Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
File: dygFKufRD9ImGiJI_ADSArDyVXQ.mft (raw, json)
Hash identifier: DuXmvhFNrZeVjyXIkbgoKOE+/uRh0NLCwQetPRVlPU0=
Subject key identifier: 49:6D:30:31:3D:5F:78:0D:77:52:1A:AB:74:9C:63:A3:89:90:1F:FC
Authority key identifier: 77:28:05:2A:E7:D1:0F:D2:26:1A:22:48:FC:00:D2:02:B0:F2:55:74
Certificate issuer: /CN=7728052ae7d10fd2261a2248fc00d202b0f25574
Certificate serial: 019DA4C1A9699BAC7281D61B2C50DBDC1EE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
Manifest number: 18CF
Signing time: Sun 19 Apr 2026 08:00:48 +0000
Manifest this update: Sun 19 Apr 2026 08:00:48 +0000
Manifest next update: Mon 20 Apr 2026 08:00:48 +0000
Files and hashes: 1: JNkr5sJ7ip69KbDdvD4kPrMRCFE.roa (hash: lOIWQDrAFB72tPTDRq9zpid9asQhjRi1A6BVV0mLQ0A=)
2: dygFKufRD9ImGiJI_ADSArDyVXQ.crl (hash: w3eGEgSD8+EUE7NAxEdF9aVfDIadsWvleDYoQAZDQeI=)
3: sfYPhQ6RD9htbpRLWND2pNFZgk0.roa (hash: Nx5iosy0Tc5xWKlypEqy7h/HiFr5i52nJ2YrifsLjWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:a9:69:9b:ac:72:81:d6:1b:2c:50:db:dc:1e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7728052ae7d10fd2261a2248fc00d202b0f25574
Validity
Not Before: Apr 19 08:00:48 2026 GMT
Not After : Apr 20 08:00:48 2026 GMT
Subject: CN=496d30313d5f780d77521aab749c63a389901ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b0:9d:d1:f3:bf:75:66:2b:e1:3b:75:ef:79:
35:86:b1:9e:0b:e0:e7:ed:52:a7:4e:b7:53:7b:d9:
39:c9:1d:9b:13:d5:1a:89:7f:cd:a6:ac:8f:a9:6f:
fc:64:53:a1:83:89:68:cf:9d:e3:93:34:79:1f:f8:
84:42:a7:c9:fd:fd:70:d2:0c:0d:73:0f:90:0f:4a:
e0:3b:a5:d3:f4:7a:b7:02:70:6e:5c:c8:7e:52:e9:
86:7a:d0:8b:1c:0f:be:b0:df:47:d2:f6:81:c9:a7:
89:2e:79:4d:e8:e2:d4:0f:db:56:e9:bd:17:23:35:
cd:7e:26:8d:61:b6:ad:a9:70:5e:39:6c:6b:05:d9:
ed:8f:b1:67:7c:b7:a9:83:60:de:30:25:c5:5f:b5:
68:ec:13:76:5e:65:a2:c9:9a:03:b2:50:1f:17:47:
02:ba:5e:e0:80:a3:a5:88:65:43:d5:d7:8a:82:b6:
21:24:2e:d5:ed:99:94:5f:16:c2:11:e6:33:0f:86:
6b:c9:46:d8:82:27:ae:7a:77:7b:fb:23:7c:1c:7c:
80:73:d2:ef:56:44:fa:b3:88:77:7d:fb:75:3f:18:
01:a4:ad:69:f6:8a:83:d0:b9:3f:3b:dc:8b:95:2c:
2a:d4:a3:4d:ad:73:0c:1b:62:c1:bd:20:d2:2a:8a:
ae:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6D:30:31:3D:5F:78:0D:77:52:1A:AB:74:9C:63:A3:89:90:1F:FC
X509v3 Authority Key Identifier:
keyid:77:28:05:2A:E7:D1:0F:D2:26:1A:22:48:FC:00:D2:02:B0:F2:55:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:7a:ec:33:49:e2:a9:0f:0b:4d:22:8b:e9:0f:f9:e9:e8:18:
85:a3:24:26:f1:e1:86:81:59:cb:57:37:18:cc:ab:21:85:5c:
b0:99:36:8e:82:f0:84:e5:e9:d6:3f:b5:4c:a8:2a:c2:4b:33:
a6:36:16:5e:e5:3c:ea:69:8c:b1:3d:a5:bc:ec:a0:f4:6f:9c:
42:3f:7c:0b:f6:b6:e3:84:f7:dd:d7:20:c4:40:2a:5d:bb:32:
36:19:6f:00:ad:17:2b:f7:48:25:96:45:db:26:fd:3a:f4:35:
4d:26:49:cb:c2:d7:0d:2a:e2:b6:07:e8:ca:6b:2b:39:c0:72:
c4:7a:01:5b:e0:ca:ee:b7:c9:f9:38:33:17:57:3e:3b:d1:6e:
5e:15:47:02:f9:74:99:c0:58:40:9a:c8:b6:ca:09:51:bd:ce:
c5:45:cd:58:31:c8:85:aa:44:89:fb:6a:de:e2:9c:23:55:1b:
26:de:f0:bb:ce:8d:12:fa:87:b8:eb:d3:a6:ad:a8:6d:27:94:
ad:ca:34:4f:c4:4e:78:7a:f4:5e:91:5e:e7:a0:ec:55:8d:e3:
28:44:7a:8f:df:0b:ca:86:54:59:f7:ea:09:96:68:23:45:56:
b5:e0:61:5e:34:5b:1d:5b:0a:f0:0a:e0:ae:68:71:c5:18:47:
5c:bd:5b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:13:08 2026 by rpki-client