Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/dXFLWBraGW41UcCM52JDvgWLROs.mft
File: dXFLWBraGW41UcCM52JDvgWLROs.mft (raw, json)
Hash identifier: fSFMbJKB/2+FBeikKRSP3Kg2syecKapJ4zmOft0XiWw=
Subject key identifier: 55:A0:6F:2F:7E:A1:2A:35:FD:CA:71:F0:65:A0:FB:CB:14:47:4A:30
Authority key identifier: 75:71:4B:58:1A:DA:19:6E:35:51:C0:8C:E7:62:43:BE:05:8B:44:EB
Certificate issuer: /CN=75714b581ada196e3551c08ce76243be058b44eb
Certificate serial: 019D97E17AE43B6F588FA72E36C947E7A350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXFLWBraGW41UcCM52JDvgWLROs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/dXFLWBraGW41UcCM52JDvgWLROs.mft
Manifest number: 18BF
Signing time: Thu 16 Apr 2026 20:00:29 +0000
Manifest this update: Thu 16 Apr 2026 20:00:29 +0000
Manifest next update: Fri 17 Apr 2026 20:00:29 +0000
Files and hashes: 1: 6TGqIbfBirKwY8Rk6PCVIU2K2Ks.roa (hash: Qk1RBNZJLMvjKgF43IlbWL77De/BDCbxdLr5OTm2nJA=)
2: dXFLWBraGW41UcCM52JDvgWLROs.crl (hash: aL4v1qjQ9W4wQovpBSNplN2j8IBDIe4uek7yPxqHEcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/dXFLWBraGW41UcCM52JDvgWLROs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/dXFLWBraGW41UcCM52JDvgWLROs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXFLWBraGW41UcCM52JDvgWLROs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:7a:e4:3b:6f:58:8f:a7:2e:36:c9:47:e7:a3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75714b581ada196e3551c08ce76243be058b44eb
Validity
Not Before: Apr 16 20:00:29 2026 GMT
Not After : Apr 17 20:00:29 2026 GMT
Subject: CN=55a06f2f7ea12a35fdca71f065a0fbcb14474a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:44:00:e7:b1:9b:92:1f:82:98:da:e9:f6:21:
87:e4:63:3a:46:9b:01:c7:ff:46:e8:33:89:93:26:
aa:2f:9e:4f:5a:1c:70:8c:44:e1:ab:00:e8:ca:0d:
a4:e5:6a:db:04:2c:8c:c6:91:dc:87:65:d4:37:8a:
3a:e5:67:8b:bb:79:5e:75:47:1c:f5:8e:f8:0b:5f:
d2:46:14:28:71:ad:7f:8a:34:b4:a4:02:c0:52:c3:
2b:79:a3:a2:50:dd:bf:da:99:96:e1:10:f1:e3:52:
1f:bd:f2:5c:59:8d:79:9b:cb:a2:f0:87:cc:65:35:
7c:95:31:2e:36:d9:b9:60:cf:60:7e:de:06:ec:ab:
c4:26:c3:b8:bc:8e:d4:d4:05:42:d4:05:0d:6a:05:
71:48:3f:3e:76:bb:c1:7c:fb:91:72:33:52:2f:5d:
5d:31:dd:b1:6c:93:92:7c:56:43:c7:f9:29:ee:73:
09:50:6e:94:5e:0a:29:e4:9d:ac:b3:e9:0d:74:78:
69:23:4e:5c:14:c8:cc:67:5e:fd:a1:52:c0:74:e5:
57:2d:6d:54:a1:31:04:58:7a:58:8c:b6:26:18:c0:
e1:a3:a9:4d:f4:7d:69:43:2f:15:6d:60:3e:67:40:
0d:e9:a6:a6:7c:4c:c1:3d:7e:82:5c:78:4f:ec:f4:
0d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A0:6F:2F:7E:A1:2A:35:FD:CA:71:F0:65:A0:FB:CB:14:47:4A:30
X509v3 Authority Key Identifier:
keyid:75:71:4B:58:1A:DA:19:6E:35:51:C0:8C:E7:62:43:BE:05:8B:44:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXFLWBraGW41UcCM52JDvgWLROs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/dXFLWBraGW41UcCM52JDvgWLROs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/dXFLWBraGW41UcCM52JDvgWLROs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:af:06:a5:a6:48:8c:a8:97:59:a4:b7:30:fa:5a:5a:e6:7a:
fd:a3:88:b4:01:5e:20:c2:a8:94:78:9d:f4:f1:d0:25:6b:23:
90:c2:de:6e:ca:0b:03:37:98:aa:35:e5:03:3c:9d:8f:4d:99:
50:cd:23:7d:cf:1c:40:8d:06:86:ac:71:45:96:f7:bf:fe:29:
34:9b:24:78:1c:d6:46:ff:9a:75:1d:94:46:49:63:8d:17:b8:
e3:b8:54:28:cf:51:98:0f:77:c4:3d:8f:99:14:9d:a3:3b:b8:
fa:ff:f8:60:fe:49:98:54:a3:bb:90:11:7c:a1:b4:f5:22:1c:
90:5f:9e:23:af:3b:af:56:e4:f9:60:eb:d5:10:07:c3:7c:d5:
16:98:96:e9:8f:e1:b3:b8:0b:f8:b0:71:e2:71:cb:bd:4d:fa:
17:62:1e:72:7f:a5:ad:56:2d:bb:52:15:bf:29:4e:d6:cd:7a:
a5:cc:ea:42:a3:01:f6:f9:fb:2e:09:9e:52:4e:14:8a:6a:8d:
da:1a:ba:34:63:93:31:cf:02:ed:a5:96:4e:5c:cb:a8:03:90:
ee:be:7a:9f:7f:0a:2b:f3:f7:d5:aa:eb:3c:dd:bd:ed:9d:1a:
74:06:1e:49:89:f6:09:cc:6c:24:bd:be:70:ff:d4:ee:58:24:
c4:dd:53:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:27:34 2026 by rpki-client