Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
File: dX-f3qNQp2a7mMYE07nCeRZzIgk.mft (raw, json)
Hash identifier: iHTrbenS8xPDUwahTWT06Mk0ffh4bibY7DZwcyT1b0M=
Subject key identifier: 5E:1D:EC:18:75:51:6B:2F:27:D4:11:8A:5D:D8:86:C6:8E:98:20:3B
Authority key identifier: 75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
Certificate issuer: /CN=757f9fdea350a766bb98c604d3b9c27916732209
Certificate serial: 019D98BDCA06E79FA5E458BE8EAEE8AF9968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 00:01:07 +0000
Manifest this update: Fri 17 Apr 2026 00:01:07 +0000
Manifest next update: Sat 18 Apr 2026 00:01:07 +0000
Files and hashes: 1: dX-f3qNQp2a7mMYE07nCeRZzIgk.crl (hash: UBZXHGMlZffEo0x0SkBNrIIdOMKzl0WHq22V7/h1KsI=)
2: wBzUUS1esVzgp7-S8WP1zjKAIpw.roa (hash: UgXBz+OKL1MAmpi06fp5fY0KFQ1LRcUZSGp9CfyxDlU=)
3: wjNWOCuY2E1_FvlqggQMJz_Utqw.roa (hash: BberhHSGLHh2AX9W6raGWWWl/q21AJDPsEIrCo+NFbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:ca:06:e7:9f:a5:e4:58:be:8e:ae:e8:af:99:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757f9fdea350a766bb98c604d3b9c27916732209
Validity
Not Before: Apr 17 00:01:07 2026 GMT
Not After : Apr 18 00:01:07 2026 GMT
Subject: CN=5e1dec1875516b2f27d4118a5dd886c68e98203b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ff:49:58:60:bb:04:73:0b:8f:aa:ad:d6:6e:
49:8b:08:56:98:6b:37:aa:87:89:5b:ed:ff:7b:ba:
a0:2e:51:b1:3d:d5:69:ea:dc:0e:bb:5f:43:5b:43:
4c:e1:a9:12:84:ac:c5:bd:d2:be:ea:fd:ed:19:b4:
c7:3f:2d:87:61:48:63:dd:00:0e:57:a4:7c:54:5c:
2a:ca:ff:3c:28:5b:7d:98:7d:e3:e0:d5:57:df:f9:
89:0c:31:1e:52:cb:b9:3f:26:c5:eb:18:3d:30:64:
52:13:10:74:5d:26:d9:81:82:d3:43:0b:7a:19:89:
df:4d:a8:e6:7c:97:60:05:87:55:ff:39:3d:8d:4f:
a3:60:60:61:27:b5:80:c7:61:26:04:6e:f8:e0:d7:
9a:48:01:b1:ec:5d:e3:d6:a9:0e:b5:e9:5a:b2:50:
4e:cd:16:6a:59:db:2c:cc:d6:45:6d:d1:98:00:1c:
73:75:30:78:60:bb:79:cc:45:89:f9:d2:87:3d:62:
16:6b:fd:52:d8:39:dd:83:10:03:5f:e4:ea:17:bf:
5c:df:68:72:ba:b5:d8:d3:9e:e5:98:80:c2:aa:03:
91:37:7d:fd:20:4c:98:03:3b:f6:bf:6b:48:92:d8:
0b:64:38:54:c3:70:ef:f1:c9:d3:dc:2a:7a:3f:ab:
4b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1D:EC:18:75:51:6B:2F:27:D4:11:8A:5D:D8:86:C6:8E:98:20:3B
X509v3 Authority Key Identifier:
keyid:75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:5b:8f:5f:65:1d:0e:4f:ce:cf:33:e1:5f:2d:8a:ac:90:b1:
38:a7:53:56:ae:c8:68:ad:16:a6:f8:c8:16:60:e9:ee:0b:7c:
25:44:15:3d:7c:b8:33:b2:a6:04:9e:a8:89:a4:b8:21:75:90:
91:d3:9b:12:6f:5c:56:c4:0f:6a:41:67:d0:d0:3c:6e:96:19:
3c:e6:2a:da:c1:6b:4a:a0:41:5e:48:c4:2d:d2:27:7d:8b:56:
52:c0:44:e5:7c:65:8d:a1:1b:69:74:db:01:e9:86:6c:5b:8e:
94:48:15:bd:3c:7a:ba:bd:2e:40:14:ef:63:a9:7a:84:ba:ef:
45:58:66:ec:55:1d:81:fc:6a:95:19:df:ee:6a:5a:b2:c0:c4:
1f:ee:d4:36:9c:73:c7:ae:d1:5e:7b:1b:1c:f3:32:0e:39:0c:
79:f1:76:e2:43:9f:b2:06:c0:8b:68:c6:a3:08:53:d0:65:4c:
ed:d8:24:fc:1b:02:95:15:c3:4c:2b:4d:8a:d3:25:1c:71:eb:
29:d6:c3:11:c6:25:c4:11:5c:a7:a6:5e:9c:e5:00:27:8c:45:
9f:5a:a3:18:0e:1a:a8:62:ad:f5:c8:d5:53:37:64:a9:f7:95:
00:f4:ca:6a:92:82:13:3d:97:b6:32:7e:80:d4:67:70:bf:76:
c6:59:a7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:58:41 2026 by rpki-client