Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
File: _0DYouqWdjaeboF2eUkOTlBcifM.mft (raw, json)
Hash identifier: URBAB6/wG2oX51QoiusNInfH2a+mjSP2nCF1L4zz3D8=
Subject key identifier: 51:68:77:68:B9:DB:97:ED:02:2D:63:3F:77:46:EF:0D:35:8D:E4:0C
Authority key identifier: FF:40:D8:A2:EA:96:76:36:9E:6E:81:76:79:49:0E:4E:50:5C:89:F3
Certificate issuer: /CN=ff40d8a2ea9676369e6e817679490e4e505c89f3
Certificate serial: 019D9886883D24FC8D97D9947713A8A7E3C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
Manifest number: 18CB
Signing time: Thu 16 Apr 2026 23:00:46 +0000
Manifest this update: Thu 16 Apr 2026 23:00:46 +0000
Manifest next update: Fri 17 Apr 2026 23:00:46 +0000
Files and hashes: 1: _0DYouqWdjaeboF2eUkOTlBcifM.crl (hash: dnrB+2S93zenFIQEMKvhzd/66v6NSTcbtvGmgB89bgA=)
2: k18lVXCHbb1-8v6yyvWMJ8VYVHU.roa (hash: In1eQKHvGTUmAaOtsHiEQVzo1kSRudjkKkxMelV/95Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:88:3d:24:fc:8d:97:d9:94:77:13:a8:a7:e3:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff40d8a2ea9676369e6e817679490e4e505c89f3
Validity
Not Before: Apr 16 23:00:46 2026 GMT
Not After : Apr 17 23:00:46 2026 GMT
Subject: CN=51687768b9db97ed022d633f7746ef0d358de40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:80:74:00:7d:0a:ed:cf:3a:7f:7e:66:0c:6e:
d4:12:ff:1d:49:f4:b7:5c:08:03:05:01:ed:bf:78:
f4:e4:12:45:63:07:7c:95:06:ba:14:3b:be:c5:6a:
12:f5:31:8b:13:c3:eb:4d:8c:45:54:95:ec:8a:a3:
32:30:54:1d:de:94:25:5f:bd:ea:8f:1d:54:9f:b3:
6b:c8:71:7d:7e:85:61:d2:91:85:b1:53:7a:89:e6:
f8:1f:ac:93:5e:52:3f:4e:ea:1d:eb:14:47:91:2d:
70:4a:ee:fc:85:30:98:67:73:1a:27:63:42:b5:85:
9a:8c:38:c3:d5:63:cb:21:23:32:5b:2a:d8:1b:70:
5c:74:57:47:91:dd:41:48:f0:ad:aa:31:bd:0b:29:
d3:47:0e:a7:28:1c:b6:5f:db:c4:e3:e2:49:07:83:
0a:33:37:93:46:37:87:43:da:d5:df:4e:ff:8d:eb:
59:7e:92:e3:7b:dc:4a:9b:a9:1f:55:13:8b:1a:a7:
fb:f6:15:cd:8f:72:3a:5d:d5:f0:b8:c7:b0:17:14:
92:99:87:40:d4:81:0b:da:9a:9f:a2:b8:d5:fa:c6:
63:97:ae:01:64:bb:73:33:40:e1:a9:d5:99:a1:63:
d8:60:99:cc:15:d5:f0:d6:61:b9:1c:2c:84:8b:eb:
90:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:68:77:68:B9:DB:97:ED:02:2D:63:3F:77:46:EF:0D:35:8D:E4:0C
X509v3 Authority Key Identifier:
keyid:FF:40:D8:A2:EA:96:76:36:9E:6E:81:76:79:49:0E:4E:50:5C:89:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:0f:cc:95:86:e0:48:75:4c:d8:73:0b:c7:75:c8:41:04:0b:
b2:ea:a9:03:05:72:49:8e:bb:5e:02:8f:e4:a0:71:93:1a:57:
67:15:2b:81:0f:8b:ab:0c:ae:56:4a:f9:b3:c9:4a:8a:26:29:
a4:7d:e9:63:d6:c1:f5:d9:e9:7e:11:0c:cd:5b:b7:14:c6:2f:
05:dd:0b:8a:67:95:3d:7e:e5:97:25:7b:73:86:68:54:90:36:
46:90:e3:c5:d0:67:13:9f:f6:36:ae:5e:70:c2:e9:32:b6:90:
ac:2d:db:ac:57:23:37:33:08:71:37:06:77:80:ce:bb:46:28:
69:18:56:dc:7e:ea:e4:e9:ad:9c:29:45:9e:f0:c7:51:2d:38:
82:ed:0e:4e:13:c0:9c:b1:ed:af:dc:08:5e:23:bc:06:6c:6d:
f2:bf:25:32:ea:e1:25:cf:fb:85:8e:18:e4:29:b9:f8:96:29:
a8:79:51:83:77:09:6c:af:be:dd:01:8b:9c:4b:7e:c8:81:93:
59:f8:cc:51:8d:5b:b1:93:3f:0d:86:45:b6:5c:09:83:db:64:
e2:75:5f:e0:f2:ca:a7:80:a6:ef:0a:02:f2:5c:80:4f:90:b4:
b2:f7:0c:dc:91:32:55:d6:77:d0:f4:e8:6f:2e:65:60:d1:3b:
ad:8b:40:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:23:15 2026 by rpki-client