Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
File: Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft (raw, json)
Hash identifier: npFWvydt03m9GkLdOktlh2bYJBqzPIPsWyn4vL0TVR4=
Subject key identifier: DE:98:2C:35:1E:79:15:4A:6E:5D:C8:82:3E:77:6F:7B:6E:69:90:47
Authority key identifier: 0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93
Certificate issuer: /CN=0ebd5f54905ee8e4d2830c6cf50f60d264201a93
Certificate serial: 019D9C63499C8FFCB31B6C29DA32BD4D625C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
Manifest number: 0D02
Signing time: Fri 17 Apr 2026 17:00:45 +0000
Manifest this update: Fri 17 Apr 2026 17:00:45 +0000
Manifest next update: Sat 18 Apr 2026 17:00:45 +0000
Files and hashes: 1: Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl (hash: WEUPr24y2PBgfXcsne+QKnI+oCt9ykZkqiyTtFV+UoA=)
2: DxAIf_G4bsCHSuF3mUqxe5pwn4w.roa (hash: QSb3YvRlfaog1Dj3+gzS3BBfYETY8z0tkMgWbxsJbyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:49:9c:8f:fc:b3:1b:6c:29:da:32:bd:4d:62:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ebd5f54905ee8e4d2830c6cf50f60d264201a93
Validity
Not Before: Apr 17 17:00:45 2026 GMT
Not After : Apr 18 17:00:45 2026 GMT
Subject: CN=de982c351e79154a6e5dc8823e776f7b6e699047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5f:12:b1:6d:cd:f1:be:c2:90:e1:f6:35:0a:
36:85:a1:21:be:e0:a5:aa:96:5a:12:4b:e3:6e:72:
7b:38:0e:6c:80:aa:a7:d5:55:1c:a5:81:ee:59:12:
a3:3b:71:2b:13:74:85:35:91:de:a1:4a:c1:75:21:
00:d1:67:b7:03:86:e5:b8:c7:ff:6b:53:76:2b:ca:
05:f9:8b:e3:8e:d1:5c:55:12:f1:de:1d:c6:10:26:
70:a8:7a:6c:0b:38:9b:0a:b1:10:c9:ba:fc:4f:01:
cd:4c:59:1d:11:02:f0:a9:c0:b0:0b:a4:c3:8b:14:
b0:f7:44:d7:ec:88:76:b4:64:6d:f9:9f:80:7a:7d:
ef:85:b8:a8:d4:ba:58:9c:db:2d:86:e8:15:e9:73:
39:fb:65:3c:41:7d:58:02:ab:05:f5:5e:b3:94:e3:
cd:b3:ee:ae:ed:c6:7e:70:e9:08:f4:07:f4:c6:3b:
86:86:44:81:6d:dd:0e:ee:9f:7d:d7:6e:36:18:cc:
e5:f8:2d:f6:3d:e8:78:b5:da:e3:a6:7e:ea:08:49:
5b:3f:ee:e8:0c:35:62:95:06:48:61:ff:23:2b:e2:
c0:69:3a:31:ba:00:82:07:0d:2b:4a:90:ec:c6:ca:
4a:1d:b8:25:93:ef:58:6c:f2:4b:85:2e:48:73:01:
9d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:98:2C:35:1E:79:15:4A:6E:5D:C8:82:3E:77:6F:7B:6E:69:90:47
X509v3 Authority Key Identifier:
keyid:0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:5e:03:85:91:84:22:71:5c:c4:0c:d0:03:9c:95:ca:11:03:
b2:e8:9b:46:35:b1:4c:19:61:14:f0:1c:d4:d9:93:77:a7:72:
84:b1:41:2f:dd:26:e2:59:1b:f8:2f:4a:12:36:69:93:af:42:
9c:c4:9b:3e:bb:e8:66:c3:f9:36:a7:85:70:e2:cd:db:5e:5d:
be:fa:03:e5:04:69:c5:c5:fc:50:c3:1c:36:a7:54:fd:c5:df:
ae:43:77:b8:d3:e9:6d:b6:d9:dd:90:84:b2:2b:a8:91:08:56:
f4:91:ec:57:cb:28:ac:2e:d7:0a:bf:89:5c:cf:3c:df:3a:5b:
12:74:f9:ea:36:a7:c5:c9:88:c5:83:53:98:cf:83:a8:95:4d:
a4:c8:d4:15:be:63:11:e7:7b:47:a0:ee:e4:10:72:2f:25:81:
6f:02:6b:6c:b6:0b:b2:d0:a7:4c:f8:bb:4b:52:f5:af:e3:cd:
22:3a:dd:9e:90:c8:c1:a1:de:b3:65:d4:f4:05:b4:fe:44:a5:
fd:b8:55:30:82:5a:14:fb:39:25:57:be:ac:f2:af:b7:95:5a:
27:73:62:e2:53:90:18:b9:3d:e6:96:00:40:6b:9e:2e:af:45:
eb:40:1c:0f:c6:23:4f:27:c7:64:48:6e:b9:34:ad:56:05:51:
2f:66:51:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:31:43 2026 by rpki-client