Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
File: dxvOKaNsveiYrABwfblRQ_hqeSI.mft (raw, json)
Hash identifier: yo8nOU+wX92oxelCliKWaCCtZtAUwVEFF6YRGwMDOYU=
Subject key identifier: 39:9B:AF:BC:F1:9F:CA:43:35:F2:48:8E:EB:90:CB:C2:93:07:70:A9
Authority key identifier: 77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22
Certificate issuer: /CN=771bce29a36cbde898ac00707db95143f86a7922
Certificate serial: 019D99630CDC87ACA4CDEB5052E2695EC567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
Manifest number: 10A0
Signing time: Fri 17 Apr 2026 03:01:38 +0000
Manifest this update: Fri 17 Apr 2026 03:01:38 +0000
Manifest next update: Sat 18 Apr 2026 03:01:38 +0000
Files and hashes: 1: dxvOKaNsveiYrABwfblRQ_hqeSI.crl (hash: NpjpcbmAu8t/KK2/0StKSJIQif0dKEW1aB8qzMVRWeU=)
2: qZ8aQgjdabGbDv-i6H620T5YhwY.roa (hash: UdXrLbOlQenxMN6hG/0L/eJWuifEwthlbNrK+9DhFyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:63:0c:dc:87:ac:a4:cd:eb:50:52:e2:69:5e:c5:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771bce29a36cbde898ac00707db95143f86a7922
Validity
Not Before: Apr 17 03:01:38 2026 GMT
Not After : Apr 18 03:01:38 2026 GMT
Subject: CN=399bafbcf19fca4335f2488eeb90cbc2930770a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b6:12:e3:85:69:ec:fc:27:a7:76:f7:aa:28:
e1:83:5f:c4:e5:6d:fb:5b:04:7a:ea:58:56:28:89:
bf:46:c8:26:2b:88:ed:26:8f:5a:b3:4e:6a:ac:65:
85:f6:11:31:ea:03:90:1f:49:fb:b8:2a:d6:af:ba:
32:b0:ed:a3:c4:57:76:a7:d9:8e:8a:d7:94:94:67:
85:49:60:25:1e:79:c6:1d:23:80:35:f2:7b:40:a5:
cb:37:39:ad:dd:55:52:cb:a9:4a:b3:c7:11:56:01:
61:d8:40:58:b3:91:3e:3b:ec:db:d6:02:01:b5:2c:
65:98:cb:70:c6:cd:c8:b5:92:54:ab:2b:18:82:ff:
59:93:d6:ee:e9:d4:fb:f3:0d:01:95:3e:8a:8d:23:
aa:19:04:dd:ca:32:32:a3:e2:47:3e:13:c7:06:00:
85:53:75:76:00:be:6e:50:22:db:47:a9:9f:86:a0:
e1:1d:e4:99:82:30:00:1a:60:38:cc:97:45:4e:bc:
93:b3:26:1c:a4:48:51:3b:ab:7e:4e:e5:1b:37:30:
71:e6:5a:39:26:a2:0d:3f:3b:10:c5:ef:28:f0:1e:
58:26:df:1a:c7:6f:3a:a9:b9:bc:d1:bf:63:ef:e8:
1c:f1:99:10:54:ce:c1:1e:cc:bf:53:e7:b4:e8:12:
97:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9B:AF:BC:F1:9F:CA:43:35:F2:48:8E:EB:90:CB:C2:93:07:70:A9
X509v3 Authority Key Identifier:
keyid:77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c5:f2:32:64:0d:ae:40:6e:3b:9c:58:68:bf:5f:78:af:f2:
6f:7e:8d:6f:cb:e0:a6:13:8d:3c:da:ea:f8:e3:a1:e3:98:e6:
3b:36:8c:e1:6e:32:bd:85:84:b1:d0:b0:29:36:98:c5:e9:a0:
54:ca:87:2f:84:d2:02:4e:56:87:35:e7:e1:d3:50:e2:dd:44:
7c:b4:11:51:c9:d3:bc:31:18:44:56:86:4c:69:a1:4e:6f:49:
95:2f:3a:75:29:db:9d:38:63:48:16:a3:59:67:90:92:1e:1d:
80:63:0e:45:03:06:12:ca:0a:7b:a3:9c:9b:d8:86:f2:7e:7c:
4e:09:d4:12:62:bb:14:ea:74:32:55:ee:16:d9:4f:d5:72:ea:
1f:d6:29:46:0c:8f:29:ed:68:63:53:45:e9:58:05:9f:db:42:
0c:15:68:e3:d4:38:50:16:59:55:e9:d0:2f:18:e0:5d:e0:e7:
13:f0:75:f2:e1:ef:ec:d5:cb:ac:7c:e5:a7:40:08:7f:10:b4:
1f:ae:42:d4:da:43:ca:e9:e8:7d:80:0a:18:9f:8e:a0:27:68:
2a:8a:dc:30:51:23:e7:47:0d:52:f1:44:c1:16:dd:fa:20:5e:
e1:03:87:4a:1b:03:82:cb:fd:56:ec:8d:21:a6:76:dc:0c:14:
3c:71:8e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:00:05 2026 by rpki-client