Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
File: dFkBtALUgvPW3Sko6oztLuts5BI.mft (raw, json)
Hash identifier: wACMA5SwvPFIKwT2L9syWHjlaX1e0CZBpXc3QBaWvYg=
Subject key identifier: 42:6D:E3:F2:FC:FF:0E:06:61:CC:2D:CE:7D:79:97:49:C2:16:69:75
Authority key identifier: 74:59:01:B4:02:D4:82:F3:D6:DD:29:28:EA:8C:ED:2E:EB:6C:E4:12
Certificate issuer: /CN=745901b402d482f3d6dd2928ea8ced2eeb6ce412
Certificate serial: 019D985058E65FCA5AA60CE25B7EAB66EF21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
Manifest number: 18C0
Signing time: Thu 16 Apr 2026 22:01:35 +0000
Manifest this update: Thu 16 Apr 2026 22:01:35 +0000
Manifest next update: Fri 17 Apr 2026 22:01:35 +0000
Files and hashes: 1: LCf-Tegx0fZiipUoAGLWioHn_mQ.roa (hash: gYRcDzeAFInSekOjnAJBC9uOYALnCXCAmTDWjzmnLrQ=)
2: dFkBtALUgvPW3Sko6oztLuts5BI.crl (hash: 4kaN8qUWz762WnqXJM9ViKifImBse/TON9+u68MbPC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:58:e6:5f:ca:5a:a6:0c:e2:5b:7e:ab:66:ef:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745901b402d482f3d6dd2928ea8ced2eeb6ce412
Validity
Not Before: Apr 16 22:01:35 2026 GMT
Not After : Apr 17 22:01:35 2026 GMT
Subject: CN=426de3f2fcff0e0661cc2dce7d799749c2166975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:35:6d:9d:ee:d0:ec:c3:41:29:11:50:71:8f:
e2:79:79:f7:71:ca:e0:9b:ee:bd:81:2b:cb:31:95:
e1:42:7b:e3:8b:67:bc:55:a2:9f:05:87:f4:58:db:
0e:92:5f:31:2e:e8:69:38:fc:0e:67:c6:b4:a5:ec:
73:d2:ca:eb:85:2e:59:4b:e5:ca:1b:79:da:06:0d:
08:8c:1c:a3:66:9d:4d:08:e5:15:27:53:9a:92:0f:
e7:c7:b9:e5:8d:c4:ba:2d:fa:57:ed:84:46:03:1e:
77:f9:ae:1f:5f:f5:cb:ec:13:e6:b3:33:d4:8a:26:
10:3f:43:55:cf:f2:9a:08:64:99:b9:28:6a:a7:b3:
4a:84:00:89:d5:67:b2:16:38:c4:fc:e2:e2:01:cf:
b8:da:8e:7f:0a:a5:3c:04:0d:27:17:28:0c:45:a8:
ba:3e:dd:30:0b:c9:4c:5b:75:95:41:53:a0:12:cd:
5b:a6:83:90:e1:cd:3a:9c:63:8b:81:1b:80:d9:1a:
5c:87:24:f9:e4:0b:19:45:e4:25:ad:81:11:fd:6a:
46:d3:b7:06:51:b0:ce:bf:9e:d1:55:96:c2:ad:b8:
5c:85:4d:45:a0:1c:3d:07:77:74:4b:2b:95:53:57:
fe:d1:6b:85:dd:d5:e2:33:81:56:5e:4d:68:d9:85:
4f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:6D:E3:F2:FC:FF:0E:06:61:CC:2D:CE:7D:79:97:49:C2:16:69:75
X509v3 Authority Key Identifier:
keyid:74:59:01:B4:02:D4:82:F3:D6:DD:29:28:EA:8C:ED:2E:EB:6C:E4:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b1:ed:79:54:24:49:b5:41:18:8f:12:a6:65:75:d7:5e:ff:
7d:d0:c0:09:99:50:8e:37:dd:cf:c1:4e:b6:e6:84:e5:d2:3e:
06:5b:3e:06:5f:c8:aa:83:b0:a7:cd:4b:62:da:2b:85:1e:81:
4f:57:3f:71:a6:64:7c:7f:49:98:2f:1d:ce:6e:bc:5b:c8:59:
bf:61:3a:f7:40:42:bd:6e:22:4d:56:4a:84:a2:e1:16:05:dd:
65:c0:aa:13:55:ce:50:89:46:f8:51:0c:9b:8f:28:71:2f:87:
8f:4e:75:06:c3:04:b2:aa:ff:4c:a0:73:b4:56:10:58:0d:e5:
23:cf:42:de:75:0b:ac:22:b2:4d:f8:b6:0c:fe:42:42:b0:16:
fa:38:59:ca:f1:e4:24:59:6c:67:7f:f4:49:ec:13:22:02:57:
3d:6b:d6:3f:df:d3:d8:8e:54:43:e0:5a:b7:d2:ae:de:56:e8:
95:af:9c:59:9d:38:c7:ec:0b:1d:af:70:32:a6:07:bb:d1:3a:
f7:48:3d:ad:7f:b6:26:37:a5:6b:8f:96:1f:0e:06:c9:93:8e:
24:1a:ed:0a:f6:03:56:d3:0b:82:5f:a7:18:5a:96:7b:d9:e3:
2e:13:14:b1:05:0f:29:f5:aa:d5:0a:09:ae:83:e6:50:c5:1c:
ed:0b:3d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:33:07 2026 by rpki-client