Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
File: dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft (raw, json)
Hash identifier: 2PxhC9mwsgPaPjFwZ65t/6skQLa45GLaRukG2I+2XG8=
Subject key identifier: D4:24:9E:9E:98:FF:50:0B:2C:67:54:6A:19:9A:03:5F:96:A2:A4:B6
Authority key identifier: 76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F
Certificate issuer: /CN=7651762de3d3f19cedd438b03cf23986ce91727f
Certificate serial: 019D9962844832E1364A0DB4263869EE0E8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 03:01:03 +0000
Manifest this update: Fri 17 Apr 2026 03:01:03 +0000
Manifest next update: Sat 18 Apr 2026 03:01:03 +0000
Files and hashes: 1: H3TYAMLFFlNCp3XM0jhoUoBeQy8.roa (hash: J5xTusXlhkXdt1S3mE6QU/UGZ2zGPT9Q3Ow+NVkju+o=)
2: dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl (hash: pL+/J4AptUfjYvUc79Oj9BKGc6aySs5Mv0yvuP/zxzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:84:48:32:e1:36:4a:0d:b4:26:38:69:ee:0e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7651762de3d3f19cedd438b03cf23986ce91727f
Validity
Not Before: Apr 17 03:01:03 2026 GMT
Not After : Apr 18 03:01:03 2026 GMT
Subject: CN=d4249e9e98ff500b2c67546a199a035f96a2a4b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:da:82:eb:2b:4c:88:6f:17:e5:07:4e:6f:0f:
b1:98:07:1d:84:d2:f2:d4:30:8a:88:c2:2a:29:4d:
13:dd:38:a5:d2:68:f5:9d:e6:f8:d9:fa:c0:23:5e:
78:4c:98:c4:96:89:04:41:87:97:70:e4:b3:73:28:
1c:55:23:1a:4d:46:6d:ec:a1:bd:eb:e3:48:01:3f:
5a:eb:99:22:3d:38:79:b2:fe:29:e1:4b:57:09:ab:
78:76:a4:11:72:21:cb:bd:1d:b7:fa:8a:c2:f8:93:
bd:e2:b1:d5:07:a9:6a:76:1d:19:00:3d:6f:1f:a6:
e2:ed:00:71:02:83:18:d7:f3:f4:eb:d3:43:46:81:
06:e5:40:86:18:e4:de:3c:d6:9d:90:83:45:61:f1:
ad:0f:5d:3f:66:4c:27:1d:27:2e:8d:9b:28:21:5c:
89:58:ff:2d:ef:d1:32:86:15:8a:51:9b:aa:c4:07:
5a:b1:ae:a3:2f:36:60:46:32:ae:a2:51:39:c4:dd:
4b:e2:1a:0f:12:ff:1f:b1:a9:d1:41:46:9a:a8:bf:
48:02:9a:9b:5c:be:55:41:a9:87:8e:fb:0b:1d:ec:
63:78:e9:a7:c4:c8:36:63:98:fb:c0:92:ad:4d:31:
3e:75:19:c0:a1:7f:60:23:c7:bf:38:d2:7a:c0:cd:
c0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:24:9E:9E:98:FF:50:0B:2C:67:54:6A:19:9A:03:5F:96:A2:A4:B6
X509v3 Authority Key Identifier:
keyid:76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:88:63:80:4c:03:66:19:e6:83:0c:33:83:96:27:94:81:8b:
49:7d:85:bc:33:85:d2:6a:9e:d1:37:b0:a3:68:21:fe:d6:2a:
52:9c:7c:e6:3d:a3:d2:91:c7:78:be:fa:e9:57:6e:5c:f2:1d:
37:2e:d5:d2:e4:e0:52:4d:8c:18:18:ef:b3:23:4f:54:3b:4c:
c0:2d:cd:13:2f:62:8a:7c:79:12:e8:d3:2e:4d:5e:0f:e4:92:
57:73:21:5a:94:e7:57:a1:9f:02:68:2a:16:fe:8b:66:e5:41:
1e:05:14:01:7e:77:c4:14:7a:6e:58:c1:3f:be:cd:ff:32:79:
f8:de:ba:2b:ff:25:d0:25:e5:e8:db:e8:9f:ef:30:45:91:45:
96:f4:a2:77:c4:d1:b9:4d:91:8a:fd:58:d4:2c:50:07:c8:cb:
d6:fc:5e:af:3a:73:4e:27:26:96:e1:72:70:10:b0:87:3a:27:
a0:24:f8:2c:0c:f3:47:d8:f4:9a:b1:79:11:d1:1a:f4:2f:05:
58:7a:69:c4:41:01:98:c8:cd:f0:bf:85:0f:71:26:6a:e6:e1:
fc:ee:9c:b4:aa:77:76:36:6c:a9:40:8d:9c:79:11:d0:8e:87:
61:bd:5f:31:94:43:bd:1b:d9:f8:7c:91:a7:9b:ec:f0:55:bb:
e6:d7:ad:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:00:37 2026 by rpki-client