Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
File: 1DsiEwqpp3NCVHaewTv-Fx-h4os.mft (raw, json)
Hash identifier: 0/FhoPOJY0PPDcDS4+KC4cm/dbP30UEpUb8hJhTLWnU=
Subject key identifier: 6F:AE:08:43:36:99:53:FF:1D:6D:0E:4C:8E:4B:95:44:64:3D:52:DE
Authority key identifier: D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
Certificate issuer: /CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Certificate serial: 019D9A753738D079692EC0A070952E02FCA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
Manifest number: 0DCC
Signing time: Fri 17 Apr 2026 08:01:06 +0000
Manifest this update: Fri 17 Apr 2026 08:01:06 +0000
Manifest next update: Sat 18 Apr 2026 08:01:06 +0000
Files and hashes: 1: 1DsiEwqpp3NCVHaewTv-Fx-h4os.crl (hash: fdYuCGVBxtW/NVEFN3KOGonCXadB37eP4FgrG/FyHKc=)
2: tTSKZ9SBm5TzwVGPFr99l5iaN7Y.roa (hash: 6iyRKX1ykzt8wMyhT1hUZtasJQSEcc9fv+Jwo+YKOD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:37:38:d0:79:69:2e:c0:a0:70:95:2e:02:fc:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Validity
Not Before: Apr 17 08:01:06 2026 GMT
Not After : Apr 18 08:01:06 2026 GMT
Subject: CN=6fae0843369953ff1d6d0e4c8e4b9544643d52de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:07:35:73:b7:bc:7f:8e:1c:c2:b5:73:9a:eb:
36:79:2a:51:ea:87:e8:3e:2f:1e:66:e0:8f:ba:26:
aa:8e:47:a4:43:7a:56:20:8a:c8:fe:b5:56:fb:df:
bd:c2:3c:ae:8c:0d:8f:1f:86:98:26:23:52:c0:ff:
0c:c9:13:4c:d6:d4:e9:b1:6d:41:a4:4a:bc:67:92:
0f:2b:4a:53:75:2b:73:03:45:39:8f:73:ef:61:57:
f7:dc:04:2f:d2:9b:77:45:4e:17:05:fc:9d:ec:a8:
7a:b2:91:08:bc:3d:4d:8d:61:39:c4:b3:b6:67:56:
ec:fa:e0:62:b9:1c:2d:0d:60:98:23:63:1a:31:60:
7d:da:ef:71:7c:db:99:d9:12:18:b6:a8:56:11:0c:
6f:c5:60:e0:3b:5d:9c:8c:92:b2:98:4c:eb:7f:d9:
55:33:d1:e9:94:3e:45:ff:1b:af:be:1e:19:39:ec:
02:41:03:cc:2b:c8:90:ff:ab:d6:27:d0:e9:95:93:
5f:69:8c:b8:2e:d0:82:b2:a5:27:19:b5:24:6d:58:
78:55:38:a3:08:1a:b1:47:d0:51:ef:2b:95:97:ab:
e9:10:ed:fd:34:5d:fe:14:e6:63:7b:2d:69:92:3a:
56:c8:b5:9d:66:da:24:ed:55:6c:35:c2:c7:fa:65:
d5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AE:08:43:36:99:53:FF:1D:6D:0E:4C:8E:4B:95:44:64:3D:52:DE
X509v3 Authority Key Identifier:
keyid:D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:63:30:dd:18:22:78:90:94:cd:62:99:4b:2a:00:db:aa:1b:
89:a6:ba:11:8a:41:e2:16:9f:d1:32:14:a8:f9:0f:1b:c2:3d:
c7:76:e9:1f:ee:31:a3:97:b0:51:62:7d:d3:d5:16:15:af:c2:
43:fa:b6:bc:d1:3c:0a:98:72:7e:b0:76:46:67:bc:5a:db:0b:
4f:11:92:4c:ff:15:8d:62:34:2e:1c:ba:fc:78:0b:03:3f:b8:
ed:1b:b6:50:e9:d0:f7:d7:c4:1f:08:1b:6e:35:f2:80:d4:a1:
dd:15:62:d6:ae:83:c0:6b:a2:f9:4a:7f:69:59:be:7b:2f:43:
9d:16:5a:67:61:35:22:59:cc:0f:34:96:4e:a8:1e:1f:31:e5:
f1:dd:20:eb:ec:fd:bf:9f:30:d4:83:c4:3c:9c:37:c0:7a:d9:
ec:40:87:b5:9f:7e:b7:4e:b2:56:12:d0:c1:43:aa:d7:7d:63:
75:2c:2b:bb:0b:c7:cb:9c:4d:68:ce:be:9e:9a:b1:74:eb:93:
22:46:54:2f:e6:9f:1d:70:64:49:50:0d:d0:e8:1a:c3:58:14:
bc:9b:b3:8c:0c:70:23:a0:0c:9b:7d:fc:15:50:bb:07:4f:10:
af:fb:1e:e2:d6:cb:6e:02:17:8b:bb:9d:92:8d:1a:70:dd:6b:
92:86:a4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:16:42 2026 by rpki-client