Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
File: DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft (raw, json)
Hash identifier: LhIAX3aVotIPJNMPeMzjiDJM92P+qNcrPgVWfjh8nsg=
Subject key identifier: B6:7E:1A:BF:6D:F6:BC:77:E5:0D:20:E8:E0:8D:EF:E8:0A:D4:12:18
Authority key identifier: 0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
Certificate issuer: /CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Certificate serial: 019D98F4F2C3A90C638ABBB19A11332F0001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 01:01:22 +0000
Manifest this update: Fri 17 Apr 2026 01:01:22 +0000
Manifest next update: Sat 18 Apr 2026 01:01:22 +0000
Files and hashes: 1: DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl (hash: uYZ74F9vyrCF3VyeY4fLZA0IhB2OgXotbmuH8yXrEf8=)
2: xRmmdqH1-j--sEXPtnNY3Z-R5Zo.roa (hash: 3OUa7VjiPRdUyQdSMo547+vkOocCdI86key02w1U7/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:f2:c3:a9:0c:63:8a:bb:b1:9a:11:33:2f:00:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Validity
Not Before: Apr 17 01:01:22 2026 GMT
Not After : Apr 18 01:01:22 2026 GMT
Subject: CN=b67e1abf6df6bc77e50d20e8e08defe80ad41218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fc:1e:ab:45:88:22:56:4c:76:b3:c2:08:c3:
23:bc:fd:27:3c:cc:3e:5f:1a:9a:bc:d8:b9:80:b5:
49:48:b8:80:99:1a:d9:af:69:82:29:af:7d:19:ea:
85:c8:f9:1c:7d:fe:e0:74:81:bd:b1:06:dc:f0:ad:
8b:97:d3:9b:8d:11:a1:e4:44:0b:2f:35:a8:06:d4:
24:af:b2:b3:f6:e6:63:58:ad:82:38:b8:72:75:1e:
40:72:88:25:72:fd:f9:c7:ab:c6:c1:9f:a4:09:41:
4b:5e:e0:3f:7f:0f:97:04:50:5e:50:a0:a4:a8:42:
0a:de:85:b6:61:64:12:b3:ca:3b:bc:b4:3d:26:96:
2b:86:f6:89:15:ea:ea:e7:1d:57:92:48:4d:2a:aa:
23:f9:3e:cc:fa:03:47:a4:15:95:e8:dc:0f:9e:6c:
ca:41:92:54:80:cf:19:e8:ad:80:0f:73:b0:cf:70:
25:2b:5e:53:60:0c:5b:55:22:71:90:29:f8:6b:17:
45:8f:3b:6e:11:85:c3:70:98:1c:49:8a:9c:b0:d4:
5c:91:f6:11:5f:a7:3b:08:0b:7d:97:5b:39:38:8e:
58:b5:9f:71:7d:bf:ca:17:01:a7:3c:06:ae:2e:ca:
65:19:02:a7:20:b7:87:2f:5d:b4:30:a8:82:75:65:
47:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7E:1A:BF:6D:F6:BC:77:E5:0D:20:E8:E0:8D:EF:E8:0A:D4:12:18
X509v3 Authority Key Identifier:
keyid:0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:64:61:7b:e7:e3:cd:2e:d8:0e:a2:8d:aa:68:b6:ea:e5:12:
7f:75:36:1b:45:5d:46:15:d2:d8:27:5d:20:5a:c7:06:72:8d:
33:4e:16:ee:a3:f3:8a:34:1f:40:71:b9:c1:47:ca:09:2b:6a:
87:99:64:1b:de:5b:1e:5f:5f:22:b9:82:52:1a:d8:e8:eb:0f:
bc:da:a1:3b:40:e3:e5:fb:a4:07:be:21:67:54:70:d8:70:65:
e5:21:f0:fa:3c:37:6b:d3:14:5e:fa:69:d6:db:ef:52:51:72:
fb:69:8e:dd:96:c3:76:0b:0d:f7:40:15:58:6e:d4:ea:f4:bb:
51:eb:3d:a9:40:8d:1c:97:a6:ea:0e:05:7f:70:e4:2c:29:19:
af:68:a2:b8:44:ac:ef:69:ab:2d:be:d5:af:29:6d:ba:4c:ee:
eb:66:5c:d0:1e:8c:d9:2f:4c:94:79:34:d3:de:cb:33:a5:04:
c4:fd:17:7c:a2:73:b5:ba:51:5c:77:81:3e:90:5c:da:58:72:
d2:1e:0b:b7:20:08:d7:cc:ef:a0:e1:51:19:a9:43:62:a1:a6:
09:58:c3:26:9c:85:be:c5:1e:0e:ba:53:8f:4e:18:77:49:5f:
84:96:48:69:d2:6b:88:35:ed:5b:17:46:c8:c8:a4:d1:ae:c5:
bc:40:49:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:28:57 2026 by rpki-client