Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
File: dhwFdTsZvNtTL9x_b0fpfpNboKI.mft (raw, json)
Hash identifier: e4h5z/5ThnmLo9HiYvNrumH/IHj3WqPkYq3/Asxugos=
Subject key identifier: B8:06:FC:2E:52:1C:C8:11:CF:F1:D1:CC:F6:21:3F:61:A6:31:E4:7D
Authority key identifier: 76:1C:05:75:3B:19:BC:DB:53:2F:DC:7F:6F:47:E9:7E:93:5B:A0:A2
Certificate issuer: /CN=761c05753b19bcdb532fdc7f6f47e97e935ba0a2
Certificate serial: 019D98BD3BE4596DE8B1E8D174CDAD8B7F8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
Manifest number: 13A1
Signing time: Fri 17 Apr 2026 00:00:31 +0000
Manifest this update: Fri 17 Apr 2026 00:00:31 +0000
Manifest next update: Sat 18 Apr 2026 00:00:31 +0000
Files and hashes: 1: NqpHuEMuxziK_s6FwV4-BlExn5I.roa (hash: vG3pCOebbp8ka7ppT4ebnWl3F1yFRDRI4TRKdbhBhzs=)
2: dhwFdTsZvNtTL9x_b0fpfpNboKI.crl (hash: kjy9aEClMnu1G9a/+a1Ebc7RPMyw+yqQ8JOH34pZkN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:3b:e4:59:6d:e8:b1:e8:d1:74:cd:ad:8b:7f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c05753b19bcdb532fdc7f6f47e97e935ba0a2
Validity
Not Before: Apr 17 00:00:31 2026 GMT
Not After : Apr 18 00:00:31 2026 GMT
Subject: CN=b806fc2e521cc811cff1d1ccf6213f61a631e47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c0:a1:f5:1a:7d:47:8a:60:18:6c:a5:da:1b:
a5:e8:8b:5e:7c:73:f1:16:6d:44:5d:89:b9:9c:7b:
ba:33:d4:89:c3:fb:5e:6e:76:f8:3f:16:3c:01:dc:
5a:79:28:5f:c1:25:18:73:3b:74:f7:bf:6e:e7:6d:
24:15:b2:50:bc:88:d9:6f:31:11:7b:5a:87:7e:af:
ba:54:48:42:e8:dd:a4:70:5e:2c:56:42:3b:d3:57:
77:4f:9f:54:15:75:a5:6d:2e:51:1d:d5:3b:bc:fb:
58:da:4a:8d:82:81:6b:53:51:c5:0c:42:5b:39:eb:
9d:cd:06:7d:47:0c:7f:df:7b:a9:66:e5:08:3b:73:
9b:4d:b3:62:b6:44:6f:d2:43:53:5a:0a:8d:06:2f:
c9:fe:13:bc:b4:a9:8a:31:8c:b4:03:b0:21:d6:c8:
04:ce:f1:57:c4:46:71:30:7f:10:3b:40:ea:19:a9:
e4:8d:2f:f7:20:76:ec:db:ac:49:44:e7:12:e9:29:
ac:c1:df:3b:fb:b8:c0:e3:48:ce:23:05:be:e5:eb:
d2:b3:11:bf:6f:4e:d4:9f:98:c5:ff:ca:cb:85:cc:
d7:11:ce:bf:4e:60:41:ed:bb:4d:3f:c9:8e:a7:9d:
dd:e5:b3:e5:da:12:d5:76:b9:8c:5f:3f:fb:5a:33:
c3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:06:FC:2E:52:1C:C8:11:CF:F1:D1:CC:F6:21:3F:61:A6:31:E4:7D
X509v3 Authority Key Identifier:
keyid:76:1C:05:75:3B:19:BC:DB:53:2F:DC:7F:6F:47:E9:7E:93:5B:A0:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:01:7e:d2:26:c8:98:cd:38:89:41:da:5d:e3:5d:40:f6:0b:
57:73:4b:4f:7b:85:3c:b7:26:c3:56:a6:48:16:5e:25:3c:b3:
c7:a8:65:70:31:f5:db:f0:92:ef:01:1c:89:99:db:e6:44:c2:
f1:f3:7c:f7:e9:15:50:ac:90:ca:02:19:b7:1a:bf:1a:33:e5:
0c:02:8b:e3:a4:2f:cd:59:1d:e8:0a:af:e1:4a:73:97:72:27:
21:d0:12:e4:81:1a:14:36:1d:60:3c:da:3d:6e:3b:63:7f:fc:
ee:86:a1:06:2d:4b:61:f0:2c:42:86:5c:f4:f2:cf:17:80:51:
ee:19:d8:37:2f:69:47:33:f3:c8:37:fa:01:ae:4d:bd:5b:e4:
53:b6:db:d0:7b:60:bb:90:78:4f:a6:26:69:c5:bf:9f:21:07:
dc:65:03:15:da:03:64:95:d1:90:d4:92:9b:0a:52:c1:62:63:
9b:d9:4b:d3:99:8c:de:f0:cf:19:f5:05:6a:02:2d:14:a8:e8:
4a:86:4b:6b:a3:5b:4e:e7:9d:11:e3:7a:08:dd:13:06:16:7f:
5f:6a:3e:69:ee:82:1f:f4:f5:75:62:8b:7b:f8:bb:d2:c4:c3:
5d:4f:9a:78:47:b8:1f:51:07:eb:67:f1:2f:16:2b:18:ae:af:
12:db:00:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:47:32 2026 by rpki-client