Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
File: DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft (raw, json)
Hash identifier: CDZpLHDR69W3dO7syuVJw5ZNRlOBQu9cKFFoBFQcl2Y=
Subject key identifier: 39:A7:45:00:6C:C3:30:89:DB:76:CF:A7:44:F6:C6:F6:7D:C4:BD:29
Authority key identifier: 0E:43:FB:42:5B:C1:C3:52:57:7E:0A:9A:DE:5B:FF:59:C0:B4:C5:82
Certificate issuer: /CN=0e43fb425bc1c352577e0a9ade5bff59c0b4c582
Certificate serial: 019D9B511BCDF76C02C77192F2EC611D7C98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkP7QlvBw1JXfgqa3lv_WcC0xYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
Manifest number: BD
Signing time: Fri 17 Apr 2026 12:01:17 +0000
Manifest this update: Fri 17 Apr 2026 12:01:17 +0000
Manifest next update: Sat 18 Apr 2026 12:01:17 +0000
Files and hashes: 1: Atp7ou_dWLqF9yrUFBSaGu8i1NQ.roa (hash: iX6v9+WjPW25JV4dSQdrR9Ylqr6/LIAKembF0Rx+4SM=)
2: DkP7QlvBw1JXfgqa3lv_WcC0xYI.crl (hash: NEYaXV2FNKGSR3EwT2vUMbN4/lF+p/tQpxMALTkQiWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DkP7QlvBw1JXfgqa3lv_WcC0xYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:1b:cd:f7:6c:02:c7:71:92:f2:ec:61:1d:7c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e43fb425bc1c352577e0a9ade5bff59c0b4c582
Validity
Not Before: Apr 17 12:01:17 2026 GMT
Not After : Apr 18 12:01:17 2026 GMT
Subject: CN=39a745006cc33089db76cfa744f6c6f67dc4bd29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7a:66:a5:8e:23:4a:c4:e1:1e:40:8f:cc:7e:
d7:64:cb:9b:99:6e:99:43:e5:ed:7f:b8:de:58:7a:
9e:0d:2c:d5:94:9c:53:91:2a:fe:cd:0c:42:fa:08:
fd:29:82:53:f1:02:41:7c:79:52:82:a6:e8:fb:d1:
0e:6e:d2:34:d3:72:b8:1a:a4:8f:ab:cc:57:01:56:
22:12:6f:71:94:ed:f8:06:b3:21:bb:13:30:c0:bd:
b8:9e:f1:63:d6:03:ae:53:d7:53:6f:59:e5:d4:41:
65:3a:b7:e9:37:f6:ed:1f:57:95:77:da:e9:21:c0:
2c:ff:56:d6:02:4d:e3:fd:86:7d:fc:0c:0e:4c:a8:
01:42:e6:99:0a:a9:b7:a5:71:12:2d:66:88:c9:e1:
25:ac:79:8d:1c:5e:d9:c4:36:43:e5:1e:ae:28:fc:
2e:1d:32:45:91:b4:cd:1a:42:b2:e8:89:38:36:58:
0e:9d:a2:9b:62:25:d9:b5:65:10:cd:c0:0c:6b:db:
c9:58:ec:2e:e1:e5:8d:2d:5d:19:f6:08:ee:3e:06:
c9:c4:f2:96:ae:fb:be:fa:35:55:d6:1c:00:67:3d:
4d:ff:a9:69:03:b0:b9:f2:ee:af:0b:8c:3e:45:e4:
42:80:ea:82:0c:72:bb:3b:73:fa:df:e7:a7:73:64:
9b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A7:45:00:6C:C3:30:89:DB:76:CF:A7:44:F6:C6:F6:7D:C4:BD:29
X509v3 Authority Key Identifier:
keyid:0E:43:FB:42:5B:C1:C3:52:57:7E:0A:9A:DE:5B:FF:59:C0:B4:C5:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkP7QlvBw1JXfgqa3lv_WcC0xYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:4a:5b:5f:4d:70:c4:af:06:46:76:8d:44:c3:9d:a7:fc:b1:
73:bf:2a:17:cd:8e:75:df:31:00:94:7d:e7:53:b3:04:4e:cc:
51:77:55:4b:3a:e7:55:9d:1a:93:09:5e:14:d1:67:1b:d6:59:
38:c4:65:37:a6:08:83:29:b0:b1:a7:ac:df:ad:76:46:96:e2:
f9:5a:08:06:d9:34:7f:70:b8:f1:60:31:d8:02:4b:ee:f0:e1:
18:aa:18:1f:26:43:e0:d9:23:20:a2:22:15:4f:06:4b:da:cc:
01:1d:fb:40:08:0d:15:eb:0d:3e:e7:7f:8d:82:43:4d:d5:92:
a3:dc:ae:53:e1:d4:4e:6c:b2:da:bd:cb:18:26:48:c6:07:6b:
07:9a:e2:b0:fb:01:72:e0:e4:a5:13:f1:b9:6b:3c:9c:5f:71:
f7:a7:1c:55:b1:65:79:3d:a5:f5:fe:88:3a:da:31:1c:c4:7e:
60:8c:5e:33:e5:e2:98:d1:bc:9d:18:01:17:28:41:3a:82:ac:
3c:4f:39:d1:a7:68:f9:f5:45:c7:bc:fb:4f:f1:e6:bb:50:ec:
f9:10:ea:dd:39:61:25:3d:7e:13:8e:78:df:db:57:6a:ec:49:
c5:59:a3:c8:b9:c5:50:1b:04:19:fa:69:09:73:bf:c7:cb:26:
c7:67:db:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:48:59 2026 by rpki-client