Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
File: dygFKufRD9ImGiJI_ADSArDyVXQ.mft (raw, json)
Hash identifier: LPCm0xudJqBbI2BOnRw5y4Ik39KqdNIGHr52jBh/Qiw=
Subject key identifier: 4F:24:6D:EF:B5:E9:AF:B7:09:6C:85:83:98:0C:19:B7:3C:31:C2:80
Authority key identifier: 77:28:05:2A:E7:D1:0F:D2:26:1A:22:48:FC:00:D2:02:B0:F2:55:74
Certificate issuer: /CN=7728052ae7d10fd2261a2248fc00d202b0f25574
Certificate serial: 019D9B19CDB7D6883F7B22DCAFE4D3F46545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
Manifest number: 18CA
Signing time: Fri 17 Apr 2026 11:00:52 +0000
Manifest this update: Fri 17 Apr 2026 11:00:52 +0000
Manifest next update: Sat 18 Apr 2026 11:00:52 +0000
Files and hashes: 1: JNkr5sJ7ip69KbDdvD4kPrMRCFE.roa (hash: lOIWQDrAFB72tPTDRq9zpid9asQhjRi1A6BVV0mLQ0A=)
2: dygFKufRD9ImGiJI_ADSArDyVXQ.crl (hash: qjWfJkTJKIhddPLqkZvRPjMKQ3nIAhaLAGrI8gzrarc=)
3: sfYPhQ6RD9htbpRLWND2pNFZgk0.roa (hash: Nx5iosy0Tc5xWKlypEqy7h/HiFr5i52nJ2YrifsLjWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:cd:b7:d6:88:3f:7b:22:dc:af:e4:d3:f4:65:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7728052ae7d10fd2261a2248fc00d202b0f25574
Validity
Not Before: Apr 17 11:00:52 2026 GMT
Not After : Apr 18 11:00:52 2026 GMT
Subject: CN=4f246defb5e9afb7096c8583980c19b73c31c280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bd:ff:89:9f:8a:85:9b:b6:19:92:db:85:91:
4f:3e:f4:c5:f1:e9:c5:2e:57:05:c9:77:0b:c8:6c:
81:d4:8f:c1:73:9e:b2:01:8a:c6:eb:6f:17:52:4c:
01:69:59:02:69:25:17:6f:b1:6e:32:ca:ad:33:79:
4b:8e:d7:88:ec:41:b2:fc:54:58:97:29:74:e2:32:
8f:14:dd:a5:a9:f8:8c:a3:b6:40:e0:03:5f:98:76:
fc:f7:d7:53:38:45:ed:50:d2:9d:4d:a5:60:71:d1:
fd:d0:15:ce:8f:75:7e:e1:c0:d9:67:17:d6:54:18:
7d:03:95:de:51:ad:62:1d:05:89:5a:6b:33:17:c7:
b2:31:ff:47:1c:af:7b:67:8c:ac:1e:6e:63:ad:89:
fa:aa:c7:03:7b:cb:05:5c:f4:5b:ed:d9:03:3c:be:
0e:81:ed:a1:1e:3e:91:fc:51:eb:d9:de:13:56:55:
b0:6f:4e:89:ab:48:ef:69:35:d4:d7:68:13:4f:4a:
9f:bf:b4:c5:22:6b:42:d1:c6:e8:e2:7a:ec:69:e4:
26:8e:4a:27:b7:fe:46:7b:44:d7:db:93:88:a0:14:
b9:75:86:a2:26:31:59:7b:a4:88:57:4c:ae:50:2e:
91:16:d9:52:df:66:c4:e4:1b:83:1b:74:cf:77:9f:
6d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:24:6D:EF:B5:E9:AF:B7:09:6C:85:83:98:0C:19:B7:3C:31:C2:80
X509v3 Authority Key Identifier:
keyid:77:28:05:2A:E7:D1:0F:D2:26:1A:22:48:FC:00:D2:02:B0:F2:55:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:13:d5:84:ee:c9:5c:93:25:b1:89:40:0e:ea:c6:06:e6:92:
56:9d:58:62:30:8c:5e:e9:86:3c:c1:76:05:a8:9a:37:f8:7a:
c2:46:20:fa:6a:5f:c1:25:00:38:5f:1f:6f:4a:d2:17:d2:16:
1e:49:ca:c0:fe:e5:20:7a:3b:2f:b7:75:31:f6:8c:20:00:6d:
84:b8:07:08:a5:2a:23:6e:29:47:ae:36:8f:aa:8d:31:be:98:
f5:c9:1a:4b:c3:d8:19:05:18:ea:37:02:66:f2:6f:2f:82:72:
02:02:d4:c5:5f:27:be:49:9f:b8:16:24:a7:8a:ed:69:30:aa:
06:d6:3d:39:ff:2b:76:04:ed:f9:05:73:91:65:22:09:08:11:
36:13:8c:00:a2:e7:75:39:da:d1:2c:58:ad:89:ff:e3:b5:f4:
5c:10:ac:e0:40:fe:51:0d:c9:30:11:6f:cc:ea:8d:4b:7b:94:
81:b9:79:50:8a:b6:71:39:e2:f1:ba:de:34:3f:93:d1:64:4d:
e3:d4:3e:71:c4:21:ce:00:db:d4:2f:f9:6a:b8:a6:86:2a:fb:
ca:58:30:b3:64:a2:81:4d:67:60:7b:8c:45:63:15:c9:f8:ed:
07:6e:74:7e:d6:10:73:6a:49:9a:f7:c7:ff:10:02:27:79:58:
ae:d9:67:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:48:51 2026 by rpki-client