Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
File: dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft (raw, json)
Hash identifier: 4gq0u688qk3Cc7sE9dbrA1/Wv5HFWO6eG2jnTXO9lKI=
Subject key identifier: 48:DE:FB:9B:85:85:5B:36:F1:B6:03:F8:1B:6E:B2:36:D2:88:53:17
Authority key identifier: 74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
Certificate issuer: /CN=7450810f13df8d9019f157c36fbd0f6db9862992
Certificate serial: 019D99628720123E727F609EF2CD154884EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 03:01:04 +0000
Manifest this update: Fri 17 Apr 2026 03:01:04 +0000
Manifest next update: Sat 18 Apr 2026 03:01:04 +0000
Files and hashes: 1: BzyRKVh8G6MxV92pq1WYXw5su3Y.asa (hash: 3hX1G/8KfCcJykl9PaVXJ9wMH1P2QICFRRtGllgYDUo=)
2: dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl (hash: 5Ca4luklj/eIKW1t8/jn7pVSEagxTePhxnqt3qIOHvY=)
3: yV3n7Of-XfxujJs_oZpOk9T5zxc.roa (hash: RWU+lLoWMG+Uf+PGBYW1EPxQGP3cMIviVCgLyu7si9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:87:20:12:3e:72:7f:60:9e:f2:cd:15:48:84:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7450810f13df8d9019f157c36fbd0f6db9862992
Validity
Not Before: Apr 17 03:01:04 2026 GMT
Not After : Apr 18 03:01:04 2026 GMT
Subject: CN=48defb9b85855b36f1b603f81b6eb236d2885317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fb:aa:2b:c1:fc:fb:12:3f:b0:6e:41:a8:d1:
48:d2:51:d8:72:8e:4e:1e:61:66:ac:0b:95:87:e2:
07:9e:2b:20:c9:b9:f7:ca:a7:ea:f3:4f:2b:4b:3f:
33:42:3d:06:fd:fb:3b:01:01:f4:d0:0f:62:56:f5:
84:6d:ba:d5:1c:be:77:df:84:d7:db:f1:1e:a3:57:
1e:4f:7c:a9:9b:2d:90:08:53:9e:b1:56:fe:e8:e3:
cb:cc:c2:d0:33:01:c0:06:9c:b8:cd:0d:15:19:d8:
fc:eb:f9:c4:7f:46:38:2f:16:fa:27:d5:8a:ce:20:
be:a3:ee:f7:f3:90:06:69:58:ef:57:ee:d8:4c:18:
9f:c2:da:02:f6:01:fc:f2:e0:69:d2:c8:b3:76:d1:
fd:2a:4c:a5:22:76:2d:33:ba:4d:7f:31:98:a8:c7:
6d:3c:57:b7:e6:99:0c:a7:76:6b:b4:ae:47:4c:03:
9d:93:94:6c:08:a4:14:d6:60:62:98:9d:05:49:57:
f0:af:0b:a1:44:88:54:c1:62:ae:7b:22:94:38:3f:
dd:71:94:46:06:6f:41:f3:39:ca:7d:dc:99:f7:43:
5c:58:e8:90:b9:70:45:d4:27:c4:7f:6e:12:41:d5:
16:f1:41:68:13:25:31:86:95:bb:49:63:11:e0:2f:
ad:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DE:FB:9B:85:85:5B:36:F1:B6:03:F8:1B:6E:B2:36:D2:88:53:17
X509v3 Authority Key Identifier:
keyid:74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:43:ec:4f:b6:2f:9c:58:03:d6:9f:db:06:cb:02:21:65:2a:
bb:d7:a5:ee:66:da:38:03:36:7e:5f:a0:bb:23:63:0e:4a:04:
10:d1:22:5a:15:99:50:e0:5d:21:ae:02:88:42:da:13:1f:88:
09:ff:c2:00:fa:a2:6c:0d:66:6d:57:f7:88:a6:06:d3:61:de:
52:b1:0d:d2:b0:e2:45:76:f0:13:d5:29:32:3c:4f:f0:2e:bd:
b0:26:a9:0d:84:00:b9:a8:34:d4:ee:cb:20:94:e8:73:87:ec:
ce:ed:f5:67:c4:48:d6:e7:26:49:e5:04:83:4e:db:5f:2f:10:
b5:2d:9d:ee:d7:0b:f2:c1:db:fa:40:f0:6f:0f:00:d3:98:8c:
23:e6:6f:b9:8e:b1:bb:e4:bc:69:1f:ab:dd:d7:02:e8:77:61:
88:70:21:e4:a2:ed:01:e3:bd:fa:fe:ce:99:6e:e4:87:12:eb:
8e:c1:a0:2e:8f:0d:29:dd:f0:70:15:8f:9b:86:71:bc:7c:3a:
54:d1:9a:d8:9f:26:51:c9:23:15:60:ab:47:9f:44:c1:6c:89:
d0:3b:5f:d3:eb:92:b1:a0:95:c0:ad:db:43:13:98:9b:70:5a:
35:66:01:08:82:91:1b:21:dc:87:d4:7f:4c:41:89:4b:e6:43:
3b:4a:25:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:04:04 2026 by rpki-client