Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.mft
File: dBkW6TW7TmhYsdIjYVrONp7SaB4.mft (raw, json)
Hash identifier: 8iUg768u8hXrbxPGpVwknn4bl0acnYi8MrJSlRO3h3U=
Subject key identifier: 16:36:B7:C7:B2:19:3C:19:3F:9F:5B:2D:86:50:B6:73:11:ED:7B:9A
Authority key identifier: 74:19:16:E9:35:BB:4E:68:58:B1:D2:23:61:5A:CE:36:9E:D2:68:1E
Certificate issuer: /CN=741916e935bb4e6858b1d223615ace369ed2681e
Certificate serial: 019D9BBE3948BF600A2D93B743F35DBF8646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBkW6TW7TmhYsdIjYVrONp7SaB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 14:00:28 +0000
Manifest this update: Fri 17 Apr 2026 14:00:28 +0000
Manifest next update: Sat 18 Apr 2026 14:00:28 +0000
Files and hashes: 1: dBkW6TW7TmhYsdIjYVrONp7SaB4.crl (hash: xQCIam/meaeRPUSJdBogLeGtsGnmu4rv4GWkm/s5oFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBkW6TW7TmhYsdIjYVrONp7SaB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:39:48:bf:60:0a:2d:93:b7:43:f3:5d:bf:86:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741916e935bb4e6858b1d223615ace369ed2681e
Validity
Not Before: Apr 17 14:00:28 2026 GMT
Not After : Apr 18 14:00:28 2026 GMT
Subject: CN=1636b7c7b2193c193f9f5b2d8650b67311ed7b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:36:d6:76:8c:4e:7f:aa:ed:ed:e5:2d:97:64:
e7:33:56:e2:93:29:9d:2c:e5:5f:64:29:63:2b:52:
35:02:f9:39:9f:6d:d0:c6:d3:28:e9:0c:26:f5:64:
83:5a:e9:93:10:a9:87:20:3c:75:5d:40:ae:4e:e9:
47:7b:95:73:46:ec:56:72:8b:f4:d0:f4:61:02:00:
a3:78:b5:c0:60:19:55:26:f8:00:38:21:5b:c9:60:
3a:b3:71:a1:64:2a:f7:0a:0f:61:15:dd:d6:f6:59:
1b:8f:72:fa:23:b4:dc:78:a4:b7:a0:f1:01:8a:1a:
26:8a:9f:58:c3:54:49:c5:18:90:88:f0:52:32:79:
00:78:09:5d:f8:61:52:13:c9:1b:07:40:3f:79:d2:
d2:76:21:9c:a4:5b:3c:a3:99:e2:58:a6:12:96:4b:
32:94:65:9c:e9:cd:5f:e8:85:11:24:6a:6a:14:c8:
4e:cf:5f:47:65:21:36:77:22:13:14:82:b5:b9:71:
e4:47:e1:e5:c3:26:17:e7:9b:4a:00:0b:4e:92:5d:
c5:69:0e:15:c3:0d:da:4b:39:14:8b:39:b5:f6:28:
b3:df:7f:e2:f0:17:7a:3e:da:29:56:9d:74:ac:5d:
c8:2c:e7:d0:1e:8d:17:0d:1a:c2:0c:ec:01:0b:26:
3b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:36:B7:C7:B2:19:3C:19:3F:9F:5B:2D:86:50:B6:73:11:ED:7B:9A
X509v3 Authority Key Identifier:
keyid:74:19:16:E9:35:BB:4E:68:58:B1:D2:23:61:5A:CE:36:9E:D2:68:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBkW6TW7TmhYsdIjYVrONp7SaB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:be:55:87:b5:73:a4:2c:b1:bb:4f:29:1e:82:5f:55:09:28:
66:98:fb:5a:68:99:cc:60:c2:18:4c:d1:57:a5:55:1e:a5:cf:
16:b5:6e:14:e5:e8:1c:e9:79:b3:45:3a:2f:55:ef:11:80:1a:
9c:d0:e0:55:d6:db:f0:90:32:25:cf:03:9b:74:04:93:cf:12:
b1:4d:54:14:e7:af:fa:74:74:ae:19:cc:ab:40:90:c3:6a:4b:
f1:b2:9f:67:b5:27:11:b0:f9:1a:99:60:fa:8f:cf:52:dc:8a:
bf:38:55:e2:81:a3:9f:98:1f:2b:e5:3f:0c:49:33:ad:5e:01:
48:ab:31:7d:27:b5:f9:b6:4a:3c:63:40:8e:d9:0c:37:98:f4:
b5:48:24:72:8d:99:b2:bb:4e:7f:cd:09:77:16:46:35:8d:0a:
9f:0d:7e:61:62:a4:70:d2:a7:bd:0d:f8:e5:30:4a:76:45:33:
83:c5:39:1c:69:b1:e0:3f:d8:6e:c1:b6:92:c4:fb:fe:60:cc:
b4:e1:3d:04:1c:f9:58:e0:1c:20:f0:3e:26:9a:27:14:98:88:
a7:e6:2a:b8:a2:89:78:55:d0:81:5c:94:03:45:4c:24:74:6a:
e1:d0:e4:82:65:90:19:e5:2e:1f:ed:01:10:32:31:22:58:73:
85:1f:39:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:58:15 2026 by rpki-client