Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
File: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft (raw, json)
Hash identifier: J9HTAOgK4cZyZTEOcxEJbtAqU9UxP8jPEIfzO3hmQjY=
Subject key identifier: 50:FC:59:3B:91:9A:FD:FE:65:D0:DD:63:CC:AB:99:2C:2F:13:95:EF
Authority key identifier: 0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A
Certificate issuer: /CN=0c5e870d31ca7019951370cb221f18f1f09fa58a
Certificate serial: 019D98F47AFFB97DF44CF64F0113E3F98597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 01:00:52 +0000
Manifest this update: Fri 17 Apr 2026 01:00:52 +0000
Manifest next update: Sat 18 Apr 2026 01:00:52 +0000
Files and hashes: 1: 1TwtEwBMlCxF8zqgEDzuBJ_MkQk.roa (hash: TD25ePA+FEqAqKpKYIGbiC60SkZANZcldOpqjTjdHRs=)
2: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl (hash: 95ad9EpG5aw5en3WVrX3ntESE2MQnmIicyV0/AAHtek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:7a:ff:b9:7d:f4:4c:f6:4f:01:13:e3:f9:85:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5e870d31ca7019951370cb221f18f1f09fa58a
Validity
Not Before: Apr 17 01:00:52 2026 GMT
Not After : Apr 18 01:00:52 2026 GMT
Subject: CN=50fc593b919afdfe65d0dd63ccab992c2f1395ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3f:60:84:27:03:55:c6:78:bb:33:b5:6b:66:
12:1b:34:dd:cf:e6:89:6f:42:99:d1:4c:21:30:53:
79:5b:b3:c1:1b:c5:2e:7d:15:bd:39:5a:3f:b7:23:
7f:17:15:8c:8a:57:33:2d:4d:bc:d5:5d:5e:cb:d4:
8e:da:02:2a:e6:1b:c7:2b:f3:df:42:7d:8c:4d:45:
64:c4:c6:b4:1f:c9:ff:37:01:db:20:b0:53:79:62:
1e:f9:6e:30:a2:42:28:2c:f9:1b:9e:b4:de:e6:78:
75:b7:57:03:7c:84:34:28:58:ea:40:4d:cc:92:7b:
e3:cb:3c:0c:e3:fd:c1:86:5d:f1:d6:56:75:eb:09:
cd:50:fa:92:f1:11:a0:ab:9e:a0:92:fa:10:f7:16:
50:be:1a:67:41:5b:1d:de:83:4a:b3:0d:fa:6b:27:
f2:9b:bb:e2:03:77:e9:1c:67:fa:cb:96:76:59:fe:
16:66:57:6c:d5:e4:d0:ff:3c:f8:6b:78:9e:2e:be:
75:b0:a8:b7:3d:4f:8f:43:f1:1e:29:5f:f5:eb:e0:
25:9d:77:33:ca:a6:53:47:5b:03:20:d6:32:11:1b:
83:d4:0c:ad:4c:c7:b2:c6:58:ca:4e:e5:60:ce:fc:
cd:67:c9:c0:4d:2b:11:09:b5:ec:bb:65:7a:26:1f:
e3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:FC:59:3B:91:9A:FD:FE:65:D0:DD:63:CC:AB:99:2C:2F:13:95:EF
X509v3 Authority Key Identifier:
keyid:0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c0:8d:85:ee:51:1e:9c:fa:5b:1a:e9:58:d6:cf:d4:3f:f5:
95:61:04:b6:a4:d9:62:76:82:a6:6c:c1:94:39:49:e5:1e:ae:
c3:ae:b9:38:1c:7c:64:0b:6d:14:e6:59:41:e3:5d:a8:ab:13:
b1:03:39:49:0a:b4:bb:15:31:36:df:19:a2:6c:90:d2:76:ba:
84:36:71:5a:78:0a:7c:0b:31:8d:00:26:1c:f0:35:fc:07:73:
41:23:e2:db:81:18:bd:e2:38:38:00:f4:1e:b3:74:9b:69:35:
f5:08:3e:c5:95:a7:54:4d:d3:79:26:c9:fa:8b:db:b1:93:54:
29:c2:6f:61:f3:55:39:6f:ef:27:e0:42:2c:32:0d:78:7e:6d:
3f:df:12:a8:bd:22:69:53:ad:6b:89:ca:2e:63:97:55:5e:09:
d7:0b:85:53:b4:b3:a0:d9:f0:e7:28:fa:ca:77:61:06:02:07:
20:8c:0f:35:85:82:22:d3:6c:a9:bd:42:7a:6e:6c:8c:e6:82:
40:d1:05:70:b6:cf:23:36:44:76:07:05:86:4f:b8:e6:f7:13:
a0:c1:b4:f4:c8:2d:13:88:35:0d:ba:fb:e0:ba:c9:1e:1f:ab:
47:3c:0f:86:7f:7c:07:7c:f7:dc:be:34:7d:f3:b3:3a:ca:ce:
be:79:3e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:26:58 2026 by rpki-client