Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
File: DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft (raw, json)
Hash identifier: Xj4WS5MwLaVxGdZglBRQMNUwT/K/9zwv8LTaC+nyOF0=
Subject key identifier: BC:B2:63:5C:17:A0:BC:08:4C:FC:A8:08:42:AD:46:87:AC:99:76:07
Authority key identifier: 0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93
Certificate issuer: /CN=0c4f995f419220f5874267d68cc14372f0cdf293
Certificate serial: 019D97AADDFE03C6081F6620AA5ACF4DFD82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
Manifest number: 18C3
Signing time: Thu 16 Apr 2026 19:00:50 +0000
Manifest this update: Thu 16 Apr 2026 19:00:50 +0000
Manifest next update: Fri 17 Apr 2026 19:00:50 +0000
Files and hashes: 1: DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl (hash: iC9Gki7QJ0kfewkNdzBfh6/XZmqhSWF5n9nz3rLrdsg=)
2: qopqpOjSigcAgnh4q3o38zGjwNA.roa (hash: EBQgdsC6JJfdJnKh94uu6CL6R7A3pzSO9sS4FBZtJ/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:dd:fe:03:c6:08:1f:66:20:aa:5a:cf:4d:fd:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4f995f419220f5874267d68cc14372f0cdf293
Validity
Not Before: Apr 16 19:00:50 2026 GMT
Not After : Apr 17 19:00:50 2026 GMT
Subject: CN=bcb2635c17a0bc084cfca80842ad4687ac997607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:38:37:cc:34:6c:8f:c9:10:d1:42:3c:b0:e8:
e1:44:4a:0d:7c:4b:47:19:b4:be:a1:b7:76:af:bc:
47:4f:df:84:83:f5:22:da:bb:9b:85:70:5b:80:4a:
e6:93:47:52:d8:bd:dc:3f:9e:57:5a:1a:28:07:6c:
07:05:f3:4b:05:62:ee:c9:50:8c:d3:f1:d1:ab:3d:
f0:e2:ba:62:8b:cc:b4:10:cd:00:a5:01:bd:e5:dc:
13:5f:9a:b5:52:27:96:d3:b0:91:b9:7c:c6:a8:c2:
80:6f:be:b8:e7:a7:00:dc:2a:12:fb:c9:ce:35:58:
62:87:14:09:9a:48:43:ba:af:81:85:d2:a2:58:a5:
a2:7e:22:1c:69:1b:57:f0:9d:96:d8:80:03:94:b6:
09:2d:1c:7c:ca:62:f1:62:31:9b:2a:e9:e7:97:2c:
10:8c:ab:05:ce:d5:e3:6c:24:b5:c7:ee:43:81:13:
7f:0f:dc:5a:f7:96:45:96:65:8c:bb:6c:bf:a9:da:
bf:ca:b4:06:b3:96:50:35:90:6c:75:53:2b:4c:a1:
cb:8c:9e:ad:2a:d9:a8:82:25:4d:ce:6a:41:e1:b2:
d1:70:7a:f3:e8:6e:71:d9:8c:ac:bd:01:01:96:de:
5f:8a:c9:f5:91:8f:14:40:e9:3b:01:6b:55:78:4f:
39:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B2:63:5C:17:A0:BC:08:4C:FC:A8:08:42:AD:46:87:AC:99:76:07
X509v3 Authority Key Identifier:
keyid:0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:4e:be:ca:a4:4f:b2:5f:5b:47:aa:75:98:fd:de:f1:88:94:
cc:e0:40:c9:41:82:00:af:d5:ce:13:79:1b:9b:1d:bc:be:dc:
00:3d:85:fa:ef:48:d3:33:b0:c2:9f:81:7c:41:2e:df:f9:2f:
c9:3a:37:64:82:6b:e4:94:ad:a1:19:3b:ba:19:8d:d5:af:0c:
fe:a0:98:03:5a:8b:90:b6:29:83:45:ce:8f:0d:6a:13:a9:54:
42:85:53:75:69:aa:8f:f8:50:21:e2:85:5c:ae:b6:ca:c3:7d:
fe:89:77:a3:5d:99:18:97:a0:0f:7a:9a:9c:9b:33:ae:72:d4:
e0:23:74:54:fb:8d:e1:c3:30:63:6a:39:9e:15:19:1f:13:91:
db:66:39:99:78:ab:59:c9:ab:49:ef:98:b9:54:05:2c:3a:c9:
e6:9b:4c:ca:6c:31:69:4f:7e:a9:68:97:d9:a4:b6:8f:e8:be:
69:75:08:c0:81:e0:42:25:05:aa:f4:b3:2e:d8:61:78:6d:4b:
50:65:e9:48:37:d8:ca:75:56:69:5b:4b:fd:9e:b7:9e:4d:0e:
1a:41:f3:57:f8:c1:c1:06:ec:5b:f9:57:dc:f7:cd:ee:18:02:
fc:10:4a:a9:0f:0c:0e:99:66:69:a1:54:a7:ed:c2:cf:d9:af:
67:ba:70:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:17:28 2026 by rpki-client