Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft
File: dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft (raw, json)
Hash identifier: 3Ap0fY5l4SclwNXN8bVzPqqW0uqgfAI0htJ3Iig/KUo=
Subject key identifier: 6D:C2:FA:34:38:BE:BF:24:F9:2A:D2:DC:C5:F6:53:C4:56:A2:3C:21
Authority key identifier: 74:7B:B7:C2:45:05:B6:F5:8F:94:81:7D:7C:8D:53:76:75:6D:37:FC
Certificate issuer: /CN=747bb7c24505b6f58f94817d7c8d5376756d37fc
Certificate serial: 019D9C9A8C33DF017DD9DB47CE520A04D242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft
Manifest number: 08E1
Signing time: Fri 17 Apr 2026 18:01:07 +0000
Manifest this update: Fri 17 Apr 2026 18:01:07 +0000
Manifest next update: Sat 18 Apr 2026 18:01:07 +0000
Files and hashes: 1: dHu3wkUFtvWPlIF9fI1TdnVtN_w.crl (hash: SvmknsQ9JzqgirWAR60HSg3OW7wWwwQ17S/OAyAV0K0=)
2: g35Y0bPzssO1lbrgJzwXWhCbRPc.roa (hash: INqx3VY6OBJ/sPn/bpn2Ub8Zf1Q1lUdjFiGqKCwTVeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:8c:33:df:01:7d:d9:db:47:ce:52:0a:04:d2:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747bb7c24505b6f58f94817d7c8d5376756d37fc
Validity
Not Before: Apr 17 18:01:07 2026 GMT
Not After : Apr 18 18:01:07 2026 GMT
Subject: CN=6dc2fa3438bebf24f92ad2dcc5f653c456a23c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:50:2a:19:10:5c:4c:86:ae:eb:ea:65:d4:66:
3d:2e:a6:fb:86:df:94:75:83:ac:e3:81:1a:92:71:
eb:be:c3:c3:d4:36:77:e5:fb:3c:ed:e2:f7:d6:54:
d2:ff:f9:06:63:91:30:be:99:92:00:0a:38:19:c0:
2e:97:0f:bf:22:86:38:9c:9d:ac:2f:b1:d9:ff:8c:
2a:8c:09:7e:ca:68:64:f5:2a:76:43:9b:35:16:e7:
1b:8d:2c:c3:2d:67:b5:6f:1b:1f:f6:c5:8b:14:76:
c8:80:2f:4f:b8:a1:af:ae:e3:89:33:ad:ab:56:61:
42:db:cc:a0:1b:be:c7:85:04:25:de:1e:0e:a5:86:
3c:51:52:69:19:d7:1c:96:69:04:3b:7f:99:67:b8:
18:a9:32:0a:a5:f6:63:f6:c6:57:50:b1:c0:c3:85:
a6:3e:05:2d:9b:15:e2:db:63:54:5f:73:d7:48:05:
83:f4:36:f1:86:2a:11:02:45:8b:f5:41:3f:c4:cc:
74:91:bc:09:46:b7:37:38:cd:c3:ca:4a:ee:6c:fe:
c6:b1:dd:a2:17:34:c0:49:31:2f:6a:f4:7b:de:03:
f8:99:80:fd:59:24:a1:f5:57:71:43:e1:2e:e1:8e:
92:6b:65:23:68:20:69:e6:8c:97:bb:d7:79:03:03:
39:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C2:FA:34:38:BE:BF:24:F9:2A:D2:DC:C5:F6:53:C4:56:A2:3C:21
X509v3 Authority Key Identifier:
keyid:74:7B:B7:C2:45:05:B6:F5:8F:94:81:7D:7C:8D:53:76:75:6D:37:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:72:52:fe:6a:69:ff:ab:90:5a:f3:4b:48:4d:7b:a7:65:83:
c4:86:58:34:5d:63:91:4c:bc:3a:31:fa:b7:f0:fd:f6:22:45:
5d:f7:69:b2:1c:78:cd:f0:44:32:99:52:fb:e5:09:17:3b:76:
87:c6:bf:9b:a0:54:3f:c6:d4:c7:20:10:07:ea:cf:66:b5:15:
81:42:51:e2:8b:e3:79:bc:a1:b7:57:a4:fd:71:e8:13:ab:af:
94:be:d1:83:af:46:3b:e1:6c:a7:fd:b5:16:10:f1:53:d1:04:
e0:54:99:c7:34:8c:f2:3d:31:3a:72:ec:8a:d6:40:cf:78:53:
db:e4:ff:ae:c7:dc:a2:b9:1c:5a:05:59:dd:4b:dc:06:b2:b8:
8b:24:d4:5b:db:4e:c6:c3:c7:a7:33:9c:ad:33:70:08:bc:f6:
de:57:65:f4:94:48:2e:70:b5:d7:9e:37:0c:fb:da:b0:26:2f:
95:23:e0:c9:6e:a5:19:16:dc:ff:e6:ed:ec:72:44:10:76:00:
e1:53:05:c2:91:9e:5a:f4:c5:74:9f:ab:db:9a:ef:97:da:7c:
7e:3a:57:d0:a9:2a:6f:91:50:7a:5b:bf:d6:12:99:97:bd:db:
f2:54:e3:a5:96:cc:81:41:04:50:e3:f7:2f:db:2c:1b:0a:18:
ff:da:5d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:43:04 2026 by rpki-client