Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
File: Dp842O8xOufFpwiU9m6HGjMYA_8.mft (raw, json)
Hash identifier: fpnFdGC3iyY9imLCWM1OJz7t/MQSiu8mXzeCQe+MlMI=
Subject key identifier: C7:AE:D3:4B:76:43:09:E4:63:13:00:AA:AA:94:0A:C8:8E:95:E9:9C
Authority key identifier: 0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF
Certificate issuer: /CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff
Certificate serial: 019D98F467A59984E80A025FE7E08124E141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 01:00:47 +0000
Manifest this update: Fri 17 Apr 2026 01:00:47 +0000
Manifest next update: Sat 18 Apr 2026 01:00:47 +0000
Files and hashes: 1: Dp842O8xOufFpwiU9m6HGjMYA_8.crl (hash: dA6oYrGy8maUOE1/HQEWBNqM9NSNJl0WOsySvSnVHC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:67:a5:99:84:e8:0a:02:5f:e7:e0:81:24:e1:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff
Validity
Not Before: Apr 17 01:00:47 2026 GMT
Not After : Apr 18 01:00:47 2026 GMT
Subject: CN=c7aed34b764309e4631300aaaa940ac88e95e99c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b6:97:e7:6f:fc:41:d1:79:d3:b1:59:07:38:
47:9b:4e:e0:bb:7f:79:0c:6f:10:67:40:aa:85:13:
96:99:dd:dc:61:97:9b:a8:8b:c5:e6:3c:ff:4e:e3:
6d:c0:36:5f:7d:8d:23:5a:17:27:42:31:87:d1:35:
18:0c:96:7b:90:c3:a3:8f:5c:9f:e6:93:a0:a0:16:
3c:96:17:f7:f1:71:10:59:ca:d7:21:e1:95:90:50:
05:4a:91:bb:46:7c:fa:eb:3c:e0:53:a6:67:3a:72:
60:d1:da:4c:9e:99:bb:c4:4a:e0:87:13:9c:32:60:
51:20:81:81:99:21:26:c1:03:a2:8f:b2:b3:62:96:
83:29:a1:43:a1:1f:24:f1:23:c9:b9:ce:88:38:b9:
c4:41:57:a1:30:ed:3e:f8:73:ae:cb:a4:37:18:51:
41:12:e2:ae:e2:b4:b5:dc:19:24:d2:46:99:56:de:
50:90:02:20:f5:57:43:06:f4:d1:65:88:2a:05:e4:
08:72:47:38:1f:f8:72:dc:b1:da:9a:b3:b2:4d:92:
e3:44:12:6b:3d:b8:f4:68:31:76:03:ed:75:d7:40:
5b:60:e2:64:f4:e7:69:55:b6:bb:df:16:54:bd:76:
99:28:1c:65:2e:48:e0:7a:31:05:8d:e0:65:ce:7b:
41:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AE:D3:4B:76:43:09:E4:63:13:00:AA:AA:94:0A:C8:8E:95:E9:9C
X509v3 Authority Key Identifier:
keyid:0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d9:34:1e:f8:72:0c:a5:1b:63:25:7e:45:3d:c7:aa:76:9c:
43:9d:02:4e:a1:d4:6d:e6:97:b6:ea:bd:e5:5b:78:1f:08:e2:
82:4c:af:c4:c0:b5:ab:b6:01:65:46:4c:70:29:da:d4:da:75:
90:ff:a5:e5:c0:7a:65:7a:02:30:c8:4c:dd:27:79:3f:48:20:
97:73:e5:65:05:bd:f2:3d:f1:b4:9f:c0:9b:15:70:47:16:41:
49:12:8a:48:56:44:d6:d0:6f:06:6b:c0:e5:66:3f:2e:84:e6:
4b:5d:29:a7:a5:08:5a:f3:63:78:f6:fd:fb:6d:9f:f2:a7:29:
e9:99:a1:94:ee:f8:0a:72:dd:25:c6:66:5a:56:c0:79:b4:50:
6e:70:0c:3e:a8:42:76:54:e3:1a:3a:d0:51:eb:96:5e:44:8c:
ac:4c:30:f6:9e:ee:c6:1b:00:40:57:5b:c5:66:af:50:04:6b:
8e:54:10:ec:16:de:cc:03:83:94:4d:73:40:e9:ac:d3:86:0c:
54:70:b8:ff:58:5d:ab:ed:f5:51:7b:af:26:c9:fb:db:3c:25:
4e:41:d6:3e:59:95:5f:e5:a4:35:4d:e9:e4:e1:16:6b:e2:9b:
70:5c:aa:3e:09:81:fd:22:8f:94:19:3f:c2:cc:1d:6c:9e:de:
a0:25:74:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:40:52 2026 by rpki-client