Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
File: DwxSlP25wrH3QxZPyWDAB-a_5gE.mft (raw, json)
Hash identifier: T2IaxqLVOdxcsb+jKFEO78epGaMXfTpUxcqHJfjRDNw=
Subject key identifier: D0:0F:A0:46:74:62:7F:A4:30:F6:8C:AA:17:E6:01:DA:00:2D:D9:FE
Authority key identifier: 0F:0C:52:94:FD:B9:C2:B1:F7:43:16:4F:C9:60:C0:07:E6:BF:E6:01
Certificate issuer: /CN=0f0c5294fdb9c2b1f743164fc960c007e6bfe601
Certificate serial: 019D98F49020C50CDA89410EA4720ECC38F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 01:00:57 +0000
Manifest this update: Fri 17 Apr 2026 01:00:57 +0000
Manifest next update: Sat 18 Apr 2026 01:00:57 +0000
Files and hashes: 1: DwxSlP25wrH3QxZPyWDAB-a_5gE.crl (hash: jeJWMF0zSde1DYtto0v47uWJdkkSH4RfizM5aYzqXFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:90:20:c5:0c:da:89:41:0e:a4:72:0e:cc:38:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f0c5294fdb9c2b1f743164fc960c007e6bfe601
Validity
Not Before: Apr 17 01:00:57 2026 GMT
Not After : Apr 18 01:00:57 2026 GMT
Subject: CN=d00fa04674627fa430f68caa17e601da002dd9fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e9:e4:e8:96:a9:be:33:e0:f4:da:e3:0e:6c:
38:94:4f:ce:c1:32:d6:d7:eb:6a:31:de:5a:52:4a:
05:e7:8b:4b:1f:35:4c:9e:e5:50:90:96:8e:3b:83:
6f:c9:e8:e1:6f:29:9c:ad:4e:b7:43:21:44:b4:05:
12:b3:db:6b:ae:d1:f9:da:16:df:15:66:cd:11:03:
08:bc:1f:22:91:ce:f4:b6:6d:c3:c9:23:0e:2d:74:
28:7b:83:5d:86:da:07:a7:96:47:39:d0:f7:3d:49:
e7:83:8f:53:50:75:32:f2:72:e4:33:06:72:03:c1:
39:30:76:79:04:6e:bd:f8:e5:99:f5:ad:48:4b:e2:
9a:9b:9f:93:6b:81:6e:89:a3:8a:9a:c9:cb:4c:e6:
96:46:de:1a:5d:e2:be:66:1a:be:3e:2f:91:4a:6f:
43:82:4e:66:0f:59:01:53:b5:38:e5:38:c9:58:87:
27:7c:cb:63:67:e4:dd:5b:72:d7:7f:4a:c3:1b:d2:
4d:20:30:89:df:ab:e1:2a:ee:81:1c:de:08:ce:39:
5f:0d:fa:30:86:11:4b:f5:23:b8:ae:24:ff:b8:40:
78:00:7e:f2:cb:ae:c3:95:c5:c9:05:61:97:e0:ff:
e8:04:d9:55:8e:b0:71:c4:90:dc:94:0e:a4:29:dd:
d1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:0F:A0:46:74:62:7F:A4:30:F6:8C:AA:17:E6:01:DA:00:2D:D9:FE
X509v3 Authority Key Identifier:
keyid:0F:0C:52:94:FD:B9:C2:B1:F7:43:16:4F:C9:60:C0:07:E6:BF:E6:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ac:92:b7:6f:e1:dd:10:78:7c:29:35:2f:8a:6a:61:43:52:
e7:f0:2c:44:7c:3d:9c:d4:f4:f8:b4:96:79:82:7a:d5:19:3c:
b0:9e:e5:1e:d7:af:62:73:98:73:f2:7e:2f:16:85:9d:e3:9a:
d1:ee:49:12:8b:3c:f2:91:87:be:3e:ae:d8:7f:0a:12:fd:2c:
bf:85:95:22:16:96:5c:1b:c1:76:9a:dd:a9:39:28:3a:c6:18:
58:64:25:50:bf:61:86:61:8a:a4:df:bb:05:9b:53:df:fc:39:
64:e2:43:dd:b0:58:c6:d9:55:ba:48:70:01:6c:7f:98:56:29:
32:b9:13:a4:51:df:11:ea:6c:49:eb:50:65:2d:24:5a:f9:fd:
e6:a3:c2:1f:7d:0d:55:04:d3:aa:ff:0b:53:4f:b5:32:f3:2a:
eb:57:42:4a:df:a1:c2:57:74:5c:d5:ff:7a:72:ad:58:84:02:
a6:bd:d2:8b:4a:f4:3d:52:a9:45:72:48:a3:0f:d9:b8:3e:6c:
05:cf:a0:f0:1f:03:1a:73:24:33:cf:22:2c:4a:23:f4:08:27:
15:c5:dc:14:46:8e:e6:8a:a9:7b:a2:53:33:2e:aa:2b:34:55:
50:ad:dd:40:90:6c:2a:30:e6:d6:62:b0:07:8a:ea:ed:9e:3e:
9a:e7:ce:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:44 2026 by rpki-client