Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft
File: DVX6KmKDfbmv5EI-TBGelJmyG0M.mft (raw, json)
Hash identifier: NH7i+FHv8WwUgNjzOc4C12nvOShsAxYRrYlSuDNHJMc=
Subject key identifier: A2:AC:13:03:AA:D4:CB:7D:B8:5B:8F:11:08:34:22:19:84:1E:83:DE
Authority key identifier: 0D:55:FA:2A:62:83:7D:B9:AF:E4:42:3E:4C:11:9E:94:99:B2:1B:43
Certificate issuer: /CN=0d55fa2a62837db9afe4423e4c119e9499b21b43
Certificate serial: 019D9B19BD2FD93630D23D64C620F1047255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DVX6KmKDfbmv5EI-TBGelJmyG0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft
Manifest number: 0A2D
Signing time: Fri 17 Apr 2026 11:00:48 +0000
Manifest this update: Fri 17 Apr 2026 11:00:48 +0000
Manifest next update: Sat 18 Apr 2026 11:00:48 +0000
Files and hashes: 1: DVX6KmKDfbmv5EI-TBGelJmyG0M.crl (hash: 3ogip/4AB8sSwKj3O4Clv6gYZ6w5v+vDO7j8DLGHVd4=)
2: HIeW7jOEPndBeoT23uEj81ZTZBg.roa (hash: JJnVSxNA1ixWdqqkWmZ7PhO+qpLJouZei+s+CRfBSYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DVX6KmKDfbmv5EI-TBGelJmyG0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:bd:2f:d9:36:30:d2:3d:64:c6:20:f1:04:72:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d55fa2a62837db9afe4423e4c119e9499b21b43
Validity
Not Before: Apr 17 11:00:48 2026 GMT
Not After : Apr 18 11:00:48 2026 GMT
Subject: CN=a2ac1303aad4cb7db85b8f1108342219841e83de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:df:8b:f5:56:ce:be:40:b6:a7:cf:dc:3a:ca:
cc:6c:fb:5f:a3:48:fa:38:b2:60:43:9d:3a:74:53:
79:64:e8:da:9b:84:01:bf:6d:f3:8e:02:ca:75:c7:
97:7c:a5:0b:c6:95:41:b2:e9:1c:85:e0:a9:4b:98:
db:a3:ea:2f:a4:08:eb:96:c7:67:b4:3e:55:09:3d:
2a:7a:14:0b:92:83:bf:d1:58:9b:d2:79:90:3f:1a:
5c:8b:04:ec:df:81:1b:67:b7:97:6f:42:1f:c9:07:
5e:8f:fb:38:2b:c0:dd:9e:a4:cb:e7:a6:b5:e8:6d:
0e:bd:6f:0c:37:66:06:c2:b0:a0:ec:a6:69:70:1f:
bf:c4:5e:c5:94:06:9f:46:b5:92:eb:63:3c:44:53:
34:52:8a:a3:83:a0:88:59:96:56:fa:be:ea:89:b3:
9c:c5:19:70:95:86:4f:8d:6d:ec:5c:8f:44:a3:19:
26:04:33:30:a9:aa:34:d4:d0:ff:16:a1:e4:d1:21:
67:02:ff:e5:68:19:52:ea:19:81:e5:01:15:86:fc:
53:f2:1d:5a:96:0b:d9:bf:e6:63:81:ae:f3:20:e3:
6d:24:b7:fa:17:52:4f:c1:91:36:c5:34:b1:23:79:
be:0f:66:07:2c:69:5b:02:84:87:53:28:0a:3d:42:
28:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AC:13:03:AA:D4:CB:7D:B8:5B:8F:11:08:34:22:19:84:1E:83:DE
X509v3 Authority Key Identifier:
keyid:0D:55:FA:2A:62:83:7D:B9:AF:E4:42:3E:4C:11:9E:94:99:B2:1B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DVX6KmKDfbmv5EI-TBGelJmyG0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:b1:8b:b3:db:91:fa:92:5a:97:93:f3:1f:b1:89:0b:97:d4:
c9:01:47:29:ec:9a:ff:c9:5e:f8:4f:20:38:d7:7c:8e:23:61:
73:99:b2:15:40:c3:09:65:2f:18:d8:d8:56:a0:00:35:c1:d0:
10:36:26:b0:f2:f9:bd:db:fa:d1:cb:04:a8:f6:60:9c:73:92:
ad:1c:12:a3:cf:da:31:fc:fb:d4:76:e7:c1:40:a2:cb:8f:3c:
1d:da:45:18:86:d6:f0:91:9a:10:59:cd:e6:3f:fa:a0:9f:f6:
d4:4a:b8:8f:99:e9:64:a1:99:60:bd:3e:92:3b:b9:7a:3f:78:
68:f6:14:f6:c7:a9:5d:8a:b0:19:89:f9:33:66:bf:8e:94:8e:
b0:82:c3:51:72:c1:5f:1b:76:5f:38:cc:51:d1:4e:9c:18:91:
b7:f6:bc:bf:2b:69:19:d0:d2:e2:a8:b3:91:32:4d:34:85:a7:
0a:47:0b:a9:5d:e4:7f:a3:a0:62:00:a6:38:28:32:10:18:2b:
fe:cc:87:94:4d:ad:54:cd:53:c6:32:36:05:7b:c9:87:2a:97:
c9:35:55:06:a4:c5:55:25:a6:28:09:d2:06:5d:8d:c8:3a:64:
a8:f3:9f:77:cd:d7:6c:83:58:a1:b9:e1:14:36:a3:95:1a:c1:
ba:99:85:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:47:47 2026 by rpki-client