Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
File: dtS8ie60qcifEAXqrSJ8EyXtFWI.mft (raw, json)
Hash identifier: dM+f4C2K0eo/ujhHZoegPtaszS9V5ckgc6bmwHAqUpc=
Subject key identifier: 5C:84:68:D6:64:12:20:F3:9C:31:21:24:5A:17:F2:6B:34:89:E9:53
Authority key identifier: 76:D4:BC:89:EE:B4:A9:C8:9F:10:05:EA:AD:22:7C:13:25:ED:15:62
Certificate issuer: /CN=76d4bc89eeb4a9c89f1005eaad227c1325ed1562
Certificate serial: 019D9C6365A9E9F2AEC82BEF4C5A438D2A36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
Manifest number: 0BDE
Signing time: Fri 17 Apr 2026 17:00:52 +0000
Manifest this update: Fri 17 Apr 2026 17:00:52 +0000
Manifest next update: Sat 18 Apr 2026 17:00:52 +0000
Files and hashes: 1: 6pce1ex-9vMX3hxl4PHX2_iHdWU.roa (hash: 3DNO1VoVFCiygl4uZClSk2LR5+gj2SCI6v1gbjKpRWE=)
2: 7uEWRZhuKrrLrbz68WNBnRtyak4.roa (hash: lE6tlE6mE+L1kYKEpT6B92Zv+jxsgj3WHZA7o8EE7DM=)
3: dtS8ie60qcifEAXqrSJ8EyXtFWI.crl (hash: HMVDIyG97tHVk3d1l39criGfcmQS+/3elWW3ouY/G2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:65:a9:e9:f2:ae:c8:2b:ef:4c:5a:43:8d:2a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76d4bc89eeb4a9c89f1005eaad227c1325ed1562
Validity
Not Before: Apr 17 17:00:52 2026 GMT
Not After : Apr 18 17:00:52 2026 GMT
Subject: CN=5c8468d6641220f39c3121245a17f26b3489e953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3b:1d:d9:0e:29:a0:47:c2:60:41:9e:34:e7:
5c:63:4a:8f:c0:4b:00:2e:c5:71:af:d0:b4:67:8e:
54:da:59:70:cb:a5:cb:fe:58:9a:60:b8:80:8f:aa:
30:e4:7c:47:f4:23:a3:d8:d9:c8:2e:68:85:9f:b4:
a8:d1:7a:62:84:ec:46:6d:f5:94:5e:56:44:fc:8e:
6d:fe:22:bd:42:eb:3b:38:96:4a:51:e4:fb:2a:43:
0e:39:ef:6f:6a:7a:33:04:f3:2f:c7:8e:92:f7:a1:
b8:f0:40:d9:51:3c:44:41:50:1a:3c:a2:ac:f6:26:
c0:1f:34:bc:4e:44:dc:4a:99:e5:8c:b4:64:f5:4f:
05:df:d0:f8:78:da:88:4f:2c:8c:74:b6:8c:8d:51:
f8:5f:88:51:e3:3a:e1:42:25:6d:25:a7:90:1b:10:
64:49:af:69:f9:b6:23:c9:b6:db:37:b2:91:a0:7d:
e9:47:2f:b9:06:20:cf:12:49:62:e2:e3:96:8a:c3:
12:ff:03:bb:d3:40:51:43:65:46:23:b3:a3:85:7b:
da:14:5c:bc:c1:f0:da:51:6d:0f:43:09:79:9f:31:
2e:17:8d:e8:7e:19:33:a8:ce:63:17:77:fe:7d:54:
dd:2a:07:80:18:cd:b1:4d:52:20:8c:09:e0:be:2c:
18:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:84:68:D6:64:12:20:F3:9C:31:21:24:5A:17:F2:6B:34:89:E9:53
X509v3 Authority Key Identifier:
keyid:76:D4:BC:89:EE:B4:A9:C8:9F:10:05:EA:AD:22:7C:13:25:ED:15:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:50:4c:45:03:a9:a7:b0:0e:cf:9b:5e:b3:a7:7b:88:e2:63:
46:4a:a4:73:47:18:fa:63:25:dd:96:b5:3e:d1:32:70:54:0a:
61:0d:99:97:6c:41:d6:50:44:e1:4a:35:3f:c7:15:fb:df:9f:
ea:91:30:46:c3:90:3d:5d:13:d3:90:1c:fb:11:48:a4:a9:f4:
90:35:9b:97:70:d2:fb:5c:a5:fc:37:c4:0d:41:24:bd:a1:a9:
ec:65:59:b7:c6:2d:0d:e2:53:26:e1:44:c3:23:a2:bd:5f:3b:
f1:ee:9b:ce:ef:ee:89:24:a9:e0:18:0a:b4:dd:eb:31:be:7a:
1f:d4:0b:79:20:5e:be:ce:0d:d8:fd:e0:48:39:ad:97:72:7f:
d7:72:d1:85:94:85:31:f0:29:11:c1:6d:49:40:ac:42:85:a0:
f1:83:99:63:f7:dc:04:59:8e:dd:7d:8d:39:99:7d:96:24:6d:
d6:06:60:4b:58:f1:40:0b:45:5a:4a:2b:00:fd:4b:a4:d9:d2:
5b:9f:c6:00:6f:46:d5:e0:ba:cb:4e:ea:09:54:a8:28:80:e5:
7b:94:1c:f2:17:03:b3:02:d3:5d:6c:74:96:6a:0d:37:af:f8:
e7:8b:13:80:1d:c9:2d:bc:69:0d:b8:84:8d:0a:ef:12:98:2f:
93:67:20:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:35:44 2026 by rpki-client