Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
File: DWu1npe_Ox78NWnflWxF5HKEmGE.mft (raw, json)
Hash identifier: MAfg6JKDBpn2+tIoNGnSzbRLB8ofLC3AjX/ux3VTJ1Y=
Subject key identifier: A2:B8:30:F7:2E:4A:95:97:60:73:22:F9:F2:7A:5B:D4:A3:37:B8:3D
Authority key identifier: 0D:6B:B5:9E:97:BF:3B:1E:FC:35:69:DF:95:6C:45:E4:72:84:98:61
Certificate issuer: /CN=0d6bb59e97bf3b1efc3569df956c45e472849861
Certificate serial: 019DA29C0C2C582DBB9CF00C54E7B0FE9676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
Manifest number: 0BD7
Signing time: Sat 18 Apr 2026 22:00:28 +0000
Manifest this update: Sat 18 Apr 2026 22:00:28 +0000
Manifest next update: Sun 19 Apr 2026 22:00:28 +0000
Files and hashes: 1: DWu1npe_Ox78NWnflWxF5HKEmGE.crl (hash: 7j9JjcAHFfj0le2MSaKCtLftcfX15uULBN8pjNZMYAA=)
2: j8vNC93uxoh-4kk4cHhskKuIFe4.roa (hash: BN9kSSFWkYcPXBEGoOjVhdYG3iHtGqPP4CWGHkZ5iSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:9c:0c:2c:58:2d:bb:9c:f0:0c:54:e7:b0:fe:96:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d6bb59e97bf3b1efc3569df956c45e472849861
Validity
Not Before: Apr 18 22:00:28 2026 GMT
Not After : Apr 19 22:00:28 2026 GMT
Subject: CN=a2b830f72e4a9597607322f9f27a5bd4a337b83d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:59:fd:de:32:ee:cc:b7:5b:59:3a:d9:42:a3:
17:88:98:bc:ef:20:62:39:e3:fd:b8:30:15:8a:34:
f6:c6:af:5a:fe:81:f1:67:7b:bd:1a:42:7b:07:49:
84:a8:70:4c:c4:9a:bf:c6:f9:dd:7e:18:ea:53:e1:
9f:be:b5:d6:21:69:2d:c7:b1:6b:ac:07:ea:34:1e:
dc:8c:91:60:5f:02:5b:54:50:dc:e1:31:02:16:8d:
17:c2:6b:e6:14:67:1d:5f:8b:17:7d:ea:54:6f:8b:
c0:5b:8a:39:06:d5:84:77:ae:1f:11:7c:e0:13:4b:
38:18:f4:cc:9a:da:01:70:c3:f6:54:8c:32:88:87:
f4:33:46:24:7a:87:60:c7:ae:16:80:9e:67:bb:49:
81:65:7f:e9:39:2e:f5:65:3a:b8:2d:7f:9f:9f:2c:
de:55:15:db:f0:76:f4:96:87:45:45:63:7d:14:84:
ce:13:d1:a2:42:85:e0:46:4f:91:41:25:d3:8a:ae:
20:cd:4f:44:e3:a0:df:db:d6:06:47:bb:7f:66:ad:
18:27:7e:89:f1:85:a0:32:a2:fd:a9:c0:73:d1:5b:
8e:91:d6:c1:5c:98:20:ff:52:f0:86:0b:65:ed:2f:
66:77:60:85:1c:09:5f:1a:ec:71:20:1f:04:56:93:
be:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B8:30:F7:2E:4A:95:97:60:73:22:F9:F2:7A:5B:D4:A3:37:B8:3D
X509v3 Authority Key Identifier:
keyid:0D:6B:B5:9E:97:BF:3B:1E:FC:35:69:DF:95:6C:45:E4:72:84:98:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:4b:a5:0b:3f:b0:16:11:6c:88:97:96:43:2c:f7:48:eb:15:
df:a2:53:61:a2:f4:63:d3:09:3f:6d:79:ed:d7:e8:1d:ea:34:
a9:a3:64:fa:40:c4:d0:ba:ad:56:1f:05:d3:df:89:43:50:51:
82:93:1e:60:6d:1f:88:57:12:de:a0:8f:ab:95:bd:df:b7:40:
d8:2a:6a:50:cf:15:cb:65:1b:fe:7c:0d:37:f0:ba:93:07:45:
f0:f2:5d:38:a7:ac:75:b4:a6:6a:1c:fa:9f:25:d1:f8:7f:8b:
a5:aa:b4:c8:df:58:c0:27:52:69:cf:d6:70:0c:94:c3:82:54:
41:44:d8:a0:61:4f:c2:fc:94:a1:df:5b:e3:c6:01:b1:d6:b7:
2d:1b:e2:f7:b2:c0:94:27:98:72:c4:dd:b7:79:f5:e6:f1:03:
b9:28:c8:8a:db:f6:9e:24:73:8b:30:9e:ac:9f:4f:c3:59:2a:
59:0b:da:81:44:2e:5d:e2:4d:34:61:ac:51:c3:10:33:44:ed:
f1:a9:3c:ab:2f:d6:aa:cc:21:17:da:8c:2b:e6:d1:c7:e9:07:
bd:2c:53:72:82:93:2a:15:70:a6:33:ef:19:7d:15:25:00:f9:
3d:41:63:59:5f:fa:3f:41:01:da:70:66:45:c4:4d:68:81:b6:
c4:b9:04:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:53:44 2026 by rpki-client