Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
File: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft (raw, json)
Hash identifier: n8sUWz8kKniJ/j3dRgpScr9kkAexYax2C8uUa4Ym/P0=
Subject key identifier: E0:36:DC:BA:43:7C:EE:C3:AD:A5:C7:AA:91:1A:B4:B6:C9:1B:0D:06
Authority key identifier: D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
Certificate issuer: /CN=d031655023bd141731d56fb8453ff0514f728865
Certificate serial: 019D996317D2F97A046C26269D2175546836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
Manifest number: 1578
Signing time: Fri 17 Apr 2026 03:01:41 +0000
Manifest this update: Fri 17 Apr 2026 03:01:41 +0000
Manifest next update: Sat 18 Apr 2026 03:01:41 +0000
Files and hashes: 1: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl (hash: 20ZrC2b6BJSUpTYJKVLgPE1cKELdNzyKW2uqNbZ1Szo=)
2: 3AB4ABWLvkMBLhXbVPQ47Et_IPE.roa (hash: 7TTeY9RzcNuOB9ePCi+NTRAM5DwBMiMi62WzvEoHHl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:63:17:d2:f9:7a:04:6c:26:26:9d:21:75:54:68:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d031655023bd141731d56fb8453ff0514f728865
Validity
Not Before: Apr 17 03:01:41 2026 GMT
Not After : Apr 18 03:01:41 2026 GMT
Subject: CN=e036dcba437ceec3ada5c7aa911ab4b6c91b0d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:34:ae:9c:99:70:e4:a2:45:d3:3a:dd:6a:05:
a3:f6:77:b3:4c:4d:33:a8:eb:8e:3d:8f:e0:c9:9b:
7b:40:cd:f4:1f:42:3b:e7:cd:1d:8a:7f:65:5f:22:
4b:52:74:fb:b5:81:b5:7a:9a:d5:51:a1:b1:cf:9c:
02:6d:97:a8:05:3b:56:54:69:77:57:52:1b:d8:fe:
ad:ec:96:30:c9:c8:b6:d5:31:0f:29:43:09:e5:0e:
02:d5:75:dd:7f:3c:bc:83:b5:af:5d:68:68:c6:fc:
18:d4:45:58:ca:0a:21:d1:74:78:31:43:f9:f4:a5:
35:6f:95:74:d7:e4:21:36:90:77:dc:5e:a2:fa:0f:
62:e4:e0:c2:98:51:87:83:af:58:fa:14:dd:d1:12:
73:88:78:e0:50:dd:ec:ac:a6:a0:c3:c9:21:8c:e0:
92:63:cf:fd:4a:2a:da:e4:41:22:93:a1:71:3d:4e:
07:a6:c9:83:b8:93:b7:df:1b:09:e4:dc:75:e8:ff:
43:cb:bb:d0:9a:64:f5:41:0e:7e:ef:79:79:44:8a:
99:43:2b:e5:42:e2:af:48:c7:96:b5:ca:08:70:c5:
86:0e:4c:b0:f0:f0:90:b5:d4:46:e8:1b:bc:c1:a8:
f1:ba:99:7c:f4:e4:34:a4:68:67:2e:38:4d:8a:77:
72:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:36:DC:BA:43:7C:EE:C3:AD:A5:C7:AA:91:1A:B4:B6:C9:1B:0D:06
X509v3 Authority Key Identifier:
keyid:D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a7:e1:da:c3:79:55:5f:56:d5:d4:b2:a5:47:e3:8f:4c:48:
0e:43:f8:e8:f5:5c:b3:28:45:8b:64:40:7f:aa:2b:3a:7e:b6:
61:a3:05:ba:87:2d:11:01:15:ca:c4:54:0b:a3:2f:fd:be:dc:
ac:2b:27:7c:49:2e:f4:62:61:bc:21:03:2f:45:5e:8a:88:47:
7e:b5:61:f1:89:51:c5:48:31:36:2e:97:fd:ab:e6:a0:93:ef:
e8:81:33:3b:63:fa:84:28:a3:be:c3:99:86:d7:ac:2c:ba:24:
0d:6c:12:08:4b:80:7c:55:85:f2:61:26:32:c4:ae:7f:7c:27:
9f:85:f8:73:bb:28:a9:0d:ed:cc:06:3d:94:99:7b:a2:a3:61:
74:8a:5e:42:b5:26:9f:43:e9:1c:39:61:e4:fd:9a:79:77:31:
7a:cf:6e:3e:9c:05:c6:e7:7d:be:96:c8:b9:df:0e:25:df:1e:
51:86:71:c0:a6:2d:89:ff:39:fc:cc:79:d1:a7:ed:dc:8b:15:
06:1a:ec:d9:f1:8d:e7:4d:88:fc:45:32:2a:b7:83:0a:b7:c1:
39:6c:ee:02:80:8c:48:86:3d:d8:b4:cd:6a:af:d9:24:6f:fd:
7a:eb:43:8b:a2:29:1e:14:24:d2:7e:fc:f3:d2:f7:84:90:18:
d1:a9:87:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:17:40 2026 by rpki-client