Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
File: DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft (raw, json)
Hash identifier: 6YxBZuTBdYh3fR6RQRq+7wEVmOXSt6Yd9O/nJWjBDKc=
Subject key identifier: B8:C5:86:06:D7:AF:E2:9A:EA:AB:C6:82:6C:EB:E8:50:63:B9:CB:1D
Authority key identifier: 0C:20:26:63:DE:85:2C:70:60:FD:EA:02:98:B4:90:D5:ED:CC:0F:24
Certificate issuer: /CN=0c202663de852c7060fdea0298b490d5edcc0f24
Certificate serial: 019D9A3DEFF2374C9757393497DC06DFCEEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
Manifest number: 18CC
Signing time: Fri 17 Apr 2026 07:00:43 +0000
Manifest this update: Fri 17 Apr 2026 07:00:43 +0000
Manifest next update: Sat 18 Apr 2026 07:00:43 +0000
Files and hashes: 1: DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl (hash: zSD74d4E+3taXb2DycxooWCIQkBtdJwUKqaaqZxoq+w=)
2: eRJh73NsCl5nLTcM8L-WtjQ1i8M.roa (hash: FurWUtoK3SJ5oNGdIN9dbo+ONOIK9GXi/NLIt8LbtMY=)
3: kEe6Bn-Wm8OU0BMeJ1sgg9otE2g.roa (hash: uUTvD8lHdMsxga0kjra2N6+gIRpOiRjAnp6etvYJekA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:ef:f2:37:4c:97:57:39:34:97:dc:06:df:ce:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c202663de852c7060fdea0298b490d5edcc0f24
Validity
Not Before: Apr 17 07:00:43 2026 GMT
Not After : Apr 18 07:00:43 2026 GMT
Subject: CN=b8c58606d7afe29aeaabc6826cebe85063b9cb1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:96:2e:2d:6b:e1:33:30:e4:66:d5:98:fd:ca:
a7:5e:40:b8:af:86:48:22:b4:0d:3f:d6:2f:6a:2f:
d7:cf:15:f5:65:a1:19:4a:62:b6:a7:e3:bb:94:62:
7d:23:6b:a7:2e:5e:3b:b1:a2:51:ce:f6:df:a9:54:
eb:f1:be:f8:b5:59:d0:fe:4d:a3:a5:db:1e:c1:09:
7b:00:69:fd:95:b3:f7:8e:8b:87:22:87:da:a8:88:
79:eb:fd:f6:88:cc:38:60:7b:55:a9:a3:33:d4:f0:
f0:1d:19:d1:41:bd:50:e1:81:8a:1a:7a:60:91:0c:
81:c6:66:7b:ad:8b:84:99:0d:02:50:a9:be:1e:a4:
9f:e5:14:ba:7b:f9:bc:41:85:7f:76:77:dc:23:f0:
94:3f:93:61:c0:cc:13:1f:61:5c:79:1a:55:fc:8a:
45:7b:46:76:71:59:76:f7:6c:ae:bb:8d:e8:6d:57:
ba:8f:cf:91:1a:38:92:d5:86:c3:b8:e8:3e:74:e1:
8f:ee:b7:98:f7:9c:11:e2:81:f0:7c:52:a7:bb:71:
2a:75:62:5f:86:76:1e:ed:76:66:f2:63:da:d2:3c:
81:b7:a1:2a:99:74:88:65:21:d7:24:0a:3d:b7:49:
cb:6b:3b:c9:0c:0a:5b:94:29:d8:31:04:4a:58:d9:
cf:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C5:86:06:D7:AF:E2:9A:EA:AB:C6:82:6C:EB:E8:50:63:B9:CB:1D
X509v3 Authority Key Identifier:
keyid:0C:20:26:63:DE:85:2C:70:60:FD:EA:02:98:B4:90:D5:ED:CC:0F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:10:9d:16:d5:c8:b0:b4:d7:fc:ac:0e:bd:6f:ae:06:de:68:
d5:fc:25:40:63:e4:04:e8:1f:d1:cd:27:b3:43:20:1e:d4:93:
a2:c7:5d:74:d5:db:3f:8a:15:24:ce:02:c4:5d:b1:69:7d:0e:
3e:5b:35:08:74:56:56:68:8c:45:40:3d:f7:74:d8:75:9c:2e:
e7:4f:eb:80:e2:a7:a7:90:62:bc:bd:0f:11:05:16:28:71:83:
28:a2:de:48:e2:a6:ef:21:34:68:11:2f:a0:77:94:c3:22:41:
b3:ce:ec:b5:e1:09:f5:f5:b1:07:d1:dd:4a:ae:7e:59:a9:62:
43:0d:63:a8:41:ec:8b:26:8a:7e:e5:99:72:a9:15:14:ad:01:
a2:ba:5e:f3:5f:38:01:3f:b8:4a:cd:e6:2f:ca:f4:83:c0:25:
30:5f:61:6d:61:2d:63:9d:d0:f8:56:3a:2a:03:5a:1c:6f:13:
d7:ee:43:1b:b0:6e:06:e1:41:92:95:d8:dd:ba:7c:63:4c:d9:
cb:71:4b:ed:35:fa:64:b0:c7:50:78:91:47:6a:81:3b:d0:86:
50:3a:6d:44:4b:07:c0:67:cc:d1:48:b5:ee:19:6a:4a:11:44:
f2:3b:1e:a5:8c:25:8a:d4:ea:15:e3:61:2c:3f:a7:01:d8:b0:
8a:98:9a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:56:12 2026 by rpki-client