Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
File: dxBykg2MmitA6zoEXx8qbjNKRJY.mft (raw, json)
Hash identifier: afbz7B7qxd5g7BU7YzZAMRDpaNYJYjzp3r3d8vsbgpY=
Subject key identifier: A7:00:A4:62:8A:C9:75:E5:0C:5B:DB:AB:6E:91:0D:55:FA:33:17:B3
Authority key identifier: 77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
Certificate issuer: /CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Certificate serial: 019D9CD130FDCDAC3AB090D3D3B5DC025CDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 19:00:48 +0000
Manifest this update: Fri 17 Apr 2026 19:00:48 +0000
Manifest next update: Sat 18 Apr 2026 19:00:48 +0000
Files and hashes: 1: dxBykg2MmitA6zoEXx8qbjNKRJY.crl (hash: gnvFeHys/dMPsxY4Q8CwXNLqVfYOvlafN6u1jkDAugY=)
2: qMa40C2bwbsuAhlKHVj7zBev3Sk.roa (hash: Q1yI4h86YGsQR3DwWZlfSBoYmM0cIR/AXm0wW8+aF5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d1:30:fd:cd:ac:3a:b0:90:d3:d3:b5:dc:02:5c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Validity
Not Before: Apr 17 19:00:48 2026 GMT
Not After : Apr 18 19:00:48 2026 GMT
Subject: CN=a700a4628ac975e50c5bdbab6e910d55fa3317b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e8:0f:b7:78:83:26:2c:67:4c:45:24:87:c0:
af:f6:48:7c:ca:13:02:85:bd:51:46:ca:98:01:3f:
af:b5:0e:34:eb:b2:33:59:32:df:dc:32:e7:6c:a3:
d1:d8:04:de:41:de:26:9d:bb:cd:2d:f4:f6:8d:64:
95:a6:e1:4d:e9:39:09:cf:47:49:52:38:71:f7:4a:
2d:09:16:59:f6:8c:af:0c:ee:21:61:f6:47:42:2f:
f1:a3:f3:42:3e:c0:bb:78:7b:c6:c7:0e:eb:14:c8:
f9:c5:df:41:7b:3d:ef:f1:84:e7:66:37:b4:be:84:
be:ed:8d:bd:52:4b:23:fd:b5:34:68:12:02:74:87:
3c:27:c4:97:7e:0a:92:7c:71:9a:70:b4:21:3b:2f:
fa:93:fb:18:8c:cd:d7:50:6a:64:cc:f7:9d:e5:af:
8a:c0:a8:50:22:c4:6a:53:39:bc:7b:47:d3:77:3a:
fb:b7:46:30:0d:98:38:17:61:20:4d:e6:be:37:a6:
4e:6e:96:14:75:fb:d0:e0:4e:98:c5:b3:6b:e0:d6:
8d:93:c6:6c:93:1f:b1:3d:39:42:a3:11:72:0e:cb:
7a:8d:ec:a2:c7:72:7d:c2:b4:36:ef:8d:e2:cd:f8:
e6:36:b0:4a:f4:7d:f8:6e:a5:af:99:30:51:65:fe:
55:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:00:A4:62:8A:C9:75:E5:0C:5B:DB:AB:6E:91:0D:55:FA:33:17:B3
X509v3 Authority Key Identifier:
keyid:77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:7c:b4:da:0a:d6:64:fe:62:82:1c:0a:f5:b0:53:9e:65:79:
57:10:db:4b:c5:79:fc:14:8c:fa:37:72:81:4e:93:f7:22:60:
cd:61:45:1f:ff:65:66:d9:05:b9:20:45:76:79:69:ba:8a:98:
bd:a4:fe:57:d6:0a:11:07:be:42:fd:fb:7d:85:98:5c:1f:46:
fc:c1:3b:52:a5:78:1d:d6:bb:25:bb:7f:41:f5:8f:0e:d5:8a:
4b:e6:96:ba:dc:7e:b0:f7:9b:2d:10:b6:97:74:18:fa:3b:54:
66:e9:c3:40:7c:81:df:67:84:0c:cf:32:d9:a0:7f:2b:b1:95:
9a:e8:80:b8:da:2e:1b:2c:94:b9:e3:27:a4:6f:fb:76:18:d2:
05:8e:d2:03:c8:f6:4e:03:e1:b6:bc:6a:c4:83:e0:86:2b:74:
fa:c9:73:c5:41:87:88:41:5d:08:04:07:e6:d7:70:4a:0c:d8:
70:be:3c:16:01:ee:7e:9a:c7:06:cc:f3:ca:2f:3d:48:da:8f:
04:c2:1d:11:80:df:ed:ac:98:e6:72:aa:45:5c:09:9f:0b:2c:
31:61:33:8b:f8:34:1d:18:ae:3b:9b:cb:c6:b3:e6:ab:c0:5a:
a3:e0:5b:c5:ad:51:1f:22:54:b6:1b:3d:65:25:45:37:b0:81:
4a:b6:b8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:49:57 2026 by rpki-client