
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.mft
File: Dxd9Rq5RS92RniRMevdK337bqNU.mft (raw, json)
Hash identifier: FGEVkO+50AXj3cPUQeIiTN+38cz2m9A1fL/62aErtOY=
Subject key identifier: EF:9B:1A:F5:CE:B3:CD:55:EC:65:DA:BF:C6:2F:61:30:00:85:9C:90
Authority key identifier: 0F:17:7D:46:AE:51:4B:DD:91:9E:24:4C:7A:F7:4A:DF:7E:DB:A8:D5
Certificate issuer: /CN=0f177d46ae514bdd919e244c7af74adf7edba8d5
Certificate serial: 019DA48AEA9CE1ADBBFF3F73CA149BEA4490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxd9Rq5RS92RniRMevdK337bqNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.mft
Manifest number: DF
Signing time: Sun 19 Apr 2026 07:01:00 +0000
Manifest this update: Sun 19 Apr 2026 07:01:00 +0000
Manifest next update: Mon 20 Apr 2026 07:01:00 +0000
Files and hashes: 1: 25aFLsrtr-3cg85dYuCtUtJ12DI.roa (hash: Q6BbhiSVhBcdb9sUM5J8K87QWD5MUDWEKTLkdgJwJhY=)
2: Dxd9Rq5RS92RniRMevdK337bqNU.crl (hash: /wW66XxgEj5soB9pJv9y9MaFpJbS1NxzP27UFscK20c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dxd9Rq5RS92RniRMevdK337bqNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:ea:9c:e1:ad:bb:ff:3f:73:ca:14:9b:ea:44:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f177d46ae514bdd919e244c7af74adf7edba8d5
Validity
Not Before: Apr 19 07:01:00 2026 GMT
Not After : Apr 20 07:01:00 2026 GMT
Subject: CN=ef9b1af5ceb3cd55ec65dabfc62f613000859c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a6:eb:81:6c:97:a5:51:c7:07:c5:47:38:3e:
7f:e9:d8:ac:fb:75:e9:fe:51:a9:83:d9:c3:35:a6:
d1:c9:8a:b7:79:a5:62:a1:7c:3e:7f:3f:1a:d6:46:
93:cd:23:42:a2:03:7a:a2:fe:04:12:d4:50:79:b4:
d0:c8:53:ce:b2:37:7c:60:0b:3e:c5:93:34:9b:d6:
f4:60:2a:f4:8b:2f:77:ea:4a:e9:1d:78:b7:eb:d4:
1b:bc:cd:11:48:f0:f6:60:b8:98:5f:f1:68:d3:77:
14:4e:a7:87:33:29:08:97:5e:60:d5:7c:e6:a4:6f:
cb:cc:62:68:fe:b9:ff:64:0b:36:d9:f0:86:37:96:
54:40:47:1e:41:ef:95:63:84:23:0d:07:6b:c8:be:
18:3a:5e:db:51:d3:1a:63:84:5f:45:74:a4:65:2d:
2b:61:2b:c9:1a:01:c9:4a:6c:47:1b:00:46:19:16:
8c:8a:7c:62:61:87:78:32:d8:ed:c5:d8:aa:90:68:
cf:43:88:e3:8c:61:93:ca:3a:7f:d9:b8:7a:ca:1c:
bc:c5:a7:60:3b:0c:b6:a0:03:c2:bf:14:0f:48:9a:
98:e0:7e:a9:9c:e6:97:99:97:30:39:16:fa:6c:2e:
77:65:1b:9c:71:a6:e6:9d:59:95:81:04:5c:f9:c4:
de:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9B:1A:F5:CE:B3:CD:55:EC:65:DA:BF:C6:2F:61:30:00:85:9C:90
X509v3 Authority Key Identifier:
keyid:0F:17:7D:46:AE:51:4B:DD:91:9E:24:4C:7A:F7:4A:DF:7E:DB:A8:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxd9Rq5RS92RniRMevdK337bqNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:46:8d:2a:9c:8f:15:d3:e9:19:20:a4:6b:26:d2:5a:e7:16:
f9:88:b3:e3:80:3f:a1:c8:f0:1f:e0:e3:2c:5b:4a:0b:84:49:
11:87:b8:1c:80:45:9c:2a:fb:7a:e1:1c:c2:ce:c8:e0:8f:db:
6b:23:ae:4d:3d:c1:d5:22:9e:1f:ab:ee:ed:34:d9:51:16:a4:
36:18:3e:bd:35:e1:df:05:a1:2c:48:17:a2:67:ad:4c:b1:3f:
f9:13:69:9d:76:4a:00:cc:d4:36:2b:49:c3:a3:3b:55:20:e3:
50:68:42:96:9b:da:ab:94:ac:1e:ec:48:85:b8:ee:74:ea:8c:
76:d9:73:23:cb:3c:3c:fc:42:18:e3:2c:53:8f:97:5e:3a:aa:
fd:f4:53:6c:31:2a:04:cc:a9:82:74:39:d8:44:47:b2:3a:d4:
de:bb:63:8a:c0:9f:37:51:79:87:17:c7:98:14:7e:eb:0e:f6:
83:f6:8b:0d:d7:23:e6:c0:f4:88:3a:01:cc:ac:4d:5c:a9:af:
76:50:ce:3e:a7:0a:a9:33:39:45:4c:a4:6d:c4:33:61:8e:36:
aa:99:bf:9c:61:e8:d9:94:43:2c:99:9a:f3:49:40:14:b5:3f:
02:40:8a:4e:56:d3:55:d2:78:53:b6:47:53:a3:d0:0a:b4:1b:
0c:17:72:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 16:53:03 2026 by rpki-client