Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
File: DT66aHPFtQdbPEOff-61SvHxDak.mft (raw, json)
Hash identifier: ADBB7Zcf57uUs2avBPZYKjS+lUExMMcnK/Qb1iUsyac=
Subject key identifier: BA:09:77:B4:91:F2:D7:15:AE:08:03:1E:EF:7F:7D:83:95:BB:4A:2D
Authority key identifier: 0D:3E:BA:68:73:C5:B5:07:5B:3C:43:9F:7F:EE:B5:4A:F1:F1:0D:A9
Certificate issuer: /CN=0d3eba6873c5b5075b3c439f7feeb54af1f10da9
Certificate serial: 019D9B87B8BE18F8C0F8CA1AC07415F636E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
Manifest number: 18CA
Signing time: Fri 17 Apr 2026 13:00:56 +0000
Manifest this update: Fri 17 Apr 2026 13:00:56 +0000
Manifest next update: Sat 18 Apr 2026 13:00:56 +0000
Files and hashes: 1: DT66aHPFtQdbPEOff-61SvHxDak.crl (hash: ioISLOuOCEP43+SBR8U8D6Dqx1/W0XYCRus+3nzWTr4=)
2: UHX8LoJItxLXbSSkLElmcrzzhts.roa (hash: j+K6pcnA4SNCVnoj07hqtnhu76mvNIjpIA6tG3zdI5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:b8:be:18:f8:c0:f8:ca:1a:c0:74:15:f6:36:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3eba6873c5b5075b3c439f7feeb54af1f10da9
Validity
Not Before: Apr 17 13:00:56 2026 GMT
Not After : Apr 18 13:00:56 2026 GMT
Subject: CN=ba0977b491f2d715ae08031eef7f7d8395bb4a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6d:1e:4d:76:49:fe:57:ef:84:2d:61:5f:23:
53:9f:0f:eb:14:83:5d:72:c6:5c:2a:1c:eb:a0:a6:
1e:8c:e4:93:11:bd:00:06:49:be:1d:37:6a:70:ff:
39:4f:50:91:b7:6d:df:ee:ea:5d:61:67:4b:79:6f:
34:ee:a5:36:0e:df:7f:d9:54:a3:4d:e6:77:c1:d5:
8e:26:8a:0e:49:22:f9:08:ea:49:f1:ec:35:34:1a:
24:a9:cf:80:a9:ee:47:ff:8e:15:2a:52:05:aa:18:
82:eb:c6:9d:0f:d0:7f:1e:d5:74:db:23:3a:6a:86:
cd:99:9a:79:a3:59:4e:cb:bb:9b:59:4b:8e:42:aa:
1d:c3:0f:50:15:58:45:79:17:77:27:1a:61:95:99:
27:33:45:dd:94:b5:88:b7:15:7e:11:17:2f:c1:d4:
98:da:cf:63:8b:0b:c1:a3:fe:6e:f8:ce:ae:9f:d2:
51:e2:cf:9d:fd:d4:bd:0b:e4:ba:93:9b:aa:9b:fd:
f0:7d:43:48:11:28:f8:16:55:92:ed:bc:42:4a:61:
25:cd:73:cb:9b:1e:54:66:ba:f0:32:0d:aa:82:1f:
e4:cb:c9:54:48:ce:13:a8:70:18:b2:68:73:94:b2:
81:3d:61:7b:88:39:14:1a:90:f8:a3:6f:a2:9d:3b:
81:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:09:77:B4:91:F2:D7:15:AE:08:03:1E:EF:7F:7D:83:95:BB:4A:2D
X509v3 Authority Key Identifier:
keyid:0D:3E:BA:68:73:C5:B5:07:5B:3C:43:9F:7F:EE:B5:4A:F1:F1:0D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:6f:ec:89:fc:27:81:f0:76:34:69:71:b6:9a:7c:ef:02:0d:
e7:95:7f:5b:80:ac:4d:35:8f:93:22:2a:90:e8:bb:b5:ab:5a:
91:5d:86:52:98:58:d8:81:2a:93:04:09:d8:92:bd:d1:6c:7a:
e1:63:4d:ba:fd:96:32:7d:ca:fa:05:fc:c4:b2:89:25:29:ec:
41:2c:f3:4f:0c:83:41:73:3f:83:ef:27:12:c7:dc:1e:aa:9c:
d0:1a:ab:c0:2f:01:31:07:81:f2:2c:99:a4:61:ed:64:55:a4:
5b:cc:5d:bd:a8:f9:3c:8f:86:57:f4:5c:ec:6c:9f:a0:4a:25:
55:b0:b8:98:ca:61:cf:83:c6:75:e3:c5:2f:d5:57:17:ea:df:
80:d0:41:9b:a0:f3:f9:bb:9c:68:25:2e:7f:38:43:aa:eb:d3:
26:fb:8c:25:63:4c:ba:68:23:c3:7f:64:02:8b:5e:4b:e9:aa:
de:7b:e7:6d:3a:19:bb:75:49:be:f5:2a:f9:59:59:d2:67:3b:
18:9e:d3:a3:be:8e:c0:75:3c:65:93:ca:dd:5d:ac:8d:0a:62:
2b:62:88:0b:54:c3:a7:40:54:06:e9:d1:fe:76:7c:f3:11:3e:
23:ab:a9:14:f9:89:68:07:6f:e0:eb:f3:a4:6d:83:12:10:27:
d2:fa:48:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:34:13 2026 by rpki-client