Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
File: Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft (raw, json)
Hash identifier: XgFY0NU3hAd/Lmn6WmizyRGe7nYK8/PKXfa+gobwZvk=
Subject key identifier: 54:91:19:6E:C3:3C:F4:04:37:5B:B6:2B:AB:92:F0:4B:3B:6F:60:96
Authority key identifier: 0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92
Certificate issuer: /CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92
Certificate serial: 019D999955098CE21046EE0939935B6885DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 04:00:55 +0000
Manifest this update: Fri 17 Apr 2026 04:00:55 +0000
Manifest next update: Sat 18 Apr 2026 04:00:55 +0000
Files and hashes: 1: DkVdvbXhpbo9CQqVcVFBg1LNoNE.roa (hash: qaF1R+er71d5hFs2KTiNhXAjh56KPYgioy+6tvssIEE=)
2: Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl (hash: II7J6vyvnVVUI1kyROBYWV3Q9MUvj3Uy3deDlCGYXJc=)
3: WIQ88PUyl0Wn69b9mzqB92sF45M.roa (hash: ATP8ajAQ0MqjrK6hyWC+m5lGC/lxKRtV3XstqqIRErs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:55:09:8c:e2:10:46:ee:09:39:93:5b:68:85:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92
Validity
Not Before: Apr 17 04:00:55 2026 GMT
Not After : Apr 18 04:00:55 2026 GMT
Subject: CN=5491196ec33cf404375bb62bab92f04b3b6f6096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:73:8b:3e:ec:5e:5b:75:5b:e8:50:b2:84:3a:
79:7a:25:81:33:a5:8d:c6:3e:b2:4a:a0:7b:db:f4:
dd:e9:3c:56:df:ee:8d:6c:85:ed:3d:76:d2:58:2d:
33:a7:c1:f1:5a:49:a8:53:d6:34:f0:7c:d7:06:1c:
c0:d2:54:fa:28:dc:8d:b0:69:5a:0e:51:13:9c:59:
9c:b8:2e:82:aa:8d:a3:1c:28:8a:00:08:e2:ed:71:
3c:51:85:9a:b8:5b:de:ad:e1:86:29:9f:5e:67:fb:
35:12:1f:00:f4:3c:59:11:4b:9b:4c:f5:44:86:03:
ca:93:88:10:a5:5d:5f:b9:09:71:81:41:9b:6f:5f:
e6:24:45:81:41:69:d0:28:d5:b4:68:b0:7b:0a:63:
22:34:f1:eb:d6:6c:67:41:d4:a5:c1:c2:90:f4:2e:
1f:5c:43:af:62:db:ac:c6:de:7b:2d:60:f8:63:83:
de:c0:a2:10:95:c1:71:50:1c:7c:a5:05:ab:25:13:
d2:8f:ab:04:6c:c3:a3:10:e8:48:62:d9:8f:97:03:
a3:5f:0c:80:7f:c7:60:52:ee:fa:94:ea:46:6b:97:
83:4d:57:08:49:c7:3b:8e:ee:76:ad:18:28:a0:ec:
0c:87:62:00:b6:4a:8b:b2:1c:5a:9c:89:79:62:25:
36:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:91:19:6E:C3:3C:F4:04:37:5B:B6:2B:AB:92:F0:4B:3B:6F:60:96
X509v3 Authority Key Identifier:
keyid:0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a1:03:a6:7e:9a:32:9e:51:af:96:42:b2:5e:a8:c2:4b:14:
c8:25:11:36:16:16:97:61:f9:c0:ff:98:12:88:15:ae:df:11:
e1:4c:ca:90:81:c4:08:f3:ce:66:19:b2:41:52:51:18:40:17:
0d:a9:a5:f8:13:0c:a8:b3:14:1d:3a:2c:0a:c9:67:79:74:68:
90:81:84:a7:c9:95:9d:53:f1:c4:6b:6c:ec:fc:4b:8f:85:59:
0d:1c:cd:1c:7f:60:59:f9:a5:17:41:ae:62:be:dd:b3:48:22:
ad:5b:9a:ce:e1:24:52:4b:61:a7:78:c9:62:16:68:45:f9:de:
6d:23:4f:19:8e:c3:e5:b3:58:80:73:54:e0:8c:99:04:96:ce:
2a:a6:69:0c:b1:e1:b4:81:ba:16:56:af:b8:c8:9f:44:b8:b5:
f9:40:36:f7:71:eb:8b:7b:ac:d7:b1:3b:47:54:00:e9:ad:cb:
e8:63:9f:ef:f4:84:de:5e:45:4d:f0:b5:8c:a4:fe:cf:53:c6:
e1:c9:dd:16:5f:f4:5d:4e:7c:46:90:d6:33:46:ca:cb:c6:5e:
08:fe:b9:55:9b:d4:c7:25:86:b7:95:56:47:04:c6:4a:3d:8a:
6b:59:a4:11:93:f5:ba:cf:0a:a0:c5:3e:d1:2f:53:b2:aa:76:
0e:f2:64:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:23:56 2026 by rpki-client