Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
File: dnwXZvu9z_aLvDSjxr5poMigOrk.mft (raw, json)
Hash identifier: RsH+n8AVK4/chzV9D/7Z9lOSUOF+Sxg0DD5xDuPXFjM=
Subject key identifier: 96:12:59:A6:43:F9:53:E6:C3:55:75:69:24:7B:B1:EC:A0:DF:C8:B0
Authority key identifier: 76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9
Certificate issuer: /CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9
Certificate serial: 019D98F41A2BC2B44D1C91479F8EC7565010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
Manifest number: 10BC
Signing time: Fri 17 Apr 2026 01:00:27 +0000
Manifest this update: Fri 17 Apr 2026 01:00:27 +0000
Manifest next update: Sat 18 Apr 2026 01:00:27 +0000
Files and hashes: 1: dnwXZvu9z_aLvDSjxr5poMigOrk.crl (hash: UWmWpw1mGp+lu42aj2HjkEpdL3TeSMMyNvUhvZ5ZWn4=)
2: uO0hPRixKdpQ7dRmQ2or2PuLKb0.roa (hash: oMcY71q6qwU4awB+i8utxGyZwUW4XEtlGqfFSQ3WTP4=)
3: x3r5MAGnwo9sJOqgqq7L5j88SZc.roa (hash: PdGQVPWLQTL/E0T0LOBkbwg2HWh9KKOf2sd5PHKTZpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:1a:2b:c2:b4:4d:1c:91:47:9f:8e:c7:56:50:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9
Validity
Not Before: Apr 17 01:00:27 2026 GMT
Not After : Apr 18 01:00:27 2026 GMT
Subject: CN=961259a643f953e6c3557569247bb1eca0dfc8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d7:f5:ec:7d:14:85:b7:b1:c3:bd:cd:dc:f4:
bf:06:6b:38:93:97:1c:46:88:09:b1:70:75:7c:b0:
39:60:3a:4c:10:9a:3d:2c:a6:a7:72:34:65:32:a8:
7c:2e:53:46:a2:4a:47:47:53:5b:2d:e8:9a:28:58:
7a:a4:04:26:42:ca:8e:fd:22:61:55:1a:7c:c5:03:
60:7f:52:3d:8e:73:38:b4:c5:9c:69:18:c5:a3:d2:
84:0c:9c:5e:81:65:16:3f:b3:47:42:2e:62:a5:5f:
73:74:6a:c4:6e:7a:f7:bc:75:20:20:99:23:34:8c:
59:07:a4:17:b7:1a:cd:00:02:06:72:03:55:19:d8:
8f:1d:04:55:83:e7:da:81:f0:cb:4d:38:7b:4c:be:
9b:71:94:93:23:be:c1:a6:18:d4:9f:c3:ec:6f:4a:
46:5c:b9:ad:ad:71:cc:6d:0c:7a:03:8f:ac:f4:bf:
e1:2f:b2:d1:57:5b:c5:5a:e0:6b:c7:81:97:4c:aa:
e7:7a:2e:c1:a7:17:b3:5c:4e:be:fb:89:c2:d9:15:
07:94:ad:8c:70:0a:f8:28:bf:50:7e:fc:b5:90:1a:
54:fc:36:f0:a1:b1:1b:9a:e2:48:ce:a4:fa:6b:81:
2e:da:3c:e3:95:7e:84:3e:fd:0f:aa:2e:ec:48:35:
4f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:12:59:A6:43:F9:53:E6:C3:55:75:69:24:7B:B1:EC:A0:DF:C8:B0
X509v3 Authority Key Identifier:
keyid:76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:10:70:3d:44:2c:e5:81:c3:2e:50:ba:ff:86:58:d0:45:6e:
89:f6:c5:b2:2b:9c:55:34:6d:5d:53:0c:c1:8c:ee:47:1e:2f:
40:09:4c:7f:17:c3:2f:2e:13:57:c0:1d:fd:0f:2c:c2:94:e0:
80:27:ae:95:99:88:e1:96:1a:84:be:70:20:0e:3d:0c:3f:a8:
4e:ca:15:ea:c5:5c:cc:eb:ce:c7:35:e5:48:7d:5e:96:16:4c:
32:21:42:d8:2c:1a:f4:9c:33:0f:35:79:4e:a3:08:a0:30:43:
e3:09:9f:7e:f5:1f:54:b7:0f:8f:ab:94:5e:1e:aa:8a:1e:54:
be:77:e0:e4:02:ce:ec:3c:91:89:69:60:5e:28:62:3c:84:df:
58:05:1b:73:0d:c2:8f:db:22:00:16:19:86:b8:79:85:f6:fb:
d1:84:19:64:16:b8:3d:1c:bc:49:75:fe:0b:b8:8e:52:5c:cd:
2a:d1:44:c8:e4:f3:4c:69:ac:aa:d1:90:47:a9:44:a0:24:30:
cd:4f:18:8e:c5:3f:aa:d9:38:d2:e6:76:9c:fd:b2:91:5e:13:
29:26:54:25:02:02:a9:7a:32:88:4c:18:a0:78:77:75:d2:86:
7b:e8:41:21:87:2a:74:0a:3e:39:1f:b3:3e:95:fd:41:35:74:
64:b3:ba:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:24:19 2026 by rpki-client