Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
File: DG8YKAS1blCKo3LAPM63PvjCxos.mft (raw, json)
Hash identifier: 8IyRP8Sv5AR9j1IDlzCYdxby/U5Zw0YXtsD0gbhxAOQ=
Subject key identifier: B3:6F:87:D0:9D:2C:6A:56:FD:5C:B5:8A:CD:61:F9:0A:74:F5:EF:C6
Authority key identifier: 0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B
Certificate issuer: /CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b
Certificate serial: 019D9850678BA0609F86BA8A78FA0AE32D65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
Manifest number: 18C9
Signing time: Thu 16 Apr 2026 22:01:39 +0000
Manifest this update: Thu 16 Apr 2026 22:01:39 +0000
Manifest next update: Fri 17 Apr 2026 22:01:39 +0000
Files and hashes: 1: DG8YKAS1blCKo3LAPM63PvjCxos.crl (hash: hLqGKR7TRZv/xZXImAwT0OTP+xGk9JgZPocr3h0AmRo=)
2: anGfaLD7Sw-uBHUL7ZCjm1E0Zuo.roa (hash: odjCBhO2fg7tVXSaHs+W/QeZyJocuWu2JrcGva0i788=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:67:8b:a0:60:9f:86:ba:8a:78:fa:0a:e3:2d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b
Validity
Not Before: Apr 16 22:01:39 2026 GMT
Not After : Apr 17 22:01:39 2026 GMT
Subject: CN=b36f87d09d2c6a56fd5cb58acd61f90a74f5efc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d7:1a:c9:29:27:0b:31:2d:20:01:0a:1e:1e:
ad:f0:e0:4d:b3:07:e7:c3:cc:9d:cc:26:3b:e5:a3:
f5:50:4f:07:be:ec:fc:3e:c9:04:d0:0c:01:94:9f:
28:2e:e5:5b:9e:e4:c6:8c:fa:21:19:b4:7d:d9:86:
fd:b2:92:20:86:9d:8c:df:e5:66:23:e9:7c:9b:a2:
09:d4:fb:db:6b:aa:86:ca:11:28:65:8c:37:30:94:
43:f2:5d:eb:73:72:f6:df:c2:33:da:7a:8f:4b:4b:
d7:c2:17:6f:24:ba:e7:8e:4d:a1:fa:05:44:96:c7:
9e:b3:42:b7:61:a9:a3:f9:fe:14:07:1c:a6:34:d2:
fc:8e:82:15:14:78:61:3c:c8:f5:34:31:2b:70:d7:
80:cd:04:be:95:26:a7:7b:1d:a0:2e:2e:20:9e:3e:
ba:69:f2:b1:5c:a6:6a:c9:1e:c7:05:f2:bb:0d:82:
29:c1:41:52:25:7e:c2:07:d9:19:e3:76:21:70:a5:
d4:c3:52:1a:ae:c2:f4:bd:be:3c:41:44:ff:da:31:
98:85:8d:d4:45:59:ce:44:a3:5c:b3:2f:d7:6d:a2:
66:00:45:cb:fc:83:20:60:69:79:cf:7f:29:57:56:
f9:23:93:38:a2:c1:32:90:71:8a:28:69:ae:9b:41:
02:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6F:87:D0:9D:2C:6A:56:FD:5C:B5:8A:CD:61:F9:0A:74:F5:EF:C6
X509v3 Authority Key Identifier:
keyid:0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:21:b4:41:10:a3:39:c9:04:9a:ed:0d:f1:9e:2b:8d:ba:ea:
45:8c:9b:c3:db:1b:5f:d4:73:5d:72:82:40:e8:a9:a9:c9:7a:
5f:da:c1:ba:60:51:3e:b5:04:44:a8:7c:0f:2d:c1:9c:be:1e:
26:45:c3:46:0b:5f:05:3e:42:a1:8c:f0:6c:ab:a5:b2:39:58:
fb:a6:e9:65:7d:c7:3d:d6:37:00:22:be:9a:d9:fd:ba:e4:76:
a7:eb:60:c7:25:ab:17:66:c8:d7:36:0a:25:d7:f1:41:1b:c4:
89:4b:0b:e7:da:db:5b:0c:c2:cc:d5:34:eb:18:1d:aa:dd:9c:
42:7b:a0:ec:4d:67:07:2a:66:ab:1a:1e:89:db:82:53:20:3a:
3d:4a:04:48:9f:0c:8e:61:3b:2d:79:ac:20:cd:0f:c9:15:ce:
98:e6:89:47:a5:b8:e0:eb:35:1c:73:59:27:67:90:9a:0f:62:
29:73:a4:84:ab:1d:da:06:26:4d:f6:09:0c:15:9e:1f:d4:6f:
df:57:27:f4:e1:dc:ed:99:43:e2:63:11:73:72:db:cd:b9:f0:
ef:57:bd:51:da:61:3f:b8:b7:3f:53:17:14:3c:03:dd:f1:c5:
35:1c:54:18:4e:8e:39:22:ed:06:85:ce:a2:cc:34:cc:fa:ce:
e7:09:fa:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:06:48 2026 by rpki-client