
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft
File: dxLiD1ELIrghfN8NIRSWsbnB7bg.mft (raw, json)
Hash identifier: zvjIUMB9HvJ60o627/BqgV41zcSHcvbL71OR3EECreg=
Subject key identifier: D5:1C:E6:2E:69:A2:17:2E:EE:8A:CA:F1:3D:68:84:D8:8E:3B:EC:13
Authority key identifier: 77:12:E2:0F:51:0B:22:B8:21:7C:DF:0D:21:14:96:B1:B9:C1:ED:B8
Certificate issuer: /CN=7712e20f510b22b8217cdf0d211496b1b9c1edb8
Certificate serial: 019D992B474DEECCFB7279533C25112D1552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxLiD1ELIrghfN8NIRSWsbnB7bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 02:00:43 +0000
Manifest this update: Fri 17 Apr 2026 02:00:43 +0000
Manifest next update: Sat 18 Apr 2026 02:00:43 +0000
Files and hashes: 1: dxLiD1ELIrghfN8NIRSWsbnB7bg.crl (hash: anHKYHd194CuAgKc9bU4XZP3yo9YW1qUfm9m2dOcgKU=)
2: j2Zec19YMohuiWgyeOqj3yTZ1qE.roa (hash: 24aHxSxVGLUb8yk1YBdeTwbmPhDVWKEcsyuGoX47Z48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxLiD1ELIrghfN8NIRSWsbnB7bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:47:4d:ee:cc:fb:72:79:53:3c:25:11:2d:15:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7712e20f510b22b8217cdf0d211496b1b9c1edb8
Validity
Not Before: Apr 17 02:00:43 2026 GMT
Not After : Apr 18 02:00:43 2026 GMT
Subject: CN=d51ce62e69a2172eee8acaf13d6884d88e3bec13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ff:2c:bf:38:37:af:e1:e1:75:c2:4f:dc:4e:
d4:ea:2b:24:2a:32:c2:18:9a:74:f6:f2:e3:04:94:
0e:48:d3:63:23:dd:8d:1d:7e:ee:f3:31:23:75:17:
ea:92:ab:f3:12:b7:d8:42:63:61:3c:5e:6a:09:1f:
9c:41:b1:c3:2c:e0:a4:c5:31:14:91:21:af:b1:f5:
fe:86:57:a5:ce:c4:c9:cd:6b:79:3a:ef:e6:b2:71:
dd:b3:38:4b:a9:22:8b:9d:5c:0e:4e:ab:66:94:e7:
fb:b1:86:a3:01:8f:2f:81:05:13:bf:81:eb:b3:e9:
20:74:03:8a:ca:eb:42:c7:25:53:2a:17:19:5e:a0:
35:6d:8f:ea:55:83:bc:98:e7:ac:f4:3c:03:b5:1e:
3f:e5:20:c0:03:e4:fc:b8:c0:f8:0b:0b:1b:d3:e5:
2e:8e:46:44:73:5f:f1:8f:bc:9d:94:1d:b8:7f:ea:
a4:75:65:7b:a9:b7:48:1a:a5:40:17:d7:29:df:6a:
9d:44:72:37:a1:fb:30:85:95:19:6e:6b:19:e7:51:
8d:f7:4c:85:02:fa:aa:01:43:1c:ec:11:be:24:af:
7a:e1:6c:78:10:c3:ce:19:42:89:95:f1:40:f5:88:
9c:e3:e0:09:27:09:a1:1e:05:0a:43:7b:3c:74:11:
2c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1C:E6:2E:69:A2:17:2E:EE:8A:CA:F1:3D:68:84:D8:8E:3B:EC:13
X509v3 Authority Key Identifier:
keyid:77:12:E2:0F:51:0B:22:B8:21:7C:DF:0D:21:14:96:B1:B9:C1:ED:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxLiD1ELIrghfN8NIRSWsbnB7bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:2c:8c:98:5c:f6:3d:b3:ab:3a:04:9f:25:3a:8e:0f:c2:19:
55:a0:61:0d:99:50:3e:3a:6d:25:d5:fe:df:c3:58:dd:61:0f:
08:3c:35:cc:d6:55:dc:68:f0:40:52:0d:70:7a:d5:96:89:42:
02:1d:c0:b3:f8:6c:57:03:f2:9b:88:78:0a:a7:3e:d1:5a:26:
ca:7f:32:cf:37:7f:88:82:1a:ae:e3:b2:f9:64:ab:b8:c3:08:
28:91:5a:c5:5f:cc:d6:e5:7f:c9:c7:0c:ba:75:42:33:bc:9f:
cb:29:91:d1:7e:e4:c5:97:d4:49:58:5f:a3:4b:6b:91:10:31:
bb:d0:c3:76:0f:5e:9f:38:64:8f:b2:80:17:5e:46:71:53:14:
46:8a:ac:ad:f5:2f:70:36:21:05:14:4b:a5:f3:22:bd:f8:c3:
a7:45:9c:39:ed:f5:6f:46:6c:46:8c:69:f4:f4:23:fb:c7:13:
1b:35:44:d1:e1:ba:13:37:04:31:cd:ee:5d:50:f9:f0:f7:59:
76:cf:be:d3:6e:ac:0f:42:b6:f1:79:fc:25:4f:e4:33:5a:68:
64:b2:7c:63:03:91:a3:e4:7d:2c:a9:3c:b4:5e:55:4c:fb:c5:
2d:0d:40:c0:ec:bf:72:24:83:6f:88:d6:a8:59:d1:d9:5b:2a:
17:59:19:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:02:34 2026 by rpki-client