Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft
File: DW3GbMOENrasMel-cS0hlAfIPPQ.mft (raw, json)
Hash identifier: pNNQa5ElUwIecmf0l3+qzCQbzYApBz1LY6m8MZxNQjw=
Subject key identifier: D8:20:87:39:EA:47:31:46:34:1D:30:CA:93:1A:3B:6C:EB:02:5D:C0
Authority key identifier: 0D:6D:C6:6C:C3:84:36:B6:AC:31:E9:7E:71:2D:21:94:07:C8:3C:F4
Certificate issuer: /CN=0d6dc66cc38436b6ac31e97e712d219407c83cf4
Certificate serial: 019D9A3DE4132446D62D473322C1A3AD6C5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DW3GbMOENrasMel-cS0hlAfIPPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft
Manifest number: 0745
Signing time: Fri 17 Apr 2026 07:00:40 +0000
Manifest this update: Fri 17 Apr 2026 07:00:40 +0000
Manifest next update: Sat 18 Apr 2026 07:00:40 +0000
Files and hashes: 1: DW3GbMOENrasMel-cS0hlAfIPPQ.crl (hash: J7wL5WZuaZaiG9yrjM0giofckTiDdnDsCwf0RzGf75g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DW3GbMOENrasMel-cS0hlAfIPPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:e4:13:24:46:d6:2d:47:33:22:c1:a3:ad:6c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d6dc66cc38436b6ac31e97e712d219407c83cf4
Validity
Not Before: Apr 17 07:00:40 2026 GMT
Not After : Apr 18 07:00:40 2026 GMT
Subject: CN=d8208739ea473146341d30ca931a3b6ceb025dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ec:1a:ee:0f:fb:52:28:4b:7f:9d:13:06:12:
2c:8a:e1:14:4a:ad:08:6d:e5:ac:96:d6:4b:ef:06:
88:1c:fc:fe:73:e2:13:60:3c:85:2e:87:74:d5:8e:
1a:0c:2f:73:83:92:c9:ad:c1:81:a9:23:64:e2:9e:
99:33:bd:13:37:be:2e:3e:69:c3:e3:ce:e0:41:a5:
99:43:09:4e:7f:df:55:16:e0:ce:ad:3b:e3:3e:78:
df:45:40:a4:b4:67:66:3c:49:f8:76:25:80:ca:79:
11:9c:e2:e7:c2:60:11:a2:b9:84:da:9c:29:7a:d3:
42:5f:40:6b:0e:cc:b9:67:f2:d5:63:4f:6c:cf:9f:
31:d8:e7:37:f4:62:07:31:f9:27:c6:1f:7b:46:b6:
98:cd:83:0d:f4:11:44:6a:c3:9f:2b:1a:40:76:8c:
e1:aa:98:75:f9:8c:a4:fc:52:b3:3f:63:5a:71:0e:
81:09:c5:94:34:14:df:5e:5e:cf:d1:83:2b:fd:5c:
97:50:c5:9d:df:cd:68:24:c5:fc:67:85:71:21:72:
d0:cd:90:8c:e0:5b:34:37:81:80:2c:82:e7:3f:cf:
d2:2f:8d:c0:ac:a5:be:09:b1:1a:7d:c1:4f:1a:dc:
72:84:04:2d:69:b3:9a:4c:22:91:67:fa:00:93:60:
2d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:20:87:39:EA:47:31:46:34:1D:30:CA:93:1A:3B:6C:EB:02:5D:C0
X509v3 Authority Key Identifier:
keyid:0D:6D:C6:6C:C3:84:36:B6:AC:31:E9:7E:71:2D:21:94:07:C8:3C:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DW3GbMOENrasMel-cS0hlAfIPPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:cf:66:6e:c3:32:51:1a:0f:fb:fc:8c:f0:62:55:d1:97:46:
05:12:ca:92:35:f7:d9:3b:71:c1:b8:4e:46:c7:35:4f:94:c5:
69:e3:60:9f:26:f6:69:82:12:26:73:0b:4d:22:6d:26:f4:2d:
9b:d0:cc:dd:44:9b:07:65:e4:f0:a7:7f:ef:a7:e6:15:34:77:
15:a5:e7:59:15:de:bf:1f:94:39:03:5a:ee:5d:de:63:30:46:
81:18:8a:08:be:67:c1:1e:85:31:bf:a1:38:68:5b:0f:54:e6:
dd:4b:04:0d:1b:85:ed:a7:a8:de:e1:2e:65:eb:2d:a4:7a:ca:
5e:10:8b:84:72:45:3a:ec:a4:0b:24:b9:83:4b:c9:4b:db:e8:
3a:78:1f:27:92:f6:cf:ae:78:49:fd:8a:59:a0:32:30:ff:35:
3b:bd:74:66:88:37:76:00:78:8e:61:00:bc:48:ea:45:32:7c:
59:8d:5e:88:33:9e:f1:ae:a3:fb:b0:7d:df:0a:35:aa:1e:c4:
c7:82:b8:37:2a:21:15:36:46:fd:05:42:81:40:9b:de:71:50:
45:80:ab:67:df:ac:c4:77:7c:3c:88:02:17:f2:e8:4a:3f:5b:
d2:46:44:12:ff:a6:22:db:7d:01:fb:fa:ba:9a:e4:3e:d6:da:
d3:9a:e6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:59:18 2026 by rpki-client