Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft
File: dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft (raw, json)
Hash identifier: j4xyyxJLMCYFpUTy+6NZk/2zzg7wBGLKCrhv4efZM6w=
Subject key identifier: 57:D3:76:71:83:34:EA:92:60:3E:83:D9:A3:49:58:62:E8:34:6D:EB
Authority key identifier: 76:9A:0E:D1:35:91:D4:B8:4C:A7:9A:8E:B5:77:22:60:76:65:1A:14
Certificate issuer: /CN=769a0ed13591d4b84ca79a8eb577226076651a14
Certificate serial: 019D9C2C5C26CFCCBC09322C0FF3ECB78630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpoO0TWR1LhMp5qOtXciYHZlGhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft
Manifest number: 0CD1
Signing time: Fri 17 Apr 2026 16:00:45 +0000
Manifest this update: Fri 17 Apr 2026 16:00:45 +0000
Manifest next update: Sat 18 Apr 2026 16:00:45 +0000
Files and hashes: 1: EN7XiEfKlFXBlZqtNN-oRqqWPD8.roa (hash: hOsYakPKoUo+w1ZXynrtNEWFAogAYXmthy1G2XJLeXc=)
2: dpoO0TWR1LhMp5qOtXciYHZlGhQ.crl (hash: fqBxgGS/HZfNZfLkgDn+l9hf0EZFkw4PA9dfTplK2ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dpoO0TWR1LhMp5qOtXciYHZlGhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:5c:26:cf:cc:bc:09:32:2c:0f:f3:ec:b7:86:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=769a0ed13591d4b84ca79a8eb577226076651a14
Validity
Not Before: Apr 17 16:00:45 2026 GMT
Not After : Apr 18 16:00:45 2026 GMT
Subject: CN=57d376718334ea92603e83d9a3495862e8346deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ba:a9:4a:07:97:ba:08:5d:fe:89:ff:29:bf:
76:c9:9a:c9:cf:06:d6:89:14:78:88:87:9a:bf:b2:
c1:19:f7:2f:28:91:e8:7f:f2:50:6b:ed:9f:fc:7f:
f5:64:05:38:54:8f:0c:75:d5:f0:25:95:c8:e9:57:
c6:ad:4a:fd:6c:89:15:0f:be:67:bf:3c:b3:cc:ac:
64:20:a6:08:58:48:a6:4a:8d:e4:53:8b:14:3e:0a:
39:23:91:24:bd:66:8a:92:ae:9d:85:9e:a4:ae:81:
fd:0f:95:dd:b6:cc:9d:97:ef:c2:f4:6d:b1:76:13:
70:19:40:6d:a7:39:70:02:b5:73:fe:38:3e:47:46:
27:1f:1e:e4:59:55:84:5b:ff:bd:5e:09:30:3d:43:
67:84:c8:50:66:a8:3a:e7:7c:61:2c:ca:2f:1a:68:
1e:97:c1:24:52:99:22:73:9e:c0:e2:6a:d2:e7:ed:
f6:f5:c3:66:99:3e:3c:65:37:f7:f1:ed:50:5b:4e:
34:81:c4:d7:89:e9:49:8d:56:26:eb:6d:3f:4e:da:
31:1d:20:c7:55:17:ed:ad:43:52:4f:f4:08:e1:6f:
f1:16:a2:98:61:28:22:a5:20:02:b7:5d:48:57:ea:
9e:8b:54:b1:82:a4:26:26:a8:ac:1c:8c:39:93:35:
b8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D3:76:71:83:34:EA:92:60:3E:83:D9:A3:49:58:62:E8:34:6D:EB
X509v3 Authority Key Identifier:
keyid:76:9A:0E:D1:35:91:D4:B8:4C:A7:9A:8E:B5:77:22:60:76:65:1A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpoO0TWR1LhMp5qOtXciYHZlGhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:32:cf:46:17:8b:4c:48:c0:62:84:e5:f2:73:05:16:9a:8d:
f7:20:44:58:2b:0f:05:54:da:d6:38:39:a6:d1:9a:c5:ef:54:
30:bb:4a:23:59:b9:72:08:f5:96:a0:23:f0:0d:a6:bf:10:66:
4a:7b:f3:af:53:05:b4:87:e1:b1:e9:8c:d5:5a:48:2d:73:43:
58:c4:02:ba:c8:40:e7:1c:43:5d:32:ea:b5:15:85:0b:60:a4:
0a:c5:32:52:df:af:52:ef:80:23:b9:26:a7:16:76:6a:68:4d:
38:ac:41:64:bb:31:f9:8b:12:4b:a6:72:ce:ac:c8:b9:d2:58:
ad:3e:13:55:fa:d5:91:18:9a:0c:98:ea:c0:6a:ce:11:d8:f0:
c1:3a:44:be:c6:ef:4f:8f:cb:02:e1:0f:ec:f5:5b:0d:fa:fd:
44:3f:b5:89:fc:0e:ad:06:ce:45:ac:e7:be:2a:8d:7d:3b:e9:
a4:31:b2:cf:9d:4f:b6:e4:64:6f:d3:61:c3:c4:d8:b6:99:6e:
5c:d5:c7:ed:e6:27:fa:4f:cf:29:28:71:fc:01:b1:04:04:04:
db:7d:9d:7f:03:62:eb:5a:8f:17:a3:97:6b:d4:27:d0:4a:e5:
48:42:30:41:cd:4f:46:a4:7d:e6:0f:5f:20:73:e9:ae:5b:3f:
48:ef:5f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:32:30 2026 by rpki-client