Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
File: dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft (raw, json)
Hash identifier: tDMSvhiXYAxD0WIQwDOechUUeMTgyM1McG/nLRZCT0c=
Subject key identifier: 2E:5B:79:00:A8:79:57:FC:41:B1:AF:DB:88:3A:50:66:4D:6C:F4:35
Authority key identifier: 75:72:55:DD:C9:0A:4D:0F:82:FB:26:74:46:93:ED:7C:98:6D:8A:8B
Certificate issuer: /CN=757255ddc90a4d0f82fb26744693ed7c986d8a8b
Certificate serial: 019D9A3EBD1715E2EC9F533BFF84390C0CA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 07:01:35 +0000
Manifest this update: Fri 17 Apr 2026 07:01:35 +0000
Manifest next update: Sat 18 Apr 2026 07:01:35 +0000
Files and hashes: 1: dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl (hash: xiB/TVeZeMzX94umK8c8p5bOmhi5yGF5fB+0URwndKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:59:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:bd:17:15:e2:ec:9f:53:3b:ff:84:39:0c:0c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757255ddc90a4d0f82fb26744693ed7c986d8a8b
Validity
Not Before: Apr 17 07:01:35 2026 GMT
Not After : Apr 18 07:01:35 2026 GMT
Subject: CN=2e5b7900a87957fc41b1afdb883a50664d6cf435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:33:31:37:7b:ee:f3:0c:15:94:30:17:f0:7e:
e3:5f:d6:35:99:cd:80:0c:80:f8:4a:8f:bf:e2:59:
ee:3c:b6:c2:5c:4a:8d:18:e2:6a:2c:95:e7:ad:0d:
ea:6b:4e:37:4a:bd:1b:54:a8:c6:49:1a:89:69:a1:
01:56:49:6e:bc:5a:a2:0e:60:01:29:c4:1a:99:67:
bb:14:a7:53:77:c6:68:b6:bd:8d:bd:21:79:7c:08:
03:49:84:d5:5d:e3:37:8c:57:4f:1f:96:1b:3a:1b:
4d:40:9c:6f:ce:1a:f0:9a:e0:d2:f5:39:5c:b4:88:
79:24:d2:85:70:fc:e4:d0:3d:c8:46:f0:38:23:ce:
34:9e:1e:87:f4:09:66:fa:bf:ed:e5:e4:27:c1:76:
85:52:cd:15:3a:72:6c:b7:cc:21:af:d9:92:98:30:
53:d2:b6:65:29:6c:87:07:68:0f:c2:ca:8e:ff:af:
05:b5:99:b5:79:1b:0b:3a:8a:e1:5e:fc:b7:b9:b8:
73:14:bd:00:34:8e:49:8b:fc:29:61:59:9f:19:41:
36:e1:79:45:dd:26:a2:3b:02:99:ce:d6:7a:d0:23:
c0:11:64:9b:03:d5:4f:92:8d:f9:b0:0a:23:9c:46:
86:81:da:1d:2b:8d:57:13:9a:52:1a:e8:b4:a3:be:
e3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5B:79:00:A8:79:57:FC:41:B1:AF:DB:88:3A:50:66:4D:6C:F4:35
X509v3 Authority Key Identifier:
keyid:75:72:55:DD:C9:0A:4D:0F:82:FB:26:74:46:93:ED:7C:98:6D:8A:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:7e:a7:e3:06:ad:8b:d4:a4:03:a5:1c:06:6a:d9:26:ed:b7:
f7:1e:b6:46:d0:e8:4a:09:b4:c4:0d:ee:de:b0:e9:b7:ea:e8:
6a:c8:60:74:40:88:a3:94:b0:14:9f:56:84:e4:60:a3:7a:bf:
da:58:0f:ac:e6:d2:7d:b9:00:d3:9f:31:df:28:f3:90:94:ed:
c7:d7:a5:e4:93:68:47:30:1d:b7:29:6c:1c:bc:df:d7:36:8f:
a2:12:12:19:3a:35:b4:64:ef:ae:69:de:5f:34:65:7e:0c:dd:
33:8a:5b:70:40:c7:be:d5:37:93:c9:85:14:f4:dd:03:29:30:
19:4c:68:c9:32:28:89:4a:8a:87:6f:95:8e:f4:02:48:d6:59:
57:81:78:89:6c:0b:93:21:49:65:c1:ea:45:a3:2d:71:3a:49:
83:cb:18:89:7c:30:ef:8c:d0:8f:d2:0d:23:aa:af:92:1d:61:
04:c6:f3:fe:d4:55:f4:0b:9c:70:e0:b5:a5:ea:a0:70:da:95:
08:e3:c8:00:1a:cf:6d:55:9f:67:bb:99:f0:00:63:c5:7e:af:
ef:47:6e:c3:94:d9:38:d9:f5:01:ef:ac:e0:b1:16:46:04:27:
19:8e:7a:33:6c:b7:fe:d6:82:55:42:23:2d:08:47:74:1b:fc:
d1:3e:48:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPr0XFeLsn1M7/4Q5DAyjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NzI1NWRkYzkwYTRkMGY4MmZiMjY3NDQ2OTNlZDdjOTg2
ZDhhOGIwHhcNMjYwNDE3MDcwMTM1WhcNMjYwNDE4MDcwMTM1WjAzMTEwLwYDVQQD
EygyZTViNzkwMGE4Nzk1N2ZjNDFiMWFmZGI4ODNhNTA2NjRkNmNmNDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjMxN3vu8wwVlDAX8H7jX9Y1mc2A
DID4So+/4lnuPLbCXEqNGOJqLJXnrQ3qa043Sr0bVKjGSRqJaaEBVkluvFqiDmAB
KcQamWe7FKdTd8Zotr2NvSF5fAgDSYTVXeM3jFdPH5YbOhtNQJxvzhrwmuDS9Tlc
tIh5JNKFcPzk0D3IRvA4I840nh6H9Alm+r/t5eQnwXaFUs0VOnJst8whr9mSmDBT
0rZlKWyHB2gPwsqO/68FtZm1eRsLOorhXvy3ubhzFL0ANI5Ji/wpYVmfGUE24XlF
3SaiOwKZztZ60CPAEWSbA9VPko35sAojnEaGgdodK41XE5pSGui0o77jlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5beQCoeVf8QbGv24g6UGZNbPQ1MB8GA1UdIwQY
MBaAFHVyVd3JCk0PgvsmdEaT7XyYbYqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFhKVjNja0tUUS1DLXlaMFJwUHRmSmh0aW9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8xMDFkYmEtNjRlYi00MjY3LWIwNzUt
YzAyZjc3NWZiZjNmLzEvZFhKVjNja0tUUS1DLXlaMFJwUHRmSmh0aW9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8xMDFkYmEtNjRlYi00MjY3LWIwNzUtYzAyZjc3NWZiZjNm
LzEvZFhKVjNja0tUUS1DLXlaMFJwUHRmSmh0aW9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMH6n4wat
i9SkA6UcBmrZJu239x62RtDoSgm0xA3u3rDpt+roashgdECIo5SwFJ9WhORgo3q/
2lgPrObSfbkA058x3yjzkJTtx9el5JNoRzAdtylsHLzf1zaPohISGTo1tGTvrmne
XzRlfgzdM4pbcEDHvtU3k8mFFPTdAykwGUxoyTIoiUqKh2+VjvQCSNZZV4F4iWwL
kyFJZcHqRaMtcTpJg8sYiXww74zQj9INI6qvkh1hBMbz/tRV9AuccOC1peqgcNqV
COPIABrPbVWfZ7uZ8ABjxX6v70duw5TZONn1Ae+s4LEWRgQnGY56M2y3/taCVUIj
LQhHdBv80T5Iyg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:28:19 2026 by rpki-client