Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft
File: dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft (raw, json)
Hash identifier: 46Z654s73WgE82xGr0rlO3poNEIhlhvmrNSU/Y0h/FY=
Subject key identifier: 4C:1A:0A:CE:B6:32:E5:AC:AF:C9:02:21:06:6A:84:4F:52:46:BD:53
Authority key identifier: 76:41:36:C3:CD:BF:D5:FB:60:CA:FD:4A:9B:1D:47:3A:3B:67:26:35
Certificate issuer: /CN=764136c3cdbfd5fb60cafd4a9b1d473a3b672635
Certificate serial: 019D9962A8FF361F653FAF7A81209C4BCED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkE2w82_1ftgyv1Kmx1HOjtnJjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft
Manifest number: 0CA7
Signing time: Fri 17 Apr 2026 03:01:12 +0000
Manifest this update: Fri 17 Apr 2026 03:01:12 +0000
Manifest next update: Sat 18 Apr 2026 03:01:12 +0000
Files and hashes: 1: UiW9TcEusiItMBq7nV2nhZZMmD4.roa (hash: QFbJs2g7PxyJWfYn1SH51WxmFD2sPMhhQe/rD/6hstw=)
2: dkE2w82_1ftgyv1Kmx1HOjtnJjU.crl (hash: IqDAgGy3TzVMjWiG30dX0XsenyQvp0bl1HKNRMYbwcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkE2w82_1ftgyv1Kmx1HOjtnJjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:a8:ff:36:1f:65:3f:af:7a:81:20:9c:4b:ce:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764136c3cdbfd5fb60cafd4a9b1d473a3b672635
Validity
Not Before: Apr 17 03:01:12 2026 GMT
Not After : Apr 18 03:01:12 2026 GMT
Subject: CN=4c1a0aceb632e5acafc90221066a844f5246bd53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1f:fd:cd:63:4e:6c:e0:b1:d0:27:5d:8c:b7:
12:dd:c1:f8:9d:0d:cf:96:73:33:ff:80:76:e3:97:
94:10:c2:d5:5c:c8:2a:cc:fb:a7:ff:b3:95:61:f4:
44:e8:14:a4:60:3c:04:5c:60:a6:f6:22:36:ae:12:
69:94:50:c6:20:e0:dd:c0:0f:f3:06:e1:c9:59:3c:
64:4b:ac:99:06:e1:b2:57:f9:42:99:e7:c8:6e:bd:
95:ba:80:d8:4c:23:41:bb:86:6f:40:da:ca:c7:3d:
e8:6c:3d:1f:2a:c6:d9:9c:26:f5:11:70:c3:12:1c:
5c:aa:2f:c8:7b:37:fa:0f:d4:e5:b6:10:3d:13:7f:
7b:ee:87:02:6c:67:29:08:49:5b:c6:ce:ac:67:b7:
f4:b2:47:8e:d4:88:b7:27:94:8b:78:ec:ba:97:8a:
95:19:25:c3:a8:d4:09:63:5b:30:9e:0c:56:5b:7a:
9f:ed:a9:0d:21:ca:38:20:d7:b4:42:3f:0a:3a:3e:
96:63:b2:ed:e3:51:0f:66:1b:0a:ca:56:b3:a9:3a:
3e:b6:29:52:d2:14:aa:71:9e:67:c3:a2:c7:e7:9a:
44:e9:95:4e:22:bd:7d:19:97:79:38:38:0d:4c:8c:
97:f9:9b:30:e7:ec:d6:86:fc:40:df:e4:c8:b0:cf:
3c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1A:0A:CE:B6:32:E5:AC:AF:C9:02:21:06:6A:84:4F:52:46:BD:53
X509v3 Authority Key Identifier:
keyid:76:41:36:C3:CD:BF:D5:FB:60:CA:FD:4A:9B:1D:47:3A:3B:67:26:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkE2w82_1ftgyv1Kmx1HOjtnJjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:05:f8:b7:f5:74:87:6d:c4:9c:6a:b4:88:2e:69:f9:72:8b:
0d:43:59:e9:24:d2:62:58:42:66:7b:9a:b1:d3:38:9a:0a:8a:
4a:27:bd:02:fe:95:87:a4:92:d2:85:1f:3d:1d:c3:c7:0b:1d:
12:68:d8:cc:15:9c:42:67:f2:44:88:73:a4:49:b4:bc:74:93:
b3:6c:cc:17:23:43:a7:25:96:81:d6:2c:e9:f5:60:f0:82:a1:
8e:29:64:b9:ba:7a:fe:85:0f:d6:96:b9:ea:97:e5:57:4e:03:
da:c1:60:64:56:40:9c:46:65:41:5a:95:c0:90:e9:ee:ba:eb:
3a:cb:7d:67:b2:86:0a:2e:0e:1b:1c:5e:b0:84:82:03:4c:41:
fc:07:79:41:75:68:c7:75:4f:09:75:7e:d5:ed:83:a6:0e:15:
b4:bb:a4:ce:0d:a5:53:c5:3f:b6:b6:81:69:ac:61:2c:8f:a0:
e9:ca:6c:04:02:43:36:b2:e5:10:89:bc:8b:8b:09:4f:7f:c1:
31:32:d7:54:fe:da:72:19:1d:67:52:b7:15:71:e3:fc:75:8c:
6d:76:5b:21:ca:bc:e5:a0:c5:9a:df:c7:9f:0f:bb:37:57:62:
a5:ff:30:89:7d:73:5e:ba:f3:ed:f0:a8:02:26:4a:f6:f4:e5:
58:1f:53:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:03 2026 by rpki-client