Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.mft
File: D9zw7HuvNJ6JLVERXCLA29Q1C44.mft (raw, json)
Hash identifier: GMrX/Ddxq0c2vJyimu+IJDfaxIOM5BIr6Dlbz2lyLF4=
Subject key identifier: F0:56:99:06:A7:10:0D:21:F8:55:A8:10:79:BC:67:2B:B5:36:84:56
Authority key identifier: 0F:DC:F0:EC:7B:AF:34:9E:89:2D:51:11:5C:22:C0:DB:D4:35:0B:8E
Certificate issuer: /CN=0fdcf0ec7baf349e892d51115c22c0dbd4350b8e
Certificate serial: 019D98BD72D35820B166F165ADE957448990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D9zw7HuvNJ6JLVERXCLA29Q1C44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.mft
Manifest number: 0579
Signing time: Fri 17 Apr 2026 00:00:45 +0000
Manifest this update: Fri 17 Apr 2026 00:00:45 +0000
Manifest next update: Sat 18 Apr 2026 00:00:45 +0000
Files and hashes: 1: D9zw7HuvNJ6JLVERXCLA29Q1C44.crl (hash: TTNxPe3a2DsICAKz6fsCbhn8/F6Kt4ZrwUDNCY/Q4/o=)
2: Jv3FrbaSeXZke2UP27JZQguG_qc.roa (hash: dePpEEDTqP/enapSxKmHvz68yt/UQtEn5OCz1CdZVCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.mft
rsync://rpki.ripe.net/repository/DEFAULT/D9zw7HuvNJ6JLVERXCLA29Q1C44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:72:d3:58:20:b1:66:f1:65:ad:e9:57:44:89:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fdcf0ec7baf349e892d51115c22c0dbd4350b8e
Validity
Not Before: Apr 17 00:00:45 2026 GMT
Not After : Apr 18 00:00:45 2026 GMT
Subject: CN=f0569906a7100d21f855a81079bc672bb5368456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bb:34:d9:c0:fe:e5:d5:64:5e:4f:17:1f:44:
19:31:c4:2b:9d:9a:63:97:0d:fa:34:ae:3f:66:59:
58:0c:b1:84:c0:02:05:45:c0:6f:93:49:7c:4d:a4:
e3:60:4e:8c:e2:e7:89:fc:f5:05:8f:bd:42:27:8f:
7d:b5:29:7a:34:b1:d9:8e:5d:c3:ee:8f:16:b9:21:
8d:04:92:3a:90:de:0b:c8:e5:3f:fb:a0:2e:75:7e:
4f:65:8c:e4:11:74:32:3d:0e:87:8c:10:00:a9:94:
7a:9a:33:1e:10:e9:13:f7:44:e8:33:ca:8e:03:03:
fd:c9:12:8c:d8:ca:46:10:57:6a:56:d0:b0:86:6d:
50:98:9c:2b:c0:1f:40:66:93:81:43:92:73:dc:5d:
9b:ce:b9:4b:ce:aa:93:0e:e5:aa:1c:a2:d8:61:68:
d3:43:92:0e:03:4c:62:83:bc:a8:46:6a:3f:b4:78:
96:ad:23:33:94:e2:b7:1d:a3:41:71:e4:6f:f1:13:
4a:a7:54:0e:d2:98:65:2a:05:8d:87:66:c2:d8:af:
9a:f4:05:2f:ac:fd:db:81:b6:51:6c:9e:ab:52:ba:
8c:e7:3f:4c:c2:18:e2:48:a5:e3:b6:53:df:55:54:
7a:f8:90:4b:55:0e:df:c6:2b:2e:e5:40:cc:0a:79:
cc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:56:99:06:A7:10:0D:21:F8:55:A8:10:79:BC:67:2B:B5:36:84:56
X509v3 Authority Key Identifier:
keyid:0F:DC:F0:EC:7B:AF:34:9E:89:2D:51:11:5C:22:C0:DB:D4:35:0B:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D9zw7HuvNJ6JLVERXCLA29Q1C44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:d2:be:85:a0:11:fd:97:2e:19:08:c7:74:8c:bc:82:b2:8a:
eb:9c:bc:64:2d:35:5d:a5:f9:22:1c:4f:82:75:35:aa:08:06:
ba:55:68:72:9f:94:84:45:98:4a:a4:b7:3f:e8:1c:fc:0f:83:
53:2a:25:64:6a:94:c5:9d:80:30:ad:62:52:6f:ee:7f:3f:05:
81:e9:a0:c4:f4:ac:a9:1a:e1:e2:8b:74:07:5f:16:a2:ca:6d:
80:a7:c9:59:5e:2b:f3:7d:88:46:01:6f:25:2f:89:bc:69:5f:
95:de:a3:11:2f:51:bd:33:82:c6:fd:28:dd:fb:ea:11:9f:29:
3a:0f:a1:c3:de:36:2f:69:b0:0f:af:ef:f4:7c:52:2c:9d:bc:
fe:fb:bb:b4:46:a3:81:7e:50:d1:7a:db:e1:0b:9a:d6:8b:35:
ff:94:8f:92:fe:b5:f2:d1:6d:64:84:5f:87:4a:3e:88:5f:48:
a3:76:6e:92:02:c8:50:37:a0:99:3d:7b:23:95:2b:b4:b2:df:
4a:01:ec:e6:f0:10:6b:c5:17:99:81:f2:bd:4a:5b:c3:cb:d1:
31:25:e9:ef:a7:8c:db:9d:f6:32:59:e1:83:fc:dd:f6:c5:97:
db:b3:e9:16:2b:6d:6c:18:31:60:35:b3:78:25:bf:9d:4d:97:
52:97:56:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:50:17 2026 by rpki-client