Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
File: DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft (raw, json)
Hash identifier: /kOK0ATUCzAI7MVBqy0XFKulG9ackOqMSupn0ShvMj0=
Subject key identifier: 35:5B:4C:34:53:A6:60:A4:E8:97:DF:AF:1D:87:99:A4:B6:0B:E0:9F
Authority key identifier: 0C:87:4A:5F:52:73:4E:26:0E:7B:FA:4D:45:11:4A:DD:92:77:E3:53
Certificate issuer: /CN=0c874a5f52734e260e7bfa4d45114add9277e353
Certificate serial: 019D9A06D94C8F514924841A35D183704AEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
Manifest number: 0AAF
Signing time: Fri 17 Apr 2026 06:00:33 +0000
Manifest this update: Fri 17 Apr 2026 06:00:33 +0000
Manifest next update: Sat 18 Apr 2026 06:00:33 +0000
Files and hashes: 1: 96SX2S5aBWouZ5qx7BRgteL4iq8.roa (hash: M3a2yFufjkSiLfAokMv1+05AOpH8jhB4+9skztdJecg=)
2: DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl (hash: kSLfHhV72NU5w5if+3JD4YXZ5j9Or/C/7cFjPkDvM70=)
3: L6SdCLp_FHvz3o3tKNX0l8WA490.roa (hash: 9JHTUcRidI2GiaDB1BZb9pHbOm8ZJYd9k9gXu4meKKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:d9:4c:8f:51:49:24:84:1a:35:d1:83:70:4a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c874a5f52734e260e7bfa4d45114add9277e353
Validity
Not Before: Apr 17 06:00:33 2026 GMT
Not After : Apr 18 06:00:33 2026 GMT
Subject: CN=355b4c3453a660a4e897dfaf1d8799a4b60be09f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e1:f5:bc:68:9c:e2:a5:f0:3d:00:34:20:60:
63:b7:df:b5:8a:af:ea:f6:39:ee:dc:8e:d5:af:1b:
f8:b7:7f:f3:6a:2e:ac:fc:6a:40:67:4d:9a:22:96:
cb:cd:d8:32:53:98:13:c5:df:fd:a0:19:3b:ad:b3:
c1:1a:cd:f4:6e:0d:26:a2:fb:47:e7:85:e2:7a:aa:
e8:00:01:b9:77:a1:30:ca:ff:66:d0:53:1c:ec:bb:
42:7b:36:38:17:33:da:06:1d:a8:75:e0:1d:e6:d1:
7b:d8:9c:63:4a:3b:c6:7e:e3:f0:61:87:76:cd:15:
25:21:c1:dc:cd:a2:ba:78:d7:35:d3:f2:b0:e3:5c:
7c:93:9c:75:12:fd:4d:2a:22:97:a5:a6:85:2c:d8:
f5:1f:dd:ae:c3:a2:ec:52:23:c8:86:b3:da:a5:1f:
50:2f:b8:57:2e:f0:ff:92:81:35:40:7d:3c:c7:bf:
12:ae:fa:80:5e:2e:6f:59:87:8b:9c:15:4a:8b:e4:
b1:52:15:d9:79:5f:7e:15:10:14:1e:14:13:52:f4:
84:f9:84:b2:c8:22:0d:42:b7:ef:3b:bf:30:f9:23:
a9:a1:c5:02:41:0e:e0:c4:9f:6b:a3:84:18:f4:67:
13:39:db:98:2e:72:d9:de:67:b2:05:4c:0d:d0:a3:
d6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5B:4C:34:53:A6:60:A4:E8:97:DF:AF:1D:87:99:A4:B6:0B:E0:9F
X509v3 Authority Key Identifier:
keyid:0C:87:4A:5F:52:73:4E:26:0E:7B:FA:4D:45:11:4A:DD:92:77:E3:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:12:5f:95:55:a6:e0:76:b9:8d:a0:64:db:ef:c8:f8:db:43:
34:f4:28:e3:c3:cc:5c:b8:ea:88:c2:82:1d:09:ee:ac:9f:e4:
81:d0:1b:99:82:74:a1:ae:aa:01:5e:66:4d:18:08:8b:f4:5d:
1b:a1:95:83:aa:e3:b8:e8:28:01:7a:17:28:6a:f6:9f:53:73:
7e:af:b7:0d:0d:36:9d:76:64:37:67:e9:49:19:de:e8:55:7f:
6f:d3:00:e6:33:0f:86:42:bb:f2:b5:c0:5f:4b:4f:ca:b3:e6:
64:88:6e:21:cf:d3:ad:ec:f2:b0:2b:8a:4e:98:85:5c:42:65:
43:fe:71:79:73:65:4a:c5:6e:c2:fd:fa:d1:5c:4b:43:d5:b7:
5a:46:af:3e:c5:7e:3e:af:7d:01:a6:e5:f2:18:86:ae:d8:1d:
c2:41:37:53:92:e2:50:1d:36:89:4e:1d:9b:0d:d8:74:f8:55:
c7:9c:46:f8:d4:fe:b1:d9:76:d1:a5:1a:ec:ba:e4:b1:f4:87:
12:d9:ed:f6:07:0d:d2:69:9b:74:e0:70:7c:b7:f8:c8:51:08:
e6:cd:0b:69:0b:7f:b6:cd:43:f5:16:03:d5:6e:64:67:1e:99:
19:7f:cf:7c:33:9b:0f:18:33:08:e6:a4:0b:b5:98:d0:eb:83:
88:e9:d1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:58:46 2026 by rpki-client