Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
File: D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft (raw, json)
Hash identifier: 9vAedN9U3ksPNWBkHLldMQTAMzTRHlRAg3xHtnJdxXQ=
Subject key identifier: 06:15:AC:34:93:34:49:7B:63:3E:F6:0F:A3:AE:9A:70:FD:35:77:E1
Authority key identifier: 0F:82:7A:5A:24:E7:71:CC:14:FA:69:BB:74:B3:E7:60:16:7B:02:6B
Certificate issuer: /CN=0f827a5a24e771cc14fa69bb74b3e760167b026b
Certificate serial: 019D9961E13D24157D81C95713FCB876FC5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
Manifest number: 0B17
Signing time: Fri 17 Apr 2026 03:00:21 +0000
Manifest this update: Fri 17 Apr 2026 03:00:21 +0000
Manifest next update: Sat 18 Apr 2026 03:00:21 +0000
Files and hashes: 1: D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl (hash: XkXKuKH63j1w3KvzYUzPO9O9QhpPF5WpC7cXVcQ3TB8=)
2: RZQiwmw-LTuvBT8bKGu9sePwQKA.roa (hash: 30MASV+eS5v/knDU6PvbB3wtKl60C43+n0OVN/QWwQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:e1:3d:24:15:7d:81:c9:57:13:fc:b8:76:fc:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f827a5a24e771cc14fa69bb74b3e760167b026b
Validity
Not Before: Apr 17 03:00:21 2026 GMT
Not After : Apr 18 03:00:21 2026 GMT
Subject: CN=0615ac349334497b633ef60fa3ae9a70fd3577e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bd:c3:b1:11:cd:a2:e1:c7:11:8c:3b:11:b3:
1c:ee:ae:fd:56:a2:30:69:17:cd:de:06:f5:3e:79:
c0:8a:fc:07:fc:e3:15:f1:4c:16:12:c6:ff:b9:23:
dd:93:20:3d:34:b4:19:15:34:1d:46:79:a9:d8:98:
3f:23:aa:4d:96:e3:b5:ab:37:1b:60:f1:3c:9c:fb:
f8:a8:96:ce:b2:db:05:97:75:7f:ef:b5:14:f2:68:
6e:ae:42:3a:82:59:d0:09:1a:8b:33:8b:b7:f0:96:
57:80:08:d9:c7:d8:7d:ab:51:61:42:cc:71:91:58:
a1:de:6f:0f:a9:f0:8e:63:7b:d7:6f:0b:a6:c1:11:
f5:eb:e4:62:b7:08:9d:f9:b1:f6:8c:9c:ed:71:e0:
38:fd:bc:7b:94:02:19:1e:91:1c:62:52:b2:54:de:
ef:f6:65:b7:b9:da:b5:33:a4:2d:7c:5d:a0:ca:bc:
91:a9:5b:a8:9c:34:7c:b7:25:ad:62:e2:6a:5c:1f:
e2:09:7b:d1:4f:3e:cb:ba:74:84:2a:e7:5b:ce:e1:
06:32:a6:6a:00:00:ae:97:21:73:1f:e9:11:96:e8:
d4:d0:bb:58:a7:66:75:44:79:89:65:e5:d3:87:2a:
74:56:c4:cd:45:c8:5a:4a:b2:99:00:11:92:6b:81:
31:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:15:AC:34:93:34:49:7B:63:3E:F6:0F:A3:AE:9A:70:FD:35:77:E1
X509v3 Authority Key Identifier:
keyid:0F:82:7A:5A:24:E7:71:CC:14:FA:69:BB:74:B3:E7:60:16:7B:02:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:6a:9a:39:b3:95:ad:46:06:d6:75:ec:52:c5:3b:95:9f:3f:
d4:8a:18:b5:17:fa:fc:e3:c9:0e:2e:7f:d9:94:81:dd:f8:c0:
2a:81:0c:f5:40:18:73:4c:fd:3c:c9:89:2f:f4:1d:75:76:c7:
08:6b:34:ed:4f:72:db:a2:b1:af:60:e3:63:73:62:3e:ce:cd:
c8:7f:37:77:33:5f:91:87:e9:f7:6c:e1:b7:a7:a5:7c:7c:b3:
4e:0a:c3:fe:a7:53:53:17:1b:4f:83:37:5a:00:40:63:3a:44:
6b:18:9c:75:db:2b:79:dd:e8:6e:a7:93:3d:85:9f:1b:a1:b1:
2e:3d:1a:4a:46:97:83:92:10:a2:a5:37:75:2d:78:8b:9a:a2:
c9:d5:09:46:87:e1:30:33:8c:ca:e6:e6:b6:72:98:e4:2c:86:
51:4c:88:61:f5:8d:1a:94:91:70:8d:ae:e3:97:b6:8c:3b:e5:
79:9b:a2:4d:49:8a:54:d7:a7:70:23:4a:67:66:0a:59:df:09:
9f:63:d4:d6:80:b4:0e:b2:51:32:95:c9:6b:bb:4e:7a:65:13:
8b:10:cb:c5:5b:80:6a:65:56:8c:60:fb:b1:d3:c9:d1:d4:30:
87:7d:9d:fe:ca:e4:72:17:e3:f9:b0:17:14:cd:01:7f:3d:75:
c0:33:68:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:34:04 2026 by rpki-client