Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft
File: dWQXildKJgm7bv8cxSG0U9dch9w.mft (raw, json)
Hash identifier: i+pbgnJo4xcZPM3/8q4NDQqvqspWqfAcVgJ4VLzEZLo=
Subject key identifier: 9A:31:18:FB:C3:14:FF:D7:24:DF:B7:D4:AA:20:6C:97:E2:F1:02:4B
Authority key identifier: 75:64:17:8A:57:4A:26:09:BB:6E:FF:1C:C5:21:B4:53:D7:5C:87:DC
Certificate issuer: /CN=7564178a574a2609bb6eff1cc521b453d75c87dc
Certificate serial: 019D98F4E379574BB11588569FC5CFFFBE5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWQXildKJgm7bv8cxSG0U9dch9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft
Manifest number: 1021
Signing time: Fri 17 Apr 2026 01:01:18 +0000
Manifest this update: Fri 17 Apr 2026 01:01:18 +0000
Manifest next update: Sat 18 Apr 2026 01:01:18 +0000
Files and hashes: 1: dWQXildKJgm7bv8cxSG0U9dch9w.crl (hash: ox9WAoytuaM08p/2EcmSLqXF720yGcMXluV9Q6cmRiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWQXildKJgm7bv8cxSG0U9dch9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:e3:79:57:4b:b1:15:88:56:9f:c5:cf:ff:be:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7564178a574a2609bb6eff1cc521b453d75c87dc
Validity
Not Before: Apr 17 01:01:18 2026 GMT
Not After : Apr 18 01:01:18 2026 GMT
Subject: CN=9a3118fbc314ffd724dfb7d4aa206c97e2f1024b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cf:94:43:52:29:78:74:53:22:88:c8:bf:00:
9a:6e:75:3a:a8:aa:4e:b3:52:8d:2e:bc:a2:91:af:
06:04:37:bf:17:ca:06:76:15:8f:5f:c6:7e:ea:47:
b3:18:a9:61:83:9f:fd:7a:a8:1e:da:48:3c:c7:26:
39:fa:5c:b6:25:3d:2a:c2:74:b3:f7:9b:48:a6:10:
14:48:0d:55:45:cd:8c:1f:45:bf:34:31:dc:59:a8:
b3:2b:79:17:9d:0c:16:74:d3:8a:5a:e2:16:7d:ab:
66:b7:79:91:48:87:64:7e:f6:8b:22:ac:85:66:ac:
d2:47:28:8b:ff:03:1b:ec:f8:82:7c:22:b8:df:59:
fe:49:fa:0c:1a:ec:9d:27:f3:61:84:a5:2f:e8:d9:
cc:06:cc:56:d9:f5:fc:88:cb:84:e3:05:8f:38:b8:
c5:d3:8f:21:0b:75:01:11:b7:c7:cf:a1:fc:9c:0a:
2a:92:01:53:c7:19:86:9f:1b:c2:3d:9c:2e:d7:9b:
ec:c8:26:a7:53:62:6a:9c:e3:27:aa:9c:91:69:96:
9e:5d:e5:f4:2e:21:ca:77:87:f0:4f:2f:60:76:74:
39:2f:eb:30:b2:74:be:30:8e:fe:69:99:00:56:e1:
a8:cc:e1:7b:87:70:90:97:a3:76:3d:fc:61:36:95:
07:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:31:18:FB:C3:14:FF:D7:24:DF:B7:D4:AA:20:6C:97:E2:F1:02:4B
X509v3 Authority Key Identifier:
keyid:75:64:17:8A:57:4A:26:09:BB:6E:FF:1C:C5:21:B4:53:D7:5C:87:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWQXildKJgm7bv8cxSG0U9dch9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:48:4f:ef:45:0c:69:c4:42:c5:1a:32:e5:3e:99:8d:4d:6e:
8f:eb:45:79:d1:b7:af:d4:56:2b:5c:b6:d9:d1:58:d1:3b:27:
97:d6:19:5b:1d:d2:35:af:dc:17:7d:b7:cb:bf:7b:b8:0c:95:
9a:cd:33:09:8d:e3:85:b8:57:43:af:9d:86:d8:ba:ec:73:00:
42:e1:cd:0d:a7:da:93:89:43:2d:f6:71:c0:1b:a0:2e:2d:bf:
11:cd:3f:fe:02:a5:4a:36:9e:f0:d2:8a:1e:a3:11:29:78:bf:
8b:e0:e0:36:68:18:6a:58:c3:6e:6d:dc:b3:35:f5:45:39:fe:
0e:00:c5:09:11:c6:26:f3:ad:8b:b5:d9:91:1f:eb:24:0f:a7:
aa:b0:de:a8:55:c2:a7:09:16:fc:87:04:01:d8:63:e1:50:97:
90:01:be:c5:68:1e:3c:bd:f4:a7:1a:09:af:02:1a:7a:66:a5:
d0:76:0f:8f:76:69:0b:e7:c7:4f:0b:e9:f8:2f:6c:9c:36:74:
6c:6e:d0:7f:47:7e:d3:4e:a8:a3:15:94:59:90:4a:42:e9:a0:
42:be:e8:4a:41:cf:a1:b7:0a:22:42:4e:d7:0a:00:ed:49:47:
f7:4c:ce:ea:b6:37:78:8a:dc:af:35:42:5d:9c:1e:b7:76:da:
b9:84:09:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:38:12 2026 by rpki-client