
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
File: DJ8RVKmhXVqDqamBenJL_FOdtZY.mft (raw, json)
Hash identifier: ZScyXKFirLkF2ZpIaA28x+R2kBjYNAzDV1yIjgDHf6o=
Subject key identifier: AB:D5:7A:05:5F:CE:58:F0:BE:03:BD:79:1B:44:3E:6D:8D:3C:E6:21
Authority key identifier: 0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96
Certificate issuer: /CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596
Certificate serial: 019D9C63699A1C9682D2B4A1C4EE46A271A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 17:00:53 +0000
Manifest this update: Fri 17 Apr 2026 17:00:53 +0000
Manifest next update: Sat 18 Apr 2026 17:00:53 +0000
Files and hashes: 1: 4qZtNptb8ER3904DdA6MFe8pZsU.roa (hash: Lxa0NTdMnJxLEjdaVFMPjQXrKW0qd4O0NLrjMIPI/ME=)
2: DJ8RVKmhXVqDqamBenJL_FOdtZY.crl (hash: EHYVIMPFXKx1jmeSvFOoT2ur0tOF/7LcVrfuJJCf9YY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:69:9a:1c:96:82:d2:b4:a1:c4:ee:46:a2:71:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596
Validity
Not Before: Apr 17 17:00:53 2026 GMT
Not After : Apr 18 17:00:53 2026 GMT
Subject: CN=abd57a055fce58f0be03bd791b443e6d8d3ce621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:14:e6:43:07:04:92:a3:36:22:f6:c1:50:7e:
79:c5:24:da:6c:ea:f3:b9:44:46:2c:16:3e:6e:d3:
69:86:72:8c:d0:07:da:99:de:2a:17:e3:4b:4d:5c:
b8:d7:40:7b:22:db:50:cb:27:29:9f:59:1b:3f:78:
cc:41:ad:e4:3d:eb:90:96:e2:24:df:87:61:78:da:
b3:0c:f8:21:d6:20:22:52:5e:8f:47:6e:a3:59:0f:
ee:29:62:58:86:00:9c:cf:91:21:49:02:bb:9b:a9:
0a:b5:a5:2a:04:b1:20:49:07:95:40:53:60:8a:61:
55:82:1c:a5:fa:7b:31:aa:ab:88:96:df:63:ad:39:
c9:a6:9e:ca:74:02:d9:25:65:8d:26:f5:69:52:94:
d5:3f:b8:69:2c:32:f5:de:fe:e4:5b:33:07:65:bd:
b0:49:b2:0a:eb:24:70:46:04:b0:57:de:36:86:5f:
50:ee:1f:63:33:06:c3:c4:ce:47:1d:2b:88:3f:95:
03:2d:b4:35:06:0a:ce:c0:da:ea:46:c2:3e:65:ad:
13:40:46:ac:0f:3a:fc:bb:17:05:12:e3:87:48:4c:
3f:7e:63:0a:56:45:55:c0:1a:39:36:f3:54:73:37:
a5:4a:6f:90:96:da:02:4c:95:17:0d:80:f5:e0:2b:
ae:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D5:7A:05:5F:CE:58:F0:BE:03:BD:79:1B:44:3E:6D:8D:3C:E6:21
X509v3 Authority Key Identifier:
keyid:0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:23:7e:77:42:bf:f7:11:45:7f:42:80:58:3d:22:77:ce:c4:
9c:3d:83:f0:fe:0e:8b:60:50:d9:6a:d2:b1:a2:f7:77:4d:dd:
e8:86:6d:ad:31:bd:78:6b:5c:8c:a4:e0:f5:9b:78:45:9d:3d:
36:23:17:6c:4d:ac:35:af:dd:a1:34:10:42:0d:e5:d5:8f:1a:
13:e2:e2:96:aa:0b:30:86:a7:4e:2a:d1:cf:57:88:b7:61:c1:
12:e0:ba:7b:cf:49:08:52:9c:75:4b:b7:6b:ba:db:6f:dc:42:
03:5f:89:bf:ce:36:09:44:38:73:a4:46:2d:0e:86:fd:73:68:
2a:a1:43:9f:7b:0e:d3:2a:57:fd:6a:45:84:a9:bf:39:6b:8d:
d3:37:00:d7:0f:11:4a:fe:04:90:3f:4e:b1:71:55:37:c8:21:
50:83:64:16:c7:1f:98:85:a7:0b:3b:b6:b7:3c:89:2b:68:a1:
06:66:60:21:29:ea:36:5c:d0:76:b4:78:3e:2d:f0:a4:4d:e6:
7f:32:c4:d1:cc:28:d4:3a:34:56:a0:64:d8:bf:19:48:7a:85:
3c:c4:3d:31:fc:4d:12:03:a2:93:40:fa:65:75:fe:cf:df:c2:
4d:bd:3b:fe:80:cb:ca:7a:de:a8:3f:de:63:69:ca:7d:c8:5e:
42:ac:6a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:04:59 2026 by rpki-client