Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
File: DU7hk7MBZltW9ngPIl_UTRRAk68.mft (raw, json)
Hash identifier: l0ABQf2MAU00gfMIpKbBCz3Qx4kxdVF9VcMx4lqXW9E=
Subject key identifier: AD:EE:A1:42:79:F8:90:A7:7D:5E:79:74:D1:61:A7:46:88:1A:0A:2C
Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
Certificate issuer: /CN=0d4ee193b301665b56f6780f225fd44d144093af
Certificate serial: 019D9A3EEC4F3CFA3EAB181A565E541C4A65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 07:01:48 +0000
Manifest this update: Fri 17 Apr 2026 07:01:48 +0000
Manifest next update: Sat 18 Apr 2026 07:01:48 +0000
Files and hashes: 1: CD3PRWosTdH8Ulv5wScytKKOYQc.roa (hash: DEvo9dF1HZV7MXeXGbHtNkQP9R2Rjhzg0DnvAg1eibQ=)
2: CLIoybonm404BMxqfMu0fHHdCn4.roa (hash: Xh/MYJQcCtIDiyyDKrkddv4okZMGRqLr7KLy9iwERKQ=)
3: DU7hk7MBZltW9ngPIl_UTRRAk68.crl (hash: qzSinSbJcnmwrCZ5sEztIbOwrnoktO95LzZTky604C8=)
4: EQaCUZIVsXpGeGJub7JeUMDjQ5M.roa (hash: 0qDR8fqSNz6JKdvLNgWWpIOcGmvV7VtLTyHMuKF/8x0=)
5: pG4aRNi_tEglnHI4DZvr_Hj0KjI.roa (hash: 2A2zhBJlJ7gWPMPRjDvIHU22Z6SYQxUGXQxhlbRhuWg=)
6: vu_u7kwt45Cp4hiMkb1Rr3bcJAw.roa (hash: yGtKCejsbEuh4pXZZMT/qR4iqqRGZisKbAnR4Obgl/4=)
7: wAmyACSqLjnSmQEp7cXSGyFoWDM.roa (hash: 97xw7yMr/LKOcqtIasEtRCu3d3Z0Fm14QWb7ZfjVI+s=)
8: xZrWPBW5BgagoG32ZyaRPBaTphw.roa (hash: onQW5dWz2jt0k79UU0nLBPXrjY42Umj7KP17o4I6s9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:ec:4f:3c:fa:3e:ab:18:1a:56:5e:54:1c:4a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af
Validity
Not Before: Apr 17 07:01:48 2026 GMT
Not After : Apr 18 07:01:48 2026 GMT
Subject: CN=adeea14279f890a77d5e7974d161a746881a0a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:78:d7:30:8c:10:f4:64:66:d2:50:49:ec:81:
2e:bc:8a:f2:04:4a:a9:26:05:e3:a6:05:50:e0:2d:
ab:2b:ce:62:89:a3:a6:47:a9:83:99:eb:5e:b7:09:
12:3b:0f:da:1f:cd:40:80:ea:dd:40:e1:2f:c5:73:
f4:c2:af:8a:56:41:f6:82:95:7d:7e:a9:7a:f7:d4:
80:b6:20:b1:4d:ca:e9:14:42:20:d8:45:da:d7:6b:
68:98:28:58:7a:b7:35:0b:f3:e9:bc:5d:3f:56:1c:
ef:fb:1f:71:60:46:83:bc:7c:52:79:07:5a:95:e0:
1b:7f:31:a0:8e:57:8a:b4:a7:05:45:0d:25:af:a5:
d5:4f:04:0c:e7:e1:4d:dc:73:7c:28:9c:35:98:e0:
9e:f8:e1:8a:d1:0d:ed:97:bd:80:0d:7b:25:78:8b:
07:a7:3d:3d:86:59:13:63:41:73:38:04:74:aa:0c:
d5:ff:52:c7:3e:d0:d9:e3:8a:f6:16:d6:14:93:2a:
10:9b:aa:a1:d5:89:98:06:1e:65:8b:79:d9:2f:99:
05:31:a1:42:f5:02:e4:a7:32:83:95:b0:57:2c:50:
bb:45:8f:6e:15:fe:05:4d:56:62:5b:d0:ce:61:7b:
6b:75:69:e6:99:7f:4f:32:0a:c9:de:c3:96:7d:a5:
95:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:EE:A1:42:79:F8:90:A7:7D:5E:79:74:D1:61:A7:46:88:1A:0A:2C
X509v3 Authority Key Identifier:
keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:e7:53:d3:7f:47:11:aa:37:51:7d:62:89:79:6d:05:9f:85:
43:2c:0a:ab:a4:02:49:5a:1a:7c:a5:3a:c3:7c:e5:a9:ba:06:
aa:e0:35:c1:99:4f:06:f3:4e:62:cd:bb:ae:a4:f0:ad:74:15:
46:a0:be:c9:6b:40:2e:95:21:ea:e3:42:a7:eb:31:85:a7:9a:
f7:86:f6:1d:30:34:22:14:b7:9d:df:01:93:f2:2b:86:4f:c8:
98:78:82:25:43:d4:7f:aa:92:ec:f4:5a:f3:46:1a:fd:17:cc:
f6:f9:ed:58:57:d7:37:f9:c7:e1:b4:79:08:a4:9a:23:50:cf:
f2:51:4b:86:2d:2e:3e:f3:88:c7:de:51:8e:c9:c2:4d:bc:16:
fa:07:d8:74:52:f6:5e:0b:9f:51:ab:ed:e4:50:27:f3:b8:7d:
a3:2e:b3:dc:9f:61:d6:9c:b9:66:c3:70:3d:02:bc:92:b9:ad:
a4:be:c7:ac:12:2f:e8:cc:87:bb:3a:56:49:4b:c7:d9:0f:dc:
fb:a4:16:8b:16:d1:b1:91:4c:d9:9b:9e:e3:af:84:51:2f:77:
95:7b:44:92:ee:ff:79:ad:58:a0:e4:ab:39:be:d0:b4:c2:e1:
1a:3b:2e:65:df:02:e6:31:97:9a:0c:58:d4:bb:d8:75:5f:ea:
c5:90:78:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:04:24 2026 by rpki-client