Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
File: DFfLOh5T52Ke47nyZy1Fce-F0sg.mft (raw, json)
Hash identifier: OmxZdXk6kCNW0vJUqnwUE34KDMPyYJ+kje17Cyrib3g=
Subject key identifier: CE:A0:28:90:FA:93:A4:CA:82:09:B2:CC:B3:1F:AA:B9:61:61:77:3A
Authority key identifier: 0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
Certificate issuer: /CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Certificate serial: 019D9AABECE3268ADA84051AA07314A6C911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 09:00:51 +0000
Manifest this update: Fri 17 Apr 2026 09:00:51 +0000
Manifest next update: Sat 18 Apr 2026 09:00:51 +0000
Files and hashes: 1: DFfLOh5T52Ke47nyZy1Fce-F0sg.crl (hash: Q4XEPj/oa1OyRD1F/IOsVKpPdOpEUlY6ERa0aCVwXms=)
2: LINYNse5gTnQTaGpDC4P2orwLNw.roa (hash: jwdJGzlRoAppijnlgLmKSEl5CMBxNzYsYm+HHhXiWR0=)
3: Wu-LPUMqwocBNlt5ypkyRQ-BcG8.roa (hash: udr6u/rjNC9kwCUZ4fpiUpE5gr+CoJtYznz4JyS606g=)
4: dpzibW71BafVtewDmI9jnKwB0PE.roa (hash: Lb6hcW86Ys7t4OSo9igJpzp6AC9QU/RfmTo/e1nf/rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:ec:e3:26:8a:da:84:05:1a:a0:73:14:a6:c9:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Validity
Not Before: Apr 17 09:00:51 2026 GMT
Not After : Apr 18 09:00:51 2026 GMT
Subject: CN=cea02890fa93a4ca8209b2ccb31faab96161773a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:52:b9:64:0a:96:c8:9e:05:fa:f0:be:79:09:
71:e4:cc:98:50:28:88:60:9d:c2:f6:0c:7f:2f:47:
2e:f7:eb:d6:c4:78:71:6d:c4:5f:70:63:d0:c6:32:
e7:45:07:8a:aa:e7:ec:ed:5f:ae:1b:5d:dc:a0:75:
63:e0:cd:77:f2:09:90:89:4d:ba:57:84:56:33:dc:
fa:50:e1:77:7a:2a:77:fd:30:4c:b4:41:65:fa:65:
7e:06:a3:cb:b9:cc:23:5f:03:05:d3:e3:67:3f:49:
8a:b5:ba:76:3e:40:53:c0:e1:11:48:64:6a:9e:da:
73:da:0b:d6:04:9b:54:52:ae:cf:71:44:7e:2a:ab:
53:53:82:38:69:d4:89:00:57:18:6e:23:0a:fd:78:
1a:21:81:b3:28:41:73:0a:9d:48:92:cd:49:ec:24:
e5:e8:4c:0e:05:be:02:31:18:8a:63:37:c1:77:54:
ac:9f:33:05:1b:5a:4e:cb:be:60:f1:e5:34:f5:40:
b1:03:56:5d:d8:4b:df:c6:9e:80:43:21:b6:40:e8:
89:00:0d:a4:45:ac:b3:7f:46:d5:fc:1d:fb:cd:38:
64:ff:a4:0e:d9:1d:cc:cd:46:48:ca:a8:ba:be:1a:
52:7d:cf:f8:04:f0:7b:f1:4e:ef:54:02:8c:69:ed:
75:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A0:28:90:FA:93:A4:CA:82:09:B2:CC:B3:1F:AA:B9:61:61:77:3A
X509v3 Authority Key Identifier:
keyid:0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:c1:9c:0b:a7:37:52:90:07:ff:ea:dd:74:8b:aa:1a:47:e0:
32:4e:b0:09:88:c9:bc:be:08:7c:9e:1f:52:3e:0d:5f:fb:73:
72:d0:a0:45:2f:95:71:c8:bb:3a:52:0f:dc:e0:7f:d4:b4:c6:
3a:53:8e:fe:e8:f2:e5:1f:2f:d9:a4:26:26:29:04:e8:a6:de:
ad:a4:57:46:2d:c9:90:4b:da:0d:f5:27:de:8e:28:9a:b4:2f:
11:7a:fe:21:28:50:ae:36:e4:c2:0e:5b:d8:2e:84:1e:c1:e4:
ea:be:c5:b3:17:4d:90:83:94:7c:4d:b3:d4:bc:f3:3e:5f:da:
b0:ed:30:d2:91:59:f0:52:19:34:74:2c:c6:fd:15:3d:2a:4c:
e8:39:0a:b0:8f:31:50:b7:9b:0a:83:40:20:d9:7a:59:1d:21:
b7:a5:3c:ca:49:59:10:4c:a9:39:80:7f:22:ca:0b:67:cc:ac:
24:5f:6d:e7:af:12:35:b7:60:06:3c:4d:72:05:a2:4b:ae:ff:
7d:92:65:f8:9c:fa:0d:69:8c:f7:0d:f4:c5:de:bb:0e:ce:dc:
1b:c9:61:e0:a3:e2:82:87:cc:3a:eb:33:a4:5b:8c:78:25:19:
86:f5:20:8f:f6:f4:4a:28:20:7e:47:c5:a9:97:1e:ac:25:ea:
90:5f:33:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:49:04 2026 by rpki-client