCcwr0dc1Lk/uh/P/F5t9c=)
2: q19_s0i5IT2dybooIUZ7ijzcNXc.roa (hash: mA9ozpHHNX60WKdi28wKCibVutGMEXZy4W8BO6NWgto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:3f:e1:0c:56:54:5b:70:5c:4d:27:40:65:15:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94
Validity
Not Before: Apr 17 05:00:55 2026 GMT
Not After : Apr 18 05:00:55 2026 GMT
Subject: CN=226d49732cb7285b8745049bd4e3f0ef8e7af77e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:aa:40:2b:05:58:61:35:54:a3:ca:95:be:b3:
36:c6:8f:44:ed:ca:04:04:61:16:f5:9f:49:8a:3b:
a0:7f:c9:18:8d:35:b8:93:95:c6:6c:a6:a9:96:9c:
66:a9:45:4d:84:f3:26:82:67:77:52:6c:34:49:e6:
96:67:e8:4f:d8:2e:ae:5d:71:c5:4a:f1:5e:f3:77:
64:d4:d2:c3:62:bd:9d:df:6f:10:67:31:a7:72:72:
a3:f8:12:d4:67:84:dd:5d:b9:60:1f:9a:49:9a:6f:
89:c7:8a:21:23:b1:22:e2:10:1c:46:a0:b0:aa:39:
47:aa:9f:ea:b7:16:4f:a2:bb:c8:82:bc:56:77:f2:
d3:3e:a9:c1:8c:44:b8:dc:fd:75:e6:71:c8:c9:17:
b4:96:bf:3d:a7:bb:8c:77:67:cf:7a:8e:d2:b0:77:
55:54:57:10:7f:3e:78:26:f7:c6:56:ba:2e:d3:d4:
e2:5c:e7:39:48:2a:76:d8:48:2d:06:5d:5e:e7:51:
ba:e1:e5:0f:08:6b:8f:0e:5e:6f:a2:91:9a:5b:45:
4b:f4:e5:2a:76:1d:8a:df:a1:d7:d7:1a:1c:23:8f:
01:1f:52:50:34:15:16:d4:7f:b0:be:19:d2:fa:8d:
07:dc:d2:f2:71:c2:f8:5c:20:6f:ca:a8:13:75:9a:
85:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6D:49:73:2C:B7:28:5B:87:45:04:9B:D4:E3:F0:EF:8E:7A:F7:7E
X509v3 Authority Key Identifier:
keyid:75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:44:19:1a:e7:52:ee:4b:30:ea:a2:c1:53:06:62:b8:34:75:
61:4a:64:4e:e9:b3:05:bf:15:08:ac:6a:6d:77:76:83:59:66:
e8:4a:4b:c3:2b:d6:c4:e7:a0:68:e3:62:fb:83:5e:a7:c7:20:
e2:08:2f:07:89:eb:35:a0:b3:d7:d3:16:89:a4:be:22:c7:96:
6c:05:09:5e:8d:a6:6f:d7:e3:8f:26:5f:82:26:25:b9:a7:5f:
4e:0b:e1:d0:2f:30:7d:26:7f:41:83:fe:8f:d7:b9:b8:d2:29:
2a:a3:49:41:08:57:8e:7b:c3:47:67:ca:d1:4b:e2:d6:1e:ea:
73:23:93:07:65:a6:24:c9:0d:0c:68:70:98:6c:db:89:64:04:
de:21:32:1d:4f:47:c7:bc:21:9d:ad:80:d3:64:1e:64:f0:36:
2e:17:3f:b3:63:16:ed:4d:55:fa:52:a8:14:db:fb:d1:64:ba:
37:7c:6c:fd:f7:1b:a1:88:13:7e:10:2e:91:2d:69:18:7f:45:
8b:5c:2b:27:55:0f:f5:0c:d9:a1:dc:17:df:15:b4:6e:61:f0:
47:cd:89:15:ef:68:82:bf:b6:40:32:ad:41:16:69:4f:95:38:
53:a8:72:43:1f:02:aa:14:e9:72:4f:1c:65:dc:d8:e8:e8:9b:
c4:4d:8f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:05:54 2026 by rpki-client