Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
File: dxBykg2MmitA6zoEXx8qbjNKRJY.mft (raw, json)
Hash identifier: DAv6KCVeV64ArxRLY+cSl4kmrgrfz1TO/y6IVruSRVY=
Subject key identifier: 39:06:1E:CA:ED:62:C5:84:48:4D:04:CA:04:85:58:12:53:BC:AA:92
Authority key identifier: 77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
Certificate issuer: /CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Certificate serial: 019D9AE39624291E0405CD3EBF3DD8E47DE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 10:01:39 +0000
Manifest this update: Fri 17 Apr 2026 10:01:39 +0000
Manifest next update: Sat 18 Apr 2026 10:01:39 +0000
Files and hashes: 1: dxBykg2MmitA6zoEXx8qbjNKRJY.crl (hash: VbQQ6RzoH6llHucAczsB7mr4SOpt2ua0C8k2XIoGk/8=)
2: qMa40C2bwbsuAhlKHVj7zBev3Sk.roa (hash: Q1yI4h86YGsQR3DwWZlfSBoYmM0cIR/AXm0wW8+aF5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:96:24:29:1e:04:05:cd:3e:bf:3d:d8:e4:7d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Validity
Not Before: Apr 17 10:01:39 2026 GMT
Not After : Apr 18 10:01:39 2026 GMT
Subject: CN=39061ecaed62c584484d04ca0485581253bcaa92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:70:60:67:cd:dd:c9:0d:1e:df:4e:7c:19:80:
a8:06:dd:a9:12:62:13:32:28:9b:72:22:fc:b6:d4:
d4:f0:87:ab:ee:28:8d:8c:46:f0:39:01:9f:03:a2:
3e:fc:c0:fb:a1:b0:f1:ab:42:91:2d:df:ce:7f:95:
b4:d6:59:f6:64:a3:eb:51:dc:2a:6b:d5:7f:28:33:
84:3c:32:59:37:e9:b1:7a:cc:e9:e9:bc:90:18:81:
f9:82:c2:69:d6:37:b1:3d:31:13:77:0b:ef:a6:f7:
b5:04:92:a8:0f:2f:96:56:ab:4a:9f:e8:79:94:dc:
cc:e2:38:6a:14:31:9c:63:68:ff:e1:5a:f5:4a:8b:
14:4d:2d:fc:4f:ac:3b:a9:c5:27:bb:20:87:dd:74:
f4:8b:fe:86:0e:c7:31:3a:e3:84:f1:c3:0a:d8:5b:
08:c7:24:71:03:46:61:dd:82:4b:96:54:c4:f9:35:
c7:ee:72:ba:ec:3e:0f:6f:73:ee:3c:f5:8c:0d:a9:
7f:a7:60:f2:eb:6c:fd:8d:ab:86:eb:3a:67:d1:5e:
93:e6:8a:39:22:d3:c2:06:db:3e:c0:0a:65:9a:6f:
44:68:80:09:bc:f0:7d:7b:af:c4:96:e4:39:63:f7:
10:b7:ca:5e:a8:51:3c:19:fd:69:5f:fb:cc:18:64:
8b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:06:1E:CA:ED:62:C5:84:48:4D:04:CA:04:85:58:12:53:BC:AA:92
X509v3 Authority Key Identifier:
keyid:77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:73:82:c8:76:4c:b0:44:18:65:bd:91:5f:2c:2b:54:5b:26:
b3:05:c5:f2:91:48:36:25:c5:75:13:0f:bf:32:22:bb:4e:85:
a2:54:16:75:09:f2:fc:5a:95:34:8c:fa:16:d0:77:63:be:b7:
ef:54:a9:8f:4e:b9:eb:65:29:33:5f:d4:7b:da:4f:8b:96:50:
c1:be:1f:c6:47:fe:8f:2c:ce:4f:df:34:14:5a:52:50:a5:52:
69:11:95:c1:0d:68:cb:78:c6:4a:d2:b0:22:19:ae:db:aa:da:
3a:9f:e9:43:f5:ac:ad:60:b5:b8:fb:76:6a:6e:bc:31:7e:89:
1d:ed:95:f0:9a:3b:f0:31:bd:1a:dc:7c:87:33:42:d7:79:dd:
1d:71:15:cb:cf:3d:5b:f9:98:46:bc:d0:96:97:75:e9:86:d9:
ba:13:ca:1b:d8:a0:74:38:46:52:2a:0a:34:d5:e9:77:6f:a1:
7b:20:18:63:b6:fd:c9:34:28:33:3c:80:33:21:08:72:88:8b:
5e:9c:be:ae:43:8b:fc:f4:94:08:16:63:b7:a0:ad:cb:f8:e2:
b4:da:c9:71:47:bc:5c:79:01:2e:75:6c:94:bf:00:66:09:38:
a9:b4:57:15:d0:6a:20:03:05:7e:a9:94:2c:88:43:4b:55:0b:
79:2e:47:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:32:53 2026 by rpki-client