Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
File: dv4wVehykAAOMof3q1iDgCpapto.mft (raw, json)
Hash identifier: Ygqb9thLR7QlzomBZ18W77SZSEDOd9WDKF/XpxNfN4g=
Subject key identifier: 55:10:CA:B4:84:8C:A3:B5:4F:E3:79:29:B3:1F:52:C9:27:AD:A0:03
Authority key identifier: 76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA
Certificate issuer: /CN=76fe3055e87290000e3287f7ab5883802a5aa6da
Certificate serial: 019D99D021698103BBE9FB3DD8C69D27DBC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
Manifest number: 0BEA
Signing time: Fri 17 Apr 2026 05:00:47 +0000
Manifest this update: Fri 17 Apr 2026 05:00:47 +0000
Manifest next update: Sat 18 Apr 2026 05:00:47 +0000
Files and hashes: 1: 0ySGeIDrXtZFxjKASUMVzdc0Dlc.roa (hash: l2+MJdgyr6VqnECFLRIqzXDoWHq/3WTx2ApaEcFXd9c=)
2: 2MIYePrvuVOPunZ0cCU587P-UNo.roa (hash: 87FdzdFETynQoJd/9d3TWFG9LHhJseAqTkXpKmEANyg=)
3: dv4wVehykAAOMof3q1iDgCpapto.crl (hash: VzE5/HYDXSYdHVnVeeyp3MMDF6fDwDgU5vUoLeNNoBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:21:69:81:03:bb:e9:fb:3d:d8:c6:9d:27:db:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76fe3055e87290000e3287f7ab5883802a5aa6da
Validity
Not Before: Apr 17 05:00:47 2026 GMT
Not After : Apr 18 05:00:47 2026 GMT
Subject: CN=5510cab4848ca3b54fe37929b31f52c927ada003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:26:2f:33:7d:2b:8c:0b:2a:11:c7:0c:c6:77:
e6:84:23:f5:3b:39:4a:60:4b:61:1a:fd:95:dc:55:
09:b8:56:27:f0:52:f9:68:f5:a3:3a:80:57:ba:ee:
f1:ba:07:e6:e9:43:62:72:b9:63:9c:da:3c:df:91:
1e:f3:42:1b:15:98:27:db:51:32:d9:4c:ee:48:bf:
4f:dc:b1:7b:31:65:1b:a7:c0:9d:6d:66:ac:9c:6b:
e7:77:73:13:b2:bf:da:47:69:4a:a4:f2:a1:68:e2:
a7:89:96:5f:ce:4c:86:a5:9f:73:93:ea:fe:1d:fd:
38:33:85:84:0f:9f:9e:af:4d:09:e0:e3:0a:16:f1:
a6:34:90:69:a8:5f:64:85:f5:7b:ae:e1:b9:37:20:
a2:59:ad:25:e5:a5:15:55:2b:99:1c:24:17:26:de:
17:46:81:c6:d5:ff:a2:ce:53:1d:a2:90:23:9a:e1:
14:22:e2:fb:f1:32:d3:1e:fb:52:51:7e:ff:66:61:
b6:97:98:f5:53:eb:1f:09:85:a6:b9:64:f5:48:0d:
ef:d6:37:18:ac:75:16:31:63:fa:2d:e4:82:9d:92:
70:a0:7e:72:9b:c6:3d:9c:14:b1:de:18:22:b2:25:
1b:a8:c2:cc:95:32:a7:f5:ce:af:95:b0:99:42:a0:
83:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:10:CA:B4:84:8C:A3:B5:4F:E3:79:29:B3:1F:52:C9:27:AD:A0:03
X509v3 Authority Key Identifier:
keyid:76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:43:ce:57:77:c3:d2:f1:b2:19:45:69:86:a0:15:91:ee:ca:
52:d9:50:58:bb:fd:44:42:b2:9c:48:a0:f7:92:85:af:11:4b:
dc:56:f0:9b:1d:6f:42:1e:53:fb:2d:5e:d3:7e:00:07:00:04:
11:4a:8e:33:4e:a8:f0:8a:0e:6e:73:42:78:15:27:d5:77:ba:
4f:94:41:7d:22:b6:8e:a4:dd:64:d6:38:0a:9f:db:2d:e1:be:
a1:3a:77:86:8d:52:dc:90:18:15:2a:8d:7c:a0:bd:dc:56:12:
65:89:28:15:94:61:9e:3b:eb:44:33:67:16:7d:40:27:bf:c8:
03:5c:29:c7:42:c7:10:a3:1f:fa:47:a4:2b:7e:5b:c9:d5:04:
b6:00:b7:d5:c8:8f:42:a4:a4:9e:60:40:bc:d8:3e:54:f2:82:
f8:f0:f5:c6:70:e8:0a:72:f8:56:d3:0d:b5:b6:da:98:d8:6a:
92:84:de:31:18:1e:0f:2d:90:15:5a:22:21:23:5c:f1:8c:03:
b4:76:b5:28:b8:3d:c7:2d:8c:64:af:25:40:64:87:36:29:39:
1a:43:b5:2e:a1:71:9e:9f:c4:6e:56:07:13:1a:a7:24:89:e8:
e0:f0:08:e1:19:92:dd:c6:7d:b9:56:cc:7a:21:aa:58:5a:9f:
6e:a3:b9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:30 2026 by rpki-client