Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
File: dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft (raw, json)
Hash identifier: eQwI0GxvfY0NyrsBxdFscDXNrBlwAC7WYww6e1HZbys=
Subject key identifier: CF:14:D6:F3:E4:BD:91:C4:52:2E:30:0D:2B:09:DD:F8:A1:88:A1:82
Authority key identifier: 74:70:DF:C0:BB:5C:E0:6D:86:DF:24:FE:3C:AA:4B:4E:F3:41:78:F4
Certificate issuer: /CN=7470dfc0bb5ce06d86df24fe3caa4b4ef34178f4
Certificate serial: 019D98F416F1C3910331E9F74C321031862B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 01:00:26 +0000
Manifest this update: Fri 17 Apr 2026 01:00:26 +0000
Manifest next update: Sat 18 Apr 2026 01:00:26 +0000
Files and hashes: 1: dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl (hash: 7abA8wx1oYc6Jms7DwtzblgkaFC3ZFkBE0TUTb6VILE=)
2: eBuAc98eLhdzaSpEXuI8KUheXdk.roa (hash: ZAyeKkTZKpzp6DSuRIfinH6S1nkpaZ2M6lG5LcE6ZAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:16:f1:c3:91:03:31:e9:f7:4c:32:10:31:86:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7470dfc0bb5ce06d86df24fe3caa4b4ef34178f4
Validity
Not Before: Apr 17 01:00:26 2026 GMT
Not After : Apr 18 01:00:26 2026 GMT
Subject: CN=cf14d6f3e4bd91c4522e300d2b09ddf8a188a182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ce:aa:f1:77:60:4b:5b:2a:2c:87:8e:95:a8:
52:fb:95:b6:87:e7:94:2f:48:94:da:e7:5a:02:be:
2e:a0:9b:74:73:c0:41:51:0e:79:f7:df:b9:63:60:
a6:a4:bf:16:33:34:ff:b9:0a:14:0c:99:fa:d1:63:
b8:6f:ac:21:5d:d4:85:4f:6f:3e:f3:f3:f2:cc:89:
7e:a8:0b:05:55:af:c5:1e:32:79:12:62:db:b1:a0:
77:20:e5:dd:55:10:64:fe:d5:ae:70:19:f0:14:3d:
62:3d:2c:a5:68:fb:64:59:0e:5d:5b:5c:dc:da:ef:
2b:66:df:8c:d3:c6:fc:3b:11:48:9a:97:36:f7:11:
22:97:d7:16:fe:3f:5d:56:e2:ee:49:e6:df:d6:a7:
5d:bb:41:8e:2c:03:13:64:ca:7a:b0:cc:db:82:23:
7a:7b:ab:01:1b:a9:33:a8:9c:ae:9a:dc:76:af:61:
cb:4f:3a:36:16:e5:eb:ed:1c:53:d3:c7:01:a6:f2:
a9:9f:4e:09:0a:83:3f:e7:11:c3:bc:44:ec:8d:82:
48:08:81:4c:6f:2a:59:d3:42:b5:58:06:95:8c:ad:
34:a5:1d:81:74:69:f8:8c:fe:28:68:98:23:1d:8f:
5d:db:85:94:b3:d5:e7:f0:53:d0:4c:7a:1e:f9:75:
f5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:14:D6:F3:E4:BD:91:C4:52:2E:30:0D:2B:09:DD:F8:A1:88:A1:82
X509v3 Authority Key Identifier:
keyid:74:70:DF:C0:BB:5C:E0:6D:86:DF:24:FE:3C:AA:4B:4E:F3:41:78:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:43:f1:27:95:d8:20:de:20:92:2d:f9:46:fd:21:ad:43:a0:
69:09:c3:9d:25:9d:f8:c9:23:82:48:f1:0c:c6:5c:da:39:06:
de:4f:45:3f:9b:00:a7:16:e3:d7:58:2c:c6:dc:9d:74:b3:90:
81:44:c5:c8:c2:ef:67:55:8a:e3:00:a7:44:d4:10:c1:99:e7:
cc:85:14:15:98:9f:6f:4f:2a:24:fd:af:44:58:77:19:d2:c6:
64:ef:d6:7e:9d:91:d9:bf:8a:d3:17:ad:78:f2:62:d8:f8:63:
5f:7a:48:21:f6:fe:55:aa:91:7f:c5:ab:bc:43:21:29:64:c6:
1b:79:80:b7:0b:bb:85:05:db:c8:91:2d:bc:c1:4f:fe:c2:0c:
29:08:79:bf:13:b0:bb:7a:69:23:d4:d4:0f:ce:9c:24:34:ce:
2f:5a:0a:cb:db:68:c1:3a:e9:8b:46:d3:57:86:b0:19:f5:a0:
9b:33:d4:d6:f2:d8:a2:83:06:bb:34:82:ce:a6:1d:b6:1e:7b:
6a:fc:d8:5a:bb:3b:dd:bd:27:8d:1e:fd:82:4b:4c:25:0a:2a:
e4:70:33:ab:39:8b:05:cd:df:0a:a7:26:54:9c:db:a0:d0:66:
8e:43:10:0d:b8:06:5f:87:75:7a:68:ea:77:e8:09:90:f6:56:
75:5b:71:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:04:57 2026 by rpki-client