Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
File: Dv0crRIZAnVQiePKgLptfMxLm3E.mft (raw, json)
Hash identifier: YIqn9NMV95vZjB6HCL+6hiy4uxIDMmR/7y0Wi/D8sgQ=
Subject key identifier: B4:DB:20:D2:58:16:8E:8E:0A:8C:E7:72:DE:F1:8D:48:3D:76:BD:F7
Authority key identifier: 0E:FD:1C:AD:12:19:02:75:50:89:E3:CA:80:BA:6D:7C:CC:4B:9B:71
Certificate issuer: /CN=0efd1cad121902755089e3ca80ba6d7ccc4b9b71
Certificate serial: 019D9D086A196C9BCFB0951FBD5623DE67F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
Manifest number: 0EBF
Signing time: Fri 17 Apr 2026 20:01:07 +0000
Manifest this update: Fri 17 Apr 2026 20:01:07 +0000
Manifest next update: Sat 18 Apr 2026 20:01:07 +0000
Files and hashes: 1: Dv0crRIZAnVQiePKgLptfMxLm3E.crl (hash: abD790ZxqLs6q1xZ2syf6DFULg3arKDRMO5POfg99DM=)
2: Ync302nWoIDxqRaEpHli5zPb-l0.roa (hash: CuUUdJvVMWZ1G3401/kid+n0FU2EaOY59WBjrBRwy1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 20:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:08:6a:19:6c:9b:cf:b0:95:1f:bd:56:23:de:67:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0efd1cad121902755089e3ca80ba6d7ccc4b9b71
Validity
Not Before: Apr 17 20:01:07 2026 GMT
Not After : Apr 18 20:01:07 2026 GMT
Subject: CN=b4db20d258168e8e0a8ce772def18d483d76bdf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:93:96:f5:c7:2d:bd:0f:30:60:48:3c:74:3e:
74:a4:94:7d:6e:8f:4e:d0:f5:18:85:60:74:4d:01:
4e:c8:06:bc:5b:7a:3f:0a:57:4c:1d:d9:4b:05:b9:
f5:3c:de:e0:48:53:a4:1c:f7:4d:13:76:0c:aa:51:
3a:48:eb:20:2f:8e:82:60:57:2b:fa:12:43:0a:0d:
59:d0:6f:61:c0:ff:3a:b9:78:27:e9:5b:d1:87:02:
9b:0c:f2:84:b5:8c:fc:17:b4:c0:9b:aa:bf:6e:00:
04:fb:ce:f4:e9:c8:c5:55:56:4a:47:7f:7a:95:a4:
c6:cf:29:9e:42:63:7f:b4:07:6f:a8:75:9d:db:de:
c6:07:aa:d6:59:44:e1:18:f2:ce:41:3b:0a:a5:ef:
c0:04:9e:89:da:fc:87:bf:d1:f3:01:db:0a:75:40:
d9:49:f9:80:b2:98:85:ce:cc:64:65:0a:c7:37:28:
4d:df:1d:51:9d:7a:d5:9f:d2:49:14:bf:8d:5e:08:
7a:b0:ab:c2:fe:3c:09:33:f2:03:a1:d7:f2:af:48:
cf:14:4a:c3:05:03:1f:35:e2:18:27:ef:f8:14:c3:
06:12:e4:7b:a1:23:19:7e:e1:99:7f:5a:2d:ac:6f:
2f:00:43:29:61:a2:79:8c:f7:7c:9a:1f:9f:c9:20:
76:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DB:20:D2:58:16:8E:8E:0A:8C:E7:72:DE:F1:8D:48:3D:76:BD:F7
X509v3 Authority Key Identifier:
keyid:0E:FD:1C:AD:12:19:02:75:50:89:E3:CA:80:BA:6D:7C:CC:4B:9B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:80:4f:69:fd:18:d1:12:06:51:33:c1:57:76:ed:51:6f:5a:
ad:96:de:b6:f7:92:95:ec:b9:95:2b:9a:93:8d:7f:c0:d5:85:
d9:6e:65:3c:6f:65:e0:fa:82:1e:3e:45:72:b1:c9:80:95:93:
54:cd:bc:f9:f7:03:c7:e9:3a:cf:a2:ec:dc:2e:0a:3f:ed:8a:
02:be:3b:90:86:7b:4b:a4:d0:7a:52:f1:b9:7a:e3:ab:0c:fa:
f1:bc:d2:24:06:a4:5b:f6:4b:0c:bb:be:89:ad:f7:95:50:ac:
f9:a1:70:35:3c:be:dc:f6:25:09:be:19:49:0c:37:eb:11:ed:
80:ed:bd:32:a0:e1:7d:e4:3a:95:bb:32:25:c5:d4:9f:e5:88:
56:42:08:96:08:78:26:99:6d:a3:2a:81:7a:ad:43:cf:4d:3f:
a7:28:72:33:1c:23:c8:0a:64:d9:7e:f6:62:21:4e:36:3b:1e:
84:61:5f:6a:b5:7d:2d:25:8e:97:70:af:1a:b2:27:df:fc:ba:
c2:42:69:94:99:37:ff:b7:2e:c0:40:61:67:89:26:fa:de:cb:
be:86:f7:08:71:f9:58:c8:d9:d3:82:c5:27:6b:e1:73:bb:8a:
a4:bb:5e:c9:33:77:cf:4d:6a:c8:25:a6:d2:06:5c:73:c0:c4:
35:03:3e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:12:53 2026 by rpki-client