Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
File: DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft (raw, json)
Hash identifier: DjKXqP6ECE/MPHZ7SqM3C4+R1a4jgsKLsdeWi2gxo9U=
Subject key identifier: DD:87:F0:1F:95:79:4D:C8:F0:D1:13:62:5A:95:41:D3:0F:5E:85:55
Authority key identifier: 0D:93:02:D5:46:E0:68:C2:FD:76:77:D9:D5:20:0A:DD:36:C8:BC:D5
Certificate issuer: /CN=0d9302d546e068c2fd7677d9d5200add36c8bcd5
Certificate serial: 019DA378418955E9FABB381C6D87BEECF467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 02:01:00 +0000
Manifest this update: Sun 19 Apr 2026 02:01:00 +0000
Manifest next update: Mon 20 Apr 2026 02:01:00 +0000
Files and hashes: 1: DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl (hash: rpG2+7XquiRD3iftYarGIeZD2/rtFxfHGuIHzWYMEqs=)
2: Ty_PZDqaOmeFjLIdr3QFueerKIM.roa (hash: mfeK6p+b2jXbJTu7RkO60pgbrZY/WThNdE0YkaHIazA=)
3: ZK_lplNOHoj8XGWdtaGMmSrc3x0.roa (hash: /qdKs+yTlrC/OXEPfuDp9SEn7i6+ObqNyY75S5FZQO8=)
4: _7jylL9q9B68bc5gOBCT4NAKAwE.roa (hash: udwwApN1RRRAB/0kSZzWjgDibuhxWbwtgPuXqFkvmuE=)
5: cpElJSiXGO7jJAVo9S1jen5uhjQ.roa (hash: jXHD1yWMKx7op/sh3fiD9gaMHojOuxsjiA1ioAXvW84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:41:89:55:e9:fa:bb:38:1c:6d:87:be:ec:f4:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d9302d546e068c2fd7677d9d5200add36c8bcd5
Validity
Not Before: Apr 19 02:01:00 2026 GMT
Not After : Apr 20 02:01:00 2026 GMT
Subject: CN=dd87f01f95794dc8f0d113625a9541d30f5e8555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:53:2d:35:e9:72:27:f8:19:97:d3:4d:fd:e4:
fd:8e:1e:cd:b5:64:3f:0b:76:62:51:89:79:5f:af:
17:58:fc:24:5b:53:7e:0c:74:86:04:56:ad:bf:0b:
ca:c0:30:01:d4:0d:39:9d:4e:91:94:ae:95:ce:4f:
51:a9:02:99:15:97:a7:3a:db:ae:ee:60:09:aa:90:
0e:f4:93:25:89:14:e0:77:4f:98:a3:c6:3c:2f:d7:
4b:a9:c7:18:d3:d6:43:35:49:ba:82:41:84:8e:a2:
e4:d1:cd:49:7c:f2:6e:c1:9e:f0:a5:95:2d:85:3b:
eb:a1:78:7f:de:4f:1b:8d:d8:88:0f:91:3a:4d:60:
45:f6:18:da:ab:5a:62:97:3e:b9:f2:e5:28:90:05:
d0:98:79:2a:ed:31:18:59:0b:2e:04:ff:49:6f:33:
d0:0c:a5:ce:5c:f7:ec:47:0f:33:e2:a0:c7:c4:5c:
a3:2b:0c:41:c2:77:9a:cd:69:ce:d8:b4:c6:86:94:
26:7c:fb:6b:03:48:5c:b9:8a:14:9d:40:af:3e:0a:
69:6e:75:e5:52:2d:d3:a0:c1:06:89:ae:22:c5:fa:
55:e4:a2:4a:f9:3a:87:22:2c:83:3d:07:49:47:ad:
35:8f:6e:83:7b:45:41:35:bc:29:b4:95:ec:e8:98:
40:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:87:F0:1F:95:79:4D:C8:F0:D1:13:62:5A:95:41:D3:0F:5E:85:55
X509v3 Authority Key Identifier:
keyid:0D:93:02:D5:46:E0:68:C2:FD:76:77:D9:D5:20:0A:DD:36:C8:BC:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:1c:73:bc:08:b5:be:65:42:bc:80:84:a0:dd:65:6d:91:ee:
00:4b:7c:15:73:18:67:82:7e:b0:e6:6a:f8:b4:49:e8:ad:5a:
e2:ab:08:60:e0:84:3a:88:7a:ff:52:5f:93:54:38:2c:3e:48:
52:a4:b1:e3:f1:fb:00:8e:5e:4b:03:23:85:21:78:77:15:ad:
4b:07:d5:81:bd:ad:9c:8a:82:66:22:ec:0e:66:d9:f2:7f:22:
b2:d5:11:42:41:0d:cc:92:a8:78:ae:3e:44:2b:e1:20:f4:94:
64:15:78:6e:c4:ae:83:0a:55:23:88:b7:14:cc:b3:f5:8a:0c:
87:64:2f:63:c2:76:9b:2c:81:9d:78:46:1a:d9:fc:c4:1e:13:
ee:64:e1:d8:ab:f2:01:ed:f0:f6:01:91:22:a0:97:3a:71:c1:
26:4b:a5:a4:d3:60:f8:43:36:19:e6:df:d6:34:02:b5:30:ce:
4a:45:a4:0a:b6:50:dd:cc:cc:04:61:8f:f2:72:e0:74:9a:78:
19:0b:f2:7e:a5:2b:30:84:07:02:58:f9:bd:be:08:d1:23:2f:
b0:39:0a:49:cc:7d:31:24:8e:cd:de:56:2c:49:c5:cb:a7:11:
26:28:dd:95:85:cf:65:64:2d:0a:6c:6d:3a:29:87:6f:3f:fd:
20:99:f9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:39:57 2026 by rpki-client