Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
File: DNpch0NU2Dgm5DwlNbduINW2GwU.mft (raw, json)
Hash identifier: RS+rR5wojBzswuOTDLuRFQAT2RMYGf8nsWr3An+8Iec=
Subject key identifier: B0:0C:46:B6:74:4C:91:EA:BE:89:5D:62:B6:BE:22:F3:D1:1A:AC:E4
Authority key identifier: 0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
Certificate issuer: /CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Certificate serial: 019D984FEA80CD9A14BEB1064C03923B4DD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
Manifest number: 18CC
Signing time: Thu 16 Apr 2026 22:01:07 +0000
Manifest this update: Thu 16 Apr 2026 22:01:07 +0000
Manifest next update: Fri 17 Apr 2026 22:01:07 +0000
Files and hashes: 1: DNpch0NU2Dgm5DwlNbduINW2GwU.crl (hash: EshjQ311v0Ab0GN9Ng42Ft9e7eI/iStYYsaP/+Q8GVU=)
2: u5v1NIr7zCznyDKOfZW5zSM1TZI.roa (hash: 0y7T3YJCDc+2Cz1VFqoKYSn2dXOumotGXs+vkOowx74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:ea:80:cd:9a:14:be:b1:06:4c:03:92:3b:4d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Validity
Not Before: Apr 16 22:01:07 2026 GMT
Not After : Apr 17 22:01:07 2026 GMT
Subject: CN=b00c46b6744c91eabe895d62b6be22f3d11aace4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1a:b3:d2:69:00:2c:6b:8b:6d:b9:7a:9a:c1:
44:53:6d:67:6b:0a:79:f0:5a:b2:4e:4d:b2:61:56:
ea:76:9b:87:8f:57:ef:aa:57:94:99:e7:2b:53:9e:
58:8e:ae:15:30:da:88:3f:2a:da:e0:45:db:c8:a3:
88:f5:0a:db:21:e8:86:76:bb:29:7b:bf:f9:92:64:
75:b1:8e:64:84:e9:48:70:c1:06:29:7f:18:f0:51:
e8:84:70:ae:3a:fe:b7:f3:d2:63:a9:28:c7:b4:e6:
7b:c7:bf:c3:25:d7:7a:ad:f2:c8:e9:09:6b:96:81:
0e:1c:1a:46:d3:a0:47:7e:d8:18:f4:ba:f5:f3:10:
92:b1:f5:22:bd:cd:a7:f7:3b:3a:40:59:94:43:bb:
68:20:1f:e6:47:cf:d3:20:b0:76:54:10:cc:df:77:
ce:d9:f6:c1:e6:46:9a:53:ed:1d:6f:20:5f:c2:66:
86:bf:07:dc:23:4b:b7:fe:57:79:ed:c1:0f:b1:e4:
bd:8c:a7:33:77:27:79:5e:43:f2:f9:82:c9:c3:9e:
3b:46:fc:b8:3d:95:81:50:a1:61:3a:98:0f:ca:1a:
e2:9d:a1:55:80:dd:b6:81:34:46:7e:df:5a:02:0e:
00:c0:43:95:39:46:52:56:71:7a:8c:f7:4c:60:25:
82:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0C:46:B6:74:4C:91:EA:BE:89:5D:62:B6:BE:22:F3:D1:1A:AC:E4
X509v3 Authority Key Identifier:
keyid:0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:12:3d:99:c0:b0:6f:b4:64:dc:92:c1:91:63:d4:7c:be:51:
11:a7:12:45:c3:3b:54:11:93:1a:ae:11:ea:17:35:28:42:b9:
2d:59:46:0a:e0:1e:41:d5:7c:9e:15:1a:03:8b:d5:20:a7:84:
eb:b4:29:03:b1:a9:84:59:b9:2c:9f:51:70:78:2a:3f:91:8d:
8f:38:6a:45:c1:72:ba:bf:95:d1:5c:a8:b4:84:78:ef:c4:b9:
50:57:b3:dc:70:f7:70:3a:b8:17:cf:84:96:d4:f6:28:4b:f2:
06:cc:e3:d8:be:d7:cf:2e:5a:e4:5f:9a:00:7a:56:49:45:78:
ff:93:6a:b9:94:97:51:d0:cf:df:02:89:63:54:f2:c3:8a:f1:
14:c9:e0:86:38:00:e8:9e:f6:dd:3a:91:8a:0f:02:20:ad:35:
36:02:31:80:f4:26:ef:63:1b:5d:50:a3:f8:b2:da:c6:5d:0c:
12:54:a7:8b:b5:a6:b0:e4:13:0a:7e:b6:27:f5:06:b0:b9:af:
db:e4:34:e7:56:49:b2:02:2a:9c:a7:b4:2c:5a:58:ad:66:9c:
09:18:be:3b:b3:42:9d:e5:58:3f:8a:5b:e0:01:7a:e5:4b:c5:
00:ae:1f:5e:5c:63:fb:a1:52:25:18:bd:4a:fb:dc:9a:d6:21:
a6:fb:95:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:04:39 2026 by rpki-client