
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
File: RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft (raw, json)
Hash identifier: 8NDudJRqwkT+FG9EoUJVjja465w6Wk8RLwh2Y6HHqOI=
Subject key identifier: 9D:4D:DB:DB:2C:09:69:D5:3B:3A:7E:63:0A:63:59:2C:7B:61:C5:E7
Authority key identifier: 45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D
Certificate issuer: /CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
Certificate serial: 019D981873B96C4D26600315A0C21C80C20A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
Manifest number: 18C0
Signing time: Thu 16 Apr 2026 21:00:32 +0000
Manifest this update: Thu 16 Apr 2026 21:00:32 +0000
Manifest next update: Fri 17 Apr 2026 21:00:32 +0000
Files and hashes: 1: RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl (hash: UTGRm9HtU76K1FjguyzzaQ7/SMaCw++Zzobv9JJmoh0=)
2: _UE15j8dt-0E4MNHI1SJ6VAbDdo.roa (hash: RpMmPkih2MaIwwmI1CZ2YI65k33Pkn9LWYdRz9m4yPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:73:b9:6c:4d:26:60:03:15:a0:c2:1c:80:c2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
Validity
Not Before: Apr 16 21:00:32 2026 GMT
Not After : Apr 17 21:00:32 2026 GMT
Subject: CN=9d4ddbdb2c0969d53b3a7e630a63592c7b61c5e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:37:c8:9d:79:2b:cd:a0:bf:c4:98:9a:cf:c4:
b3:7d:1f:0a:cb:97:23:59:41:b9:6c:12:0f:80:da:
6b:9b:98:b7:0b:3c:b1:dd:94:f4:86:19:69:d5:cd:
03:b5:0c:ac:3a:28:73:a9:9c:b3:cb:58:c6:e4:7c:
51:90:64:0b:2b:a2:db:44:7a:8b:f1:52:c9:05:43:
fe:99:25:d0:2c:1c:ea:ad:db:c0:a6:45:3f:2d:62:
4e:c8:0b:b1:e0:d0:02:c7:62:ae:ff:ce:25:33:69:
79:68:15:67:5b:ff:e5:38:a0:c2:76:10:a1:ca:fa:
f8:75:1d:86:34:e0:ce:18:7c:44:ef:d3:90:e3:87:
e3:e8:92:44:36:ed:25:26:8c:0b:8c:b8:07:d5:16:
fb:ca:02:f5:55:c0:9a:8f:61:54:81:ec:d5:93:9a:
c5:7e:f9:c2:e3:e4:97:a8:39:41:17:d7:50:0c:44:
b9:93:ed:bc:5d:0e:43:2f:f8:cb:20:d7:9e:af:1d:
7c:2b:14:54:f3:ab:ef:ba:67:c6:e3:2f:43:a0:17:
ef:60:97:f2:87:7d:dd:36:18:6a:37:77:2c:85:66:
fa:05:bf:58:52:4b:2e:d9:66:46:40:a5:47:82:c1:
33:1f:a4:48:34:a3:98:9b:12:ad:59:69:57:0f:eb:
e4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4D:DB:DB:2C:09:69:D5:3B:3A:7E:63:0A:63:59:2C:7B:61:C5:E7
X509v3 Authority Key Identifier:
keyid:45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:30:67:66:d7:ef:71:56:ca:ba:75:7c:63:91:89:30:43:58:
d3:25:70:2c:d2:a6:5d:28:83:07:a4:9e:e5:57:b9:9a:d9:c9:
3e:3f:6a:d3:09:9c:77:f7:54:97:0a:91:77:c7:29:ad:44:a5:
eb:d8:fc:ce:3f:ad:4a:e6:dd:2a:56:54:64:61:7c:46:f0:bf:
42:ed:88:63:03:64:5b:47:4f:d3:9d:05:af:1a:ce:0e:ce:81:
78:18:67:17:86:55:a9:02:7f:9c:5d:24:b5:b1:60:a7:d5:42:
19:e5:fa:b2:32:6b:77:69:f8:08:24:d4:19:9a:45:c1:4b:50:
cb:46:85:f0:fe:58:9e:4f:a2:80:61:89:a4:fe:52:3d:b9:b7:
e9:a0:ca:3e:31:1e:2b:9f:f9:ae:7c:c3:3f:e5:0f:2b:f9:ec:
df:86:62:5b:1c:1f:ca:18:b5:d5:22:da:2f:11:4d:0c:4b:b8:
c6:7f:fb:bd:92:e8:06:4f:b9:d5:9b:9b:94:a8:99:de:3b:b1:
d1:fb:0d:09:cd:b3:4b:87:48:c3:63:43:23:47:9e:c0:67:0f:
d7:57:fd:84:28:ee:a6:9d:ba:82:33:23:62:17:26:21:c2:6e:
00:c5:d4:fa:62:98:be:8a:67:1a:4a:21:02:6d:ed:8d:82:0b:
3e:d4:88:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:59:55 2026 by rpki-client