Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
File: De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft (raw, json)
Hash identifier: npefQzoEyQ/hnk0G+MGxMjYikklrb1GphDFk013xpOQ=
Subject key identifier: FF:74:F2:AC:B6:5C:4E:A4:53:F5:C5:06:70:14:0D:07:6E:35:75:50
Authority key identifier: 0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4
Certificate issuer: /CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4
Certificate serial: 019D9AE2D462CC2ABFAFB97582D055994154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
Manifest number: 0CB0
Signing time: Fri 17 Apr 2026 10:00:49 +0000
Manifest this update: Fri 17 Apr 2026 10:00:49 +0000
Manifest next update: Sat 18 Apr 2026 10:00:49 +0000
Files and hashes: 1: De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl (hash: c3tQnknScsfz5vBBky5slD8D/5cOCCfe/B6kOba7HWw=)
2: SbbT_vemLYhSpPxloUrfpgEATIA.roa (hash: TxqN78AgB7Nz/Wz8KEGfJojT7Yd8MRSlYTLQkCNBIXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:d4:62:cc:2a:bf:af:b9:75:82:d0:55:99:41:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4
Validity
Not Before: Apr 17 10:00:49 2026 GMT
Not After : Apr 18 10:00:49 2026 GMT
Subject: CN=ff74f2acb65c4ea453f5c50670140d076e357550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:20:7f:d6:4a:8e:b3:d8:fd:17:42:f9:6c:c3:
18:80:bc:6a:1d:ad:43:b0:aa:49:db:f4:40:79:85:
16:04:42:b9:82:6f:5c:8b:b6:a1:68:66:3d:4b:7d:
c5:54:20:f3:16:3c:77:2e:57:39:39:b3:0c:08:b7:
8c:5e:a1:aa:db:5d:fe:6d:d8:13:5b:46:c6:d6:9e:
14:0f:27:23:be:20:a2:af:40:ab:88:29:c6:18:41:
9c:06:bf:83:4d:70:0d:53:e9:bf:27:51:50:0e:a7:
29:59:29:a9:02:c2:0c:c1:d3:16:67:c9:54:cf:09:
94:b0:3c:84:38:72:db:31:59:4d:86:f2:ab:bb:a3:
6b:74:f9:78:74:45:2d:40:5a:19:77:24:b4:7f:1e:
5e:50:5d:f2:ae:db:94:f4:b8:f8:af:37:05:b1:71:
f7:47:b3:87:f8:8e:02:c5:6b:05:6f:65:f8:05:6c:
b8:4c:bb:79:b1:b2:19:ee:fc:5f:77:c5:da:93:3d:
5a:ef:7a:90:e3:64:f9:4b:03:59:e6:b5:f2:98:05:
0d:77:23:d9:b2:59:ba:c3:b7:ae:9c:3c:4b:46:7d:
48:d9:e5:00:7a:3f:dc:7d:50:60:ce:57:7b:c4:de:
38:60:fd:b4:91:6a:c1:59:09:e3:b3:26:60:9e:2e:
95:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:74:F2:AC:B6:5C:4E:A4:53:F5:C5:06:70:14:0D:07:6E:35:75:50
X509v3 Authority Key Identifier:
keyid:0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:81:50:7f:ef:36:07:50:82:41:e5:47:08:1f:bf:3f:08:ad:
1d:68:7d:82:e5:0a:16:ce:e2:70:c0:39:25:3c:9d:79:4a:9d:
a5:75:e1:fb:ee:16:1d:a7:b8:ce:86:f7:52:90:51:e1:bb:1b:
03:72:7e:1b:16:e3:86:1e:c4:1e:62:58:32:50:eb:52:a3:a3:
08:b8:03:63:db:a0:b7:12:ae:10:7e:be:b7:e0:06:1e:ca:2a:
6b:47:ed:ac:9e:44:9d:16:fd:91:14:c3:ea:dd:4e:eb:57:fb:
da:7a:28:a4:80:ae:79:cb:83:8d:8f:e4:3d:8e:aa:f5:9d:ce:
90:58:92:56:91:3f:89:7c:8c:bd:f9:c0:93:cd:05:ea:c7:5b:
ca:ce:04:10:b7:df:2c:e5:55:bf:79:42:0f:95:5a:0b:85:25:
17:c5:05:0d:fc:9b:7b:f7:ac:28:9a:f8:13:56:de:99:f6:07:
7e:6c:0d:66:f4:6e:3a:bf:1c:4c:44:d5:71:55:df:b1:85:4f:
11:b1:c6:b9:2a:68:f7:85:78:3d:27:88:aa:e4:d5:8c:a8:0f:
09:d5:59:7f:11:70:1a:d9:11:dc:b3:e7:54:ba:61:73:17:b8:
98:37:bf:8b:34:bf:97:91:a8:cf:9b:f7:55:49:04:9c:02:a6:
b6:84:83:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:42:41 2026 by rpki-client