Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
File: DJvBsU8NllP1FOwWd3G3dVmsY8w.mft (raw, json)
Hash identifier: m98K1RL23hrm8MbzTceFVmrjZqqYX4I1LYDNn/bMBfM=
Subject key identifier: 2E:E8:B4:33:37:54:03:13:89:99:71:A2:7D:B7:48:3D:78:6E:5E:8A
Authority key identifier: 0C:9B:C1:B1:4F:0D:96:53:F5:14:EC:16:77:71:B7:75:59:AC:63:CC
Certificate issuer: /CN=0c9bc1b14f0d9653f514ec167771b77559ac63cc
Certificate serial: 019D97E1785F1838F1C1666C47CC464AB286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 20:00:29 +0000
Manifest this update: Thu 16 Apr 2026 20:00:29 +0000
Manifest next update: Fri 17 Apr 2026 20:00:29 +0000
Files and hashes: 1: DJvBsU8NllP1FOwWd3G3dVmsY8w.crl (hash: Jokp3PMn7xZ3o8IVeX/H7eDQ+scikb4lDcrVXe4gyzs=)
2: USkUk1O_55dbtUL8NgX3D9MuJlk.roa (hash: l0RD4Yub4vls7PSxviu1JxH4TvO1gXOCiQ61YNO4X7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:78:5f:18:38:f1:c1:66:6c:47:cc:46:4a:b2:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9bc1b14f0d9653f514ec167771b77559ac63cc
Validity
Not Before: Apr 16 20:00:29 2026 GMT
Not After : Apr 17 20:00:29 2026 GMT
Subject: CN=2ee8b43337540313899971a27db7483d786e5e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:37:eb:ca:3b:7b:70:3d:80:60:0d:88:24:c5:
7b:c1:6f:68:58:ea:18:93:41:a8:f3:f5:f4:01:6a:
a1:90:88:f1:31:09:f8:d6:45:08:7a:91:96:29:63:
61:5c:05:f2:c6:35:c3:ed:5e:4d:6f:57:6f:7c:00:
14:ca:96:f8:a3:d1:c0:dd:15:ae:9b:b0:f5:2a:fb:
4f:40:8e:13:7e:bc:e4:cd:f3:2d:e2:1d:75:77:49:
b2:92:f7:9c:fe:56:b9:1d:db:82:71:ff:06:c4:a8:
9e:d8:ed:80:1d:32:b7:37:8d:8a:3a:8c:bf:07:d4:
22:58:34:5e:66:0b:68:7d:8c:70:be:5d:0f:39:23:
3f:21:e0:90:35:68:03:b7:05:0d:ea:1b:b3:eb:f9:
f7:4a:03:2a:7d:11:6a:f8:c0:1e:4b:b9:0e:9f:a4:
0b:c7:ca:27:e0:ff:ab:a2:40:8e:7a:d1:5f:22:fc:
ad:86:89:84:36:eb:ba:4b:3a:47:a9:be:af:4d:38:
6e:d7:04:cb:9e:1e:74:3e:d6:fe:c0:08:1a:66:1c:
1d:ca:95:80:96:9b:df:fc:86:77:38:4f:c7:7e:78:
08:2d:77:34:27:bc:2e:2b:54:86:42:09:42:52:f0:
74:59:10:ab:6d:80:56:77:07:a1:a3:18:1b:be:a5:
dd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E8:B4:33:37:54:03:13:89:99:71:A2:7D:B7:48:3D:78:6E:5E:8A
X509v3 Authority Key Identifier:
keyid:0C:9B:C1:B1:4F:0D:96:53:F5:14:EC:16:77:71:B7:75:59:AC:63:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:5a:54:c1:51:68:27:a6:9b:c7:5b:b1:82:c6:da:c4:f5:b8:
14:ab:6d:55:07:6e:0d:24:f5:91:70:e4:1b:64:ab:bf:9b:22:
c4:13:97:03:93:10:05:cc:e3:c4:ab:a5:58:8a:3a:d5:60:ed:
10:b7:db:7a:98:33:7e:c2:64:00:0b:a5:67:df:70:39:ae:4b:
33:e0:1d:23:fd:d4:5c:7d:04:a5:e0:4b:9f:ca:e7:b2:f4:81:
8b:3b:38:5e:d7:79:42:93:e0:c2:48:3a:01:e6:4b:99:6e:b4:
1a:b3:71:c8:bb:0b:88:81:54:a8:c1:89:24:ce:0c:ff:d5:d6:
7f:49:84:dc:9e:43:ba:dd:75:57:23:58:af:b1:c6:aa:cd:12:
cf:9d:33:c1:87:72:69:f7:c0:70:69:86:61:be:63:29:86:d4:
9e:c2:4b:6b:e3:91:f3:30:5a:54:9e:9f:0c:ca:ac:e5:f1:19:
a0:dc:16:87:e8:ee:d0:43:d8:3d:d5:b4:82:d3:b9:a4:df:7d:
b1:50:18:51:af:f8:3e:d2:20:f9:48:0c:e6:ab:36:3d:5a:f9:
b6:97:9f:49:6d:bc:80:25:59:83:e7:46:44:fb:a3:68:4c:ee:
dd:d9:65:78:cd:e3:94:1a:b6:41:d3:0e:c1:41:6d:9e:e9:ac:
fe:70:be:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:42 2026 by rpki-client