Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
File: dRk72fhLSp7UegO9-JLZ55i3Jyc.mft (raw, json)
Hash identifier: jLigYCQ5mmJxtayrX9BjQr5cDSE1lknI70CDm6ExNts=
Subject key identifier: DA:4D:BA:5F:5B:77:71:35:87:3F:25:02:BF:92:D0:D0:75:0A:F0:8C
Authority key identifier: 75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27
Certificate issuer: /CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727
Certificate serial: 019DA3787C01758EB4ACB2C7112506BCD57F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
Manifest number: 18CA
Signing time: Sun 19 Apr 2026 02:01:15 +0000
Manifest this update: Sun 19 Apr 2026 02:01:15 +0000
Manifest next update: Mon 20 Apr 2026 02:01:15 +0000
Files and hashes: 1: dRk72fhLSp7UegO9-JLZ55i3Jyc.crl (hash: OVx901mQayygZXH1kIZriWSb14sdDpQNcKQqlRpIrT4=)
2: npNQdbBPSAtnOlq0Culg6ehSO3c.roa (hash: nzhX62ENfek+KzOEsFGqCHI0pXJKicAlbiFtnu/GhCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:7c:01:75:8e:b4:ac:b2:c7:11:25:06:bc:d5:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727
Validity
Not Before: Apr 19 02:01:15 2026 GMT
Not After : Apr 20 02:01:15 2026 GMT
Subject: CN=da4dba5f5b777135873f2502bf92d0d0750af08c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ab:5c:f8:ca:84:b4:75:0d:f9:bb:4a:52:81:
7a:e6:f1:ef:61:b1:d6:74:47:f3:64:29:27:1a:6a:
c2:4b:82:85:b6:1b:1c:4a:fb:4a:61:0a:51:e5:7d:
37:98:a5:32:65:f5:2a:e1:27:14:92:d4:12:ff:8d:
30:71:bd:d8:ea:ba:a9:93:df:41:5c:4e:e5:c8:8b:
fd:f1:21:46:2f:88:fc:f2:dc:3d:e5:cc:47:c1:01:
30:76:ed:f9:86:aa:6e:43:7e:b6:5a:aa:c1:ba:ee:
5d:f4:27:84:98:c0:05:b2:7b:73:03:96:78:1f:96:
5c:80:7a:06:a0:25:1d:8c:f9:22:fc:07:14:a3:7a:
44:62:15:f5:07:1b:de:38:df:b8:9a:67:fe:1b:a9:
9b:ff:e5:08:30:94:54:b8:a4:0e:8a:11:cd:db:77:
35:64:b9:56:67:3a:17:bc:26:30:68:38:ca:81:76:
97:66:fc:e2:82:97:80:92:67:47:d8:f3:4c:eb:37:
df:bf:65:e0:bf:74:e0:1b:c4:5b:a3:7d:d9:19:ff:
0c:0e:36:30:69:0f:10:59:b4:5f:71:28:45:a4:41:
8b:26:a0:29:a9:e1:fe:97:50:86:53:b9:02:2c:08:
39:5a:90:c6:4d:18:ab:fe:19:81:01:2a:26:19:69:
62:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4D:BA:5F:5B:77:71:35:87:3F:25:02:BF:92:D0:D0:75:0A:F0:8C
X509v3 Authority Key Identifier:
keyid:75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:67:e0:9f:e7:79:e9:38:39:b4:ca:5d:3c:b1:de:09:3d:54:
6a:b9:84:f0:61:02:d8:bb:31:b5:ca:13:90:f3:2f:2e:b3:c7:
fd:5e:fe:99:38:f5:cc:a9:da:7f:f3:14:e9:12:33:6f:01:16:
15:eb:18:06:3f:99:95:a8:22:bb:2c:58:3f:79:28:02:67:d8:
f8:d4:52:5f:fd:53:11:5d:82:ac:92:b7:3d:97:e0:08:65:56:
90:96:36:85:7e:58:de:f6:e2:eb:b4:82:89:8b:04:06:d9:00:
07:f3:33:eb:8c:0f:c1:d7:01:3f:ea:2c:3a:d3:3f:c1:f2:48:
ef:32:28:ca:ee:f8:b6:b9:5f:31:8a:a3:6e:39:5b:3c:76:eb:
f5:ee:9f:ce:7e:22:5b:ac:e5:a6:37:cf:1f:95:51:f9:f0:ef:
c6:05:1c:1b:e1:9f:47:7b:6c:58:86:af:30:1c:9f:b4:a1:45:
05:ee:c5:70:5b:d9:b0:a7:3a:c7:e1:77:22:9a:d9:f7:b1:53:
2b:cb:94:e8:cd:d5:34:27:6a:c7:e4:b7:d8:75:07:46:cd:55:
ce:20:b2:a2:bb:bb:b6:41:ae:e1:f6:27:e9:6c:81:e4:a8:69:
d9:9d:cb:cf:e9:a5:fc:b1:54:c6:e9:92:5e:13:b2:1e:ef:22:
6e:8a:c9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:22 2026 by rpki-client