Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
File: D4nIaX93ksqvWZZk6JrOZSRPiug.mft (raw, json)
Hash identifier: cfpDzZw8Ne82Bmn4AjUMiTQTzCtX9IQgRPqltaEG7oU=
Subject key identifier: 8D:6E:64:0E:C5:01:63:3C:BC:A3:FD:74:44:59:7A:12:07:C1:82:23
Authority key identifier: 0F:89:C8:69:7F:77:92:CA:AF:59:96:64:E8:9A:CE:65:24:4F:8A:E8
Certificate issuer: /CN=0f89c8697f7792caaf599664e89ace65244f8ae8
Certificate serial: 019D9A74B7F8E24ADA262CA997F17BB220C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 08:00:33 +0000
Manifest this update: Fri 17 Apr 2026 08:00:33 +0000
Manifest next update: Sat 18 Apr 2026 08:00:33 +0000
Files and hashes: 1: 3gWQQGBcbMv1PcGiymFULbhDgQk.roa (hash: R5FpPwb0TIXhum/MUuquZBI0EvROR3vjJFQryTKsboI=)
2: D4nIaX93ksqvWZZk6JrOZSRPiug.crl (hash: QWgmluK4jFgu6ZWszdBhgFyXwc+O4dNGoOHg2Of6xp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:b7:f8:e2:4a:da:26:2c:a9:97:f1:7b:b2:20:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f89c8697f7792caaf599664e89ace65244f8ae8
Validity
Not Before: Apr 17 08:00:33 2026 GMT
Not After : Apr 18 08:00:33 2026 GMT
Subject: CN=8d6e640ec501633cbca3fd7444597a1207c18223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f3:ed:d0:08:43:f9:96:2a:08:e5:09:d3:80:
c6:78:89:82:8f:5b:f6:17:7e:a4:74:7a:3a:f1:77:
85:b6:d8:d0:bc:3c:87:b5:09:f0:32:a6:09:b5:b6:
c8:60:58:c3:23:4a:d4:51:29:23:85:ca:24:4c:c6:
c4:59:8d:8a:d3:6f:a9:ad:f9:45:40:ab:63:7c:ca:
30:63:b2:ca:62:4e:8c:af:18:3a:2a:1c:ff:a9:a9:
99:e2:cd:7c:90:77:c1:cf:1c:76:d3:2a:03:a0:13:
64:3d:d5:15:01:8f:f2:18:e2:c6:ef:b0:76:76:a1:
55:df:66:11:b5:d1:52:be:a0:68:c2:e4:3d:43:0e:
76:63:2f:d4:cb:f2:9f:b4:82:09:2b:4e:f3:dd:b0:
6e:45:a8:81:8f:af:6f:c3:5c:a6:78:6c:e4:9e:0a:
15:bf:f4:4a:1a:1e:42:84:e5:13:57:f9:b9:03:af:
fb:f8:00:56:b4:99:5e:e9:64:ef:14:2a:8b:85:62:
84:e8:73:cf:94:dc:ac:7b:16:21:21:c1:c2:fd:27:
e9:19:a3:c8:6a:93:b9:a8:6b:fa:5c:44:fe:a9:79:
f5:48:97:be:43:fc:3b:f8:f9:de:dd:b7:c0:76:23:
6b:f5:ca:62:40:8e:88:d0:5c:7e:b0:7f:7a:ac:a4:
c1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6E:64:0E:C5:01:63:3C:BC:A3:FD:74:44:59:7A:12:07:C1:82:23
X509v3 Authority Key Identifier:
keyid:0F:89:C8:69:7F:77:92:CA:AF:59:96:64:E8:9A:CE:65:24:4F:8A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:0a:38:42:8e:d7:bf:d4:34:57:97:19:09:40:d4:24:db:32:
fc:91:c5:9b:93:f4:ad:0e:90:ad:36:36:59:c7:ad:31:d7:fb:
93:1a:7c:82:1b:10:47:1b:b5:31:49:be:76:66:d3:a3:1e:5e:
03:5b:df:6f:7b:f2:5f:4b:5e:7f:47:65:e8:fe:cb:c2:c9:4c:
4e:22:ac:2e:94:c1:ea:f7:e1:ac:17:43:cd:7d:3e:6a:3b:da:
d4:88:d3:e7:0a:f5:3c:36:ef:7f:e4:56:a5:d6:28:fe:2e:56:
69:7b:5c:65:7c:85:17:6d:2f:49:5d:3b:81:8b:f3:8e:94:5f:
c4:cb:2f:e1:07:57:62:50:2e:69:38:46:8d:7b:72:98:6d:92:
de:6f:41:f1:ce:81:81:5a:38:c6:7b:c2:1f:75:b4:bb:a4:9d:
db:58:1a:54:97:40:de:cc:5c:eb:93:f0:00:ad:66:28:58:de:
e1:80:4e:87:ef:53:dd:53:a4:7a:cc:e1:1b:79:dc:dc:2a:4e:
d5:0f:ee:6d:b2:8e:1b:ba:10:f7:15:5f:8d:b7:ce:11:a3:95:
a8:c3:28:43:10:85:24:26:23:42:8f:c1:95:d2:6f:f8:4c:50:
a8:44:60:36:0e:e4:31:0f:7d:7e:c8:66:b6:a9:1e:1b:a7:fe:
08:9e:1e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:32:45 2026 by rpki-client