Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
File: Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft (raw, json)
Hash identifier: g/hTz7WKU5PEIwZhpITepOwVdDNjBkPV1bbkNEF3ZXk=
Subject key identifier: EC:41:BD:72:30:94:47:B0:90:F0:85:3A:AD:66:39:79:60:47:35:A2
Authority key identifier: 0F:0D:94:EE:63:C7:0A:73:36:63:BB:C4:B5:B5:76:DE:60:7E:19:ED
Certificate issuer: /CN=0f0d94ee63c70a733663bbc4b5b576de607e19ed
Certificate serial: 019DA52F5E2E9211E4FFB6C8142A17CBEF02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
Manifest number: 09F8
Signing time: Sun 19 Apr 2026 10:00:38 +0000
Manifest this update: Sun 19 Apr 2026 10:00:38 +0000
Manifest next update: Mon 20 Apr 2026 10:00:38 +0000
Files and hashes: 1: Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl (hash: DynIPfn3QMAvSu/Ak5RKahN2jACOYu3yKd9yuczD4zU=)
2: eIMZBtMcWMvFB1hL6z_nOfKcJpw.roa (hash: fpooL7KmV8Sp+0vA+7uC8WsK6RO/CGya0r0FndhdjC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:5e:2e:92:11:e4:ff:b6:c8:14:2a:17:cb:ef:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f0d94ee63c70a733663bbc4b5b576de607e19ed
Validity
Not Before: Apr 19 10:00:38 2026 GMT
Not After : Apr 20 10:00:38 2026 GMT
Subject: CN=ec41bd72309447b090f0853aad663979604735a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0d:a3:05:1c:cd:1a:a1:c1:d4:ca:c4:f2:b1:
46:95:dd:e1:e9:0d:82:db:bf:50:01:7d:76:c9:63:
49:df:b8:a1:f4:19:ef:af:43:06:3e:0b:91:e8:cf:
ef:af:bd:e0:6a:d8:ee:9a:d3:e9:d8:65:47:6c:0f:
c0:14:36:e3:b8:bb:bc:e5:18:28:00:7f:c7:21:7d:
8f:4f:22:98:a7:df:ee:97:5e:7b:a4:60:01:f0:f4:
ea:32:c1:71:f1:a8:b6:75:5d:e9:7c:ea:4a:e9:7e:
2d:76:0d:80:1a:63:47:53:fb:a9:06:d4:d9:19:43:
b4:87:c6:35:5a:7b:31:8a:4d:ba:4f:de:bd:4b:d7:
01:f7:9d:9b:3c:f6:e9:d8:66:c5:cf:75:80:42:ec:
57:e1:8c:23:81:9e:3f:50:37:50:42:a9:4a:95:bc:
39:11:b7:55:76:76:81:d0:35:36:37:67:0f:32:fb:
c5:54:cf:b0:0d:74:f2:58:d2:e2:cb:d8:95:27:2d:
6f:3a:7c:6a:07:7f:90:bf:75:95:a9:00:52:d6:1c:
2a:2a:35:b9:af:7a:05:31:d2:53:18:71:e1:cf:ee:
39:82:2c:5b:55:7e:9b:b4:1d:ca:4d:f8:76:bd:1a:
7d:db:72:0b:82:00:70:ca:f1:e5:aa:0e:ca:21:76:
5b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:41:BD:72:30:94:47:B0:90:F0:85:3A:AD:66:39:79:60:47:35:A2
X509v3 Authority Key Identifier:
keyid:0F:0D:94:EE:63:C7:0A:73:36:63:BB:C4:B5:B5:76:DE:60:7E:19:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:77:a0:43:b3:7c:29:0d:a7:65:80:67:02:c9:e2:44:3a:70:
57:56:36:54:d2:64:6e:7d:05:c3:6a:0e:a4:7b:dc:25:6f:25:
75:4f:78:45:bd:37:4f:46:99:1f:f3:ae:7e:a4:1a:fc:76:3a:
24:45:c0:f0:ff:cc:d9:3e:82:1b:78:06:1f:01:20:cd:9e:67:
39:81:96:ad:39:70:72:06:3c:4f:5f:a9:5c:1b:09:69:15:e1:
a0:b6:eb:17:60:e6:a3:18:b6:2d:01:41:76:8f:32:05:c6:63:
d1:d2:e7:48:ae:ab:f3:23:9f:58:23:6f:c2:0d:d5:18:fd:57:
3f:4c:a4:ce:ba:bc:06:9a:df:35:88:2c:95:0c:c8:5f:b5:a8:
95:d3:6d:96:34:bf:3a:d2:81:b4:7f:d2:6d:8b:77:1f:26:df:
22:9b:9e:8c:c1:36:c8:64:08:88:d0:fb:1b:b2:fa:35:7c:b0:
86:5f:7a:f1:76:be:bd:a0:46:4e:27:4a:a6:42:2f:4b:48:fe:
16:0e:2c:7a:bc:4c:28:10:e5:00:74:98:23:2f:f1:e4:14:54:
46:c5:dd:12:ba:05:f1:18:c9:25:7f:c4:06:bd:08:4e:ee:91:
d6:6c:bb:31:f5:df:18:a1:5d:4f:82:dc:d6:97:e9:dd:5a:95:
e0:ad:d1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:41:25 2026 by rpki-client