Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
File: 2-DKfB4Oihx60C0LuCi0EYiuUkM.mft (raw, json)
Hash identifier: xLAboC+O0MDOkUnrjRhQ6yD9oEJSSI/MHpbHC28FSeU=
Subject key identifier: FD:16:71:F0:62:CA:A5:78:0C:E8:53:EB:8C:65:18:F4:54:D4:DE:71
Authority key identifier: DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
Certificate issuer: /CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Certificate serial: 019D9A0749A33C685C21B99B018793A7887A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
Manifest number: 18CC
Signing time: Fri 17 Apr 2026 06:01:02 +0000
Manifest this update: Fri 17 Apr 2026 06:01:02 +0000
Manifest next update: Sat 18 Apr 2026 06:01:02 +0000
Files and hashes: 1: 2-DKfB4Oihx60C0LuCi0EYiuUkM.crl (hash: qF+3sLPA9STi4RPrv/KUjSJAB/3YmqIjpaA5rpTzqlQ=)
2: 4dJRxczuyNN9FNJF4v_Rx4xIMUU.roa (hash: UBgzb7hUFLCBP2y3aJjQr5Lt8UM6zM4uZ5rsYMA9dHY=)
3: GsIUpdelbYjW9He0Trh2nn-nCJo.roa (hash: W1f0OAwWbcszk++2k0xC55ekezko1dir/Xe9czNGlw0=)
4: mcac8XdaQu5k9ijr9gPdrLY_Eb0.roa (hash: hp3NcmZWHvHpXJbSqSb5HyI3zQ72qSQa7SF+rskCSvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:49:a3:3c:68:5c:21:b9:9b:01:87:93:a7:88:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Validity
Not Before: Apr 17 06:01:02 2026 GMT
Not After : Apr 18 06:01:02 2026 GMT
Subject: CN=fd1671f062caa5780ce853eb8c6518f454d4de71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:91:1f:e4:df:9b:3c:5f:1f:23:10:c4:cc:70:
9b:9e:31:64:88:68:29:00:bb:36:d6:7d:87:fe:e0:
91:24:1f:29:37:91:36:e9:58:70:a5:bc:d7:47:78:
c4:9a:1c:9d:10:93:16:5f:3c:30:4b:21:a0:ad:42:
ab:4a:20:8b:3c:0e:f3:94:e2:49:e1:4c:fc:c1:b5:
fd:60:e5:aa:17:93:79:6b:60:7c:a3:b7:4d:d2:94:
ed:cb:bd:0e:9f:fb:39:08:92:85:c9:8f:69:d9:42:
0f:d2:d7:68:65:f8:12:76:70:fa:6c:74:cf:02:e3:
c3:ad:33:e6:59:a1:a4:de:68:fc:a8:9b:cb:91:8d:
5b:16:9b:51:25:c0:f8:90:89:81:25:c3:b8:35:ae:
1e:b6:e3:a9:60:d1:6d:96:ca:12:0e:be:f5:4a:b5:
8a:ff:d3:87:07:68:34:3d:3c:71:62:6f:5d:c4:ab:
d8:ea:7a:aa:ef:28:62:f7:a3:ba:76:f6:15:4e:1e:
e3:91:8f:d7:8f:d8:22:76:33:8d:53:46:2a:ee:e7:
65:53:ce:00:5b:cb:48:62:8b:f1:e7:46:fc:99:9a:
27:2f:ff:65:c5:8e:d5:c8:a4:8c:66:f0:f6:35:b7:
8b:81:77:76:1a:7c:88:aa:a6:cc:92:10:84:0f:cc:
dd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:16:71:F0:62:CA:A5:78:0C:E8:53:EB:8C:65:18:F4:54:D4:DE:71
X509v3 Authority Key Identifier:
keyid:DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:2b:f9:0a:fb:e9:f5:f9:86:32:5d:7f:17:a9:f5:87:d9:5c:
69:d8:dc:f3:a7:39:7d:54:a6:13:da:dd:0e:d7:7b:11:66:5e:
76:fd:51:2a:fe:6c:94:7a:7d:84:89:e9:39:d3:d6:0e:e7:a1:
0e:93:dd:53:ad:48:86:62:02:34:fe:15:99:82:31:ee:6e:d7:
fb:3c:6f:88:ca:38:26:bc:cb:47:c7:14:29:f2:9d:9f:29:2c:
37:2b:f8:fe:a5:9f:23:dd:94:cb:3a:f3:78:5a:32:7a:b6:55:
c6:7a:7c:60:7c:fd:5e:75:3f:e1:f9:f4:42:0f:9e:e9:db:e9:
b5:0b:13:4a:82:32:38:42:bf:3d:af:6c:93:b7:c2:b1:fd:27:
61:dc:f4:4a:9b:43:ea:1d:1c:00:dd:4a:ce:9b:6c:87:29:0c:
1b:9d:72:74:b7:36:63:12:6c:5e:a9:93:27:8c:85:ef:7b:1a:
27:1d:38:c0:4d:a2:3f:1b:8d:cb:30:7d:17:00:b6:ae:da:2a:
53:c4:ca:37:0a:28:ac:d3:79:80:b6:7b:f8:16:ab:bc:13:50:
8b:f4:47:86:06:4f:ed:88:4d:57:f1:07:6d:e9:ce:3e:91:6d:
a2:30:dd:9b:cc:aa:8b:87:1c:af:09:f5:46:4f:59:1a:cf:4c:
f1:8e:cd:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:36:25 2026 by rpki-client