Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
File: fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft (raw, json)
Hash identifier: NcG3CDlIPxPY6Ifgvr6ugePfkvfYLDhJLBAdGP7Juhg=
Subject key identifier: D9:7D:29:34:4D:72:A0:46:F2:3A:C1:08:E9:3A:EF:54:E3:51:79:16
Authority key identifier: 7C:38:46:58:9A:3B:39:5B:37:58:77:3D:A3:D9:F1:33:34:C7:20:38
Certificate issuer: /CN=7c3846589a3b395b3758773da3d9f13334c72038
Certificate serial: 019D99D032D168661A0AF014ACF074656F38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDhGWJo7OVs3WHc9o9nxMzTHIDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 05:00:51 +0000
Manifest this update: Fri 17 Apr 2026 05:00:51 +0000
Manifest next update: Sat 18 Apr 2026 05:00:51 +0000
Files and hashes: 1: fDhGWJo7OVs3WHc9o9nxMzTHIDg.crl (hash: n1YM5SdqGeYCkZYqgpYo5R0FmYt1DxgYIuAARVd/E9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fDhGWJo7OVs3WHc9o9nxMzTHIDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:32:d1:68:66:1a:0a:f0:14:ac:f0:74:65:6f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3846589a3b395b3758773da3d9f13334c72038
Validity
Not Before: Apr 17 05:00:51 2026 GMT
Not After : Apr 18 05:00:51 2026 GMT
Subject: CN=d97d29344d72a046f23ac108e93aef54e3517916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d8:46:c7:cb:cc:86:02:ff:4c:eb:2d:63:39:
8a:07:98:cb:d9:72:a4:ec:2c:8a:f4:c0:3a:1e:07:
8a:5c:fb:39:37:a3:f7:4b:90:a5:ce:45:1b:53:a1:
08:bf:e7:83:01:83:ba:dd:fc:fb:cb:59:fc:34:df:
9e:9a:1c:cf:1a:99:bd:91:d3:7a:2f:e9:89:fd:00:
b1:62:c3:23:93:96:1d:6f:7d:2f:b2:d2:8e:a7:f6:
0e:3b:b5:33:75:67:0b:bc:5c:2b:e9:85:f8:d2:7f:
33:49:cf:ea:9c:0f:c8:70:5c:66:cb:2f:61:3d:14:
b9:3a:04:d1:e4:df:c3:a1:84:15:17:1c:4f:40:8d:
e9:fd:60:6c:91:fd:24:7e:d9:dd:fc:ca:fe:49:2e:
6c:21:a1:78:56:da:67:c9:1e:be:2f:0b:a7:d5:47:
61:5b:6a:e1:07:ce:cd:5b:12:7e:77:88:58:d5:84:
d1:88:d9:ce:75:9a:c6:77:79:41:c7:4f:f9:4d:e9:
77:c8:09:6d:cc:bb:d3:b6:5a:c3:91:76:45:91:5d:
71:e4:b8:74:b2:d5:45:bd:98:df:7e:57:59:8b:d0:
64:23:11:a5:d6:c3:a9:07:55:bb:28:c1:cf:f8:4f:
47:99:37:29:ad:db:a1:df:64:4e:eb:61:92:06:71:
35:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7D:29:34:4D:72:A0:46:F2:3A:C1:08:E9:3A:EF:54:E3:51:79:16
X509v3 Authority Key Identifier:
keyid:7C:38:46:58:9A:3B:39:5B:37:58:77:3D:A3:D9:F1:33:34:C7:20:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDhGWJo7OVs3WHc9o9nxMzTHIDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:73:71:da:36:5a:ae:01:5c:51:e1:0f:62:63:85:94:3e:d4:
c9:1b:66:5c:cb:36:bd:c0:d9:8b:4d:c0:9f:57:f5:df:f2:f2:
3a:0c:14:05:0e:c8:b5:07:f9:69:d0:ef:d9:14:d2:24:61:be:
33:2e:91:2d:2a:68:bb:4c:21:ae:49:39:08:1f:a5:7a:ed:3a:
34:42:de:ee:b9:1e:52:ec:33:34:79:1f:81:7c:1f:a0:c8:cc:
6c:99:e8:95:4e:93:6b:79:9d:ef:ad:7a:7b:0f:0a:fc:b0:89:
c5:02:39:2f:7d:02:b0:25:8f:04:bd:fa:5b:3c:e3:83:94:a8:
38:d5:7a:b5:e7:9c:4e:22:4e:d5:c4:54:bd:9b:ea:e4:8c:22:
31:33:b3:26:06:c7:ea:75:ef:87:e2:c4:af:b5:f9:93:36:67:
c3:38:15:e4:1a:f7:e6:a1:d1:05:33:f4:c6:2a:21:88:8f:4f:
4d:f9:2e:2e:14:18:94:1f:3f:8e:87:f3:9f:42:c6:79:ac:7a:
22:75:ca:25:86:a8:89:5d:76:34:42:7e:c0:5e:7f:73:c1:5d:
42:e6:b6:3a:eb:b2:57:f4:56:54:84:64:d5:4b:2f:e8:c1:41:
78:f2:b3:e5:ca:e1:7c:9c:3e:d3:04:03:73:7b:14:db:8a:66:
6a:46:33:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:27:30 2026 by rpki-client