Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
File: dz4yeLqiScFN5gXclkssJ1Xf7Po.mft (raw, json)
Hash identifier: 0VxdmSGAXI50/8xL/DeS8Jr0yazgkibt+X4++SNMkSc=
Subject key identifier: 11:63:E6:43:ED:D4:3E:7E:96:C2:1C:F8:B6:F0:3D:9F:DA:E6:A3:62
Authority key identifier: 77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
Certificate issuer: /CN=773e3278baa249c14de605dc964b2c2755dfecfa
Certificate serial: 019DA378A00814CE345FF9DBCA0583BD2098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 02:01:24 +0000
Manifest this update: Sun 19 Apr 2026 02:01:24 +0000
Manifest next update: Mon 20 Apr 2026 02:01:24 +0000
Files and hashes: 1: Y_fqc1nYjxTRaHLL2ccHIWZVkc0.roa (hash: OwxH8E+Mnn4pbwr5I/vFQZ5F7TZIKEUW26OHA8q7WcM=)
2: dtT-U90eIRyxx5lsS__59NnNKf4.roa (hash: 5Ql6EQRlS1tFtGixp+Tf3oCCuYt86aZDSF1fLpUGr2A=)
3: dz4yeLqiScFN5gXclkssJ1Xf7Po.crl (hash: HU7+JFpehUIJTS/zKAVgVyXBsOaEL4aFzIQ8fS7KmEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:a0:08:14:ce:34:5f:f9:db:ca:05:83:bd:20:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773e3278baa249c14de605dc964b2c2755dfecfa
Validity
Not Before: Apr 19 02:01:24 2026 GMT
Not After : Apr 20 02:01:24 2026 GMT
Subject: CN=1163e643edd43e7e96c21cf8b6f03d9fdae6a362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a1:33:e6:79:44:78:0c:4e:39:ef:4c:ee:aa:
07:50:3e:d8:5d:d2:76:6b:47:66:b4:fa:14:18:5c:
69:57:d9:6f:70:59:40:fb:1c:2c:fc:28:4d:31:50:
b3:7a:d1:86:de:a4:cd:65:6b:5d:03:1a:fb:93:15:
43:db:f9:00:18:da:66:69:b4:4f:d9:85:9c:48:f1:
92:d1:b5:b9:b7:0f:87:86:49:34:18:a5:39:04:40:
7b:f2:6c:6e:e2:08:8f:b4:6c:ae:80:30:82:32:5f:
54:27:4d:0a:b9:00:a3:1f:28:e0:dc:c9:1d:6a:1f:
c3:2e:19:ea:19:34:21:26:37:e5:d9:c2:61:ed:34:
a6:79:44:1a:bb:1f:af:c2:f9:85:5e:a8:25:7d:1c:
f5:0c:90:1e:a3:8d:e6:40:95:35:1b:8e:62:af:2d:
05:e1:17:39:bd:8c:fc:a2:6d:5b:1c:99:74:2e:fd:
7a:87:64:71:15:5c:4b:e3:c2:2a:59:80:22:2b:03:
92:f4:b6:6a:a7:bd:ce:a5:ab:fd:64:16:e1:82:b4:
f3:40:f2:90:70:73:ce:73:c4:c8:78:4b:78:50:b5:
0c:bd:f0:6a:d9:02:bd:f7:34:b9:a6:32:b8:ba:95:
6e:9c:aa:63:03:f4:39:cc:41:5b:93:9c:64:9d:5d:
b6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:63:E6:43:ED:D4:3E:7E:96:C2:1C:F8:B6:F0:3D:9F:DA:E6:A3:62
X509v3 Authority Key Identifier:
keyid:77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:58:c5:7a:83:c9:4d:f9:71:b5:45:8d:9f:f9:7c:9a:1c:64:
96:c6:82:48:52:4e:55:dd:bb:fe:7d:2e:be:b9:24:33:62:40:
aa:b1:68:fc:b9:9f:6e:4c:41:a5:ee:5a:9b:3b:7d:06:dc:ec:
6f:d8:0a:1f:68:a3:41:3e:bf:15:91:96:14:71:3c:01:f3:52:
91:e8:b8:d7:be:52:9d:91:85:dd:08:82:89:f7:0a:16:7a:a3:
cf:cd:6d:be:dd:0e:77:19:c5:0a:58:e2:fc:f3:9a:36:56:0a:
d1:1d:73:bb:42:3a:fd:73:b7:9c:27:29:92:ba:1c:24:11:0d:
a1:48:12:37:05:3e:66:1b:97:e0:2c:25:da:7d:14:02:e0:61:
e5:11:9b:68:44:39:c6:9b:36:04:8d:9e:35:b6:fe:f6:46:b0:
5f:70:fe:89:60:6a:2f:e4:67:44:5f:43:5b:39:b1:24:75:23:
06:69:01:66:9e:71:16:35:83:22:ee:9a:f6:7b:53:0c:d1:03:
1b:94:f4:60:49:f0:13:74:51:cb:37:39:b9:dc:0b:de:41:38:
cc:3e:5f:ef:89:74:29:73:8e:8b:9e:9f:d2:1b:14:9d:c2:3d:
f0:1d:d3:91:a1:d8:5c:f4:17:ba:93:ec:b3:0d:c2:43:b7:13:
01:53:d4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:46:02 2026 by rpki-client