Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.mft
File: dpduc3A5pphnL-lSSt0zfR_1LP0.mft (raw, json)
Hash identifier: a71Ryli7Mi9ov2MnB0P5LfLixIMDVI8oW4NyrGLXLVs=
Subject key identifier: E4:5F:C3:B6:4A:85:D8:55:C6:C4:F3:15:F9:96:D1:0A:2A:30:17:21
Authority key identifier: 76:97:6E:73:70:39:A6:98:67:2F:E9:52:4A:DD:33:7D:1F:F5:2C:FD
Certificate issuer: /CN=76976e737039a698672fe9524add337d1ff52cfd
Certificate serial: 019D9B50B5D4AC20B2252ACAB00CC1262895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpduc3A5pphnL-lSSt0zfR_1LP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 12:00:51 +0000
Manifest this update: Fri 17 Apr 2026 12:00:51 +0000
Manifest next update: Sat 18 Apr 2026 12:00:51 +0000
Files and hashes: 1: P3I-kmPN6AuB9rj_rF8BnGgdu-E.roa (hash: 94bU66dX6J/YU6mZi7lnaxiIrZDpbyRdxL2MOQ0QKYQ=)
2: dpduc3A5pphnL-lSSt0zfR_1LP0.crl (hash: T8HRycAsddpen7AiMCw0HlNLHCxVukdtswXm4I5CHs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dpduc3A5pphnL-lSSt0zfR_1LP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:b5:d4:ac:20:b2:25:2a:ca:b0:0c:c1:26:28:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76976e737039a698672fe9524add337d1ff52cfd
Validity
Not Before: Apr 17 12:00:51 2026 GMT
Not After : Apr 18 12:00:51 2026 GMT
Subject: CN=e45fc3b64a85d855c6c4f315f996d10a2a301721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:6e:0c:a7:a8:c3:d4:5d:bd:a5:3a:df:a5:73:
e1:ed:a0:c5:b0:18:fb:85:53:65:4d:07:27:31:89:
a4:a3:ac:04:74:0b:4c:6d:6b:b7:0b:68:01:a6:04:
83:5b:54:ed:32:d4:dc:83:ec:f8:43:fd:6c:50:25:
dc:75:c4:18:05:0c:35:b3:19:7a:48:90:79:99:1c:
6b:21:c5:47:24:66:ff:b7:06:a7:e1:b9:e0:5f:51:
68:06:b2:2f:49:29:98:f3:37:0a:5a:f5:82:e1:e0:
7a:bb:d5:77:e4:88:39:7c:ec:62:05:0d:31:1f:be:
fc:fe:81:48:bc:dd:8e:13:ae:9e:4e:15:1d:41:ad:
3a:68:49:1a:18:8c:58:e8:c4:b3:7e:7b:43:05:4a:
b6:09:31:14:38:86:e9:2c:c9:23:e2:92:6e:a3:ec:
0e:c3:14:25:57:c3:b1:04:87:8d:cb:7e:c0:f3:26:
1a:b1:1e:37:79:07:fa:4c:d3:c4:70:df:25:3d:99:
c4:9d:0a:3f:2a:77:c8:ae:bd:fc:26:af:c0:c2:0c:
3a:c4:de:5c:2f:92:c8:b5:59:b9:0e:10:ba:7b:19:
37:6a:48:a4:c5:a7:fd:54:62:aa:72:49:3d:bd:77:
a6:33:a4:40:ad:8f:39:31:a7:16:86:c5:a0:54:3e:
29:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5F:C3:B6:4A:85:D8:55:C6:C4:F3:15:F9:96:D1:0A:2A:30:17:21
X509v3 Authority Key Identifier:
keyid:76:97:6E:73:70:39:A6:98:67:2F:E9:52:4A:DD:33:7D:1F:F5:2C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpduc3A5pphnL-lSSt0zfR_1LP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:08:d2:53:4e:48:7f:65:52:ad:52:39:42:98:39:ea:24:00:
7c:d3:47:0b:ff:dd:2e:de:da:aa:f7:8c:cf:e5:81:cc:ff:78:
08:b6:03:ef:a5:a3:ac:c6:4a:15:e5:43:9e:37:5f:0d:09:e7:
12:11:27:43:43:95:ce:b6:0f:d0:a8:65:dd:04:04:fc:bb:3a:
78:49:87:e1:65:05:49:72:04:0b:0e:9a:65:92:fb:2c:61:3b:
60:2e:7b:64:0c:40:14:a5:3c:0b:7e:ac:b2:8a:c9:ef:ea:43:
7b:89:93:31:e1:b4:4b:8d:6d:46:17:ad:c1:90:a4:5a:af:9d:
3c:bc:7f:ee:13:28:07:0e:03:ed:ca:72:71:b8:06:c7:79:86:
ef:3b:bd:f5:54:bf:53:92:8b:82:38:6a:11:5b:e4:7f:d0:30:
0a:75:63:3b:2f:f2:5a:29:15:1e:c0:f5:99:2e:e7:85:10:79:
6c:80:b8:0a:ca:98:12:cf:5b:b5:be:08:86:bf:28:42:77:68:
1b:83:00:b0:dc:4e:56:b3:d4:0e:9a:2f:c4:f1:f6:16:10:bd:
96:f6:a6:de:b9:df:a0:d5:0d:ab:f7:a6:db:8d:4c:a5:8d:6e:
b3:86:fc:bb:35:97:8c:88:73:20:e4:ae:11:d5:5b:97:28:80:
9c:bb:12:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:04:19 2026 by rpki-client