Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
File: DyFSGnEnFX99rwrQkTlK1aHM53k.mft (raw, json)
Hash identifier: wHcMTfVTAYUTMpp0F9zAg+oSYqLjJ0ypIuqEKXPf7bM=
Subject key identifier: E9:6A:EB:E6:A1:EE:7E:55:AF:53:B8:D4:C6:37:E3:43:C6:FD:4F:E3
Authority key identifier: 0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
Certificate issuer: /CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Certificate serial: 019D9A070C8241FEC95F9D021DBF8D7EFD73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
Manifest number: 18CE
Signing time: Fri 17 Apr 2026 06:00:46 +0000
Manifest this update: Fri 17 Apr 2026 06:00:46 +0000
Manifest next update: Sat 18 Apr 2026 06:00:46 +0000
Files and hashes: 1: 0IWvtKpWz8nwzfyztFPG-10e-ec.roa (hash: M3DL2KpstDY4RX5irHxTIoQ7SYVzPk7eR23DZZrDMbo=)
2: DyFSGnEnFX99rwrQkTlK1aHM53k.crl (hash: NiObfvpqYaHEcGQEzU88D1Vm3X7VIEi7bPnJ8lbe4WA=)
3: pYVSN2AB9mwBr8yDS1zYwXrTuMQ.roa (hash: xWYPQfiNQqIYcOLgwTTjRZ9fSTqKYlkmjs7r1ngIGF4=)
4: uXN7_MtPKMwhSTIFKpLUwo-V5P8.roa (hash: 8z/tTyMqQq524Fl02SLcRSjti3sQ0AEo40zN2vpCYes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:0c:82:41:fe:c9:5f:9d:02:1d:bf:8d:7e:fd:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Validity
Not Before: Apr 17 06:00:46 2026 GMT
Not After : Apr 18 06:00:46 2026 GMT
Subject: CN=e96aebe6a1ee7e55af53b8d4c637e343c6fd4fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bd:30:04:e3:bc:1b:ae:f3:49:01:e3:65:a0:
5e:61:7b:36:9b:6b:e3:09:12:64:55:45:6c:3f:06:
12:41:0b:f6:cd:ee:3a:73:37:92:aa:c5:65:f1:c6:
34:ac:45:4c:00:ca:7f:88:8c:e1:b5:ee:45:ba:28:
70:34:87:dc:48:83:ac:ff:f2:04:96:e4:ef:36:d3:
96:ac:82:34:df:45:27:77:8d:46:32:82:90:8d:41:
dd:b2:06:85:cd:1a:59:9e:f9:6b:93:51:48:68:c1:
35:4e:61:a7:35:10:4b:70:51:65:a1:24:cb:c4:20:
be:c9:2a:0b:f0:4c:45:a2:5c:93:65:87:8f:48:d3:
e6:89:ce:cc:d1:59:cb:69:2d:0e:9e:e9:0a:3a:16:
32:7e:a5:6a:5b:31:ac:12:e7:42:02:70:e3:8a:00:
43:fc:ef:79:44:e2:16:e4:e1:03:f1:a8:77:a9:16:
21:c2:c8:b8:0a:a9:88:d3:a2:a7:ca:06:ba:50:c3:
07:5d:d8:05:20:92:19:f2:ca:81:4f:9b:fa:b7:33:
f2:68:6a:63:48:a9:eb:cc:cc:ae:cf:5a:42:e3:4a:
7c:ea:52:37:8d:26:ac:30:21:4f:d7:6c:ba:c0:4b:
38:8a:03:da:a9:6d:0f:e5:a6:bc:28:16:4a:b1:9e:
12:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6A:EB:E6:A1:EE:7E:55:AF:53:B8:D4:C6:37:E3:43:C6:FD:4F:E3
X509v3 Authority Key Identifier:
keyid:0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:14:83:7e:3b:f4:ce:d8:6e:28:37:f8:b3:85:90:88:0f:84:
5a:c4:2a:d5:6d:1b:4e:28:2c:25:10:ba:79:e3:7c:a9:c7:58:
8b:52:da:65:a2:2b:67:e7:58:00:60:98:77:5a:9c:8a:ca:78:
27:00:ce:70:ac:6a:e7:70:c9:c0:a6:66:20:bf:bd:63:67:bd:
28:58:53:28:ea:f6:52:81:e0:19:13:65:3a:61:1a:fd:64:03:
85:11:95:8a:3d:62:30:50:3d:a4:04:41:ec:9a:e5:d5:8b:d4:
c9:56:38:da:01:28:8a:50:25:f4:10:03:73:10:17:35:3a:61:
bf:88:d3:ff:c9:bc:55:83:37:f3:8e:03:6e:d0:3b:22:9c:f9:
0b:c9:80:ba:b1:7f:70:0a:c7:5b:41:04:77:44:5d:98:24:82:
0a:b7:44:e6:71:c4:43:d4:f4:f7:fb:5c:c5:00:80:d3:64:4d:
5f:c5:e8:2c:d5:07:df:b6:d7:94:6d:bc:2e:3b:0e:56:fa:15:
fb:68:97:4f:ae:00:d3:2b:00:dd:6a:0b:57:d4:91:08:47:0e:
68:b2:4f:66:2f:d3:28:3f:fc:bf:ca:ea:fd:18:91:24:4c:ee:
11:0e:35:e9:24:86:64:8b:2f:46:6c:88:68:24:7a:bd:72:d3:
0e:37:2a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:02:42 2026 by rpki-client