Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
File: _dcAK_Oi6s_IgdXhoCEQmMZplWw.mft (raw, json)
Hash identifier: Wa+1Z33MLYi7d5YRoGWEuszB4o9KYc1DhZr8fs3qP+k=
Subject key identifier: 13:6B:9E:60:36:4F:42:B7:C4:46:02:B2:66:A6:14:4C:34:FD:CF:E2
Authority key identifier: FD:D7:00:2B:F3:A2:EA:CF:C8:81:D5:E1:A0:21:10:98:C6:69:95:6C
Certificate issuer: /CN=fdd7002bf3a2eacfc881d5e1a0211098c669956c
Certificate serial: 019D9A06AA21C53DA77E0DCA320D6224F6C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
Manifest number: 12BD
Signing time: Fri 17 Apr 2026 06:00:21 +0000
Manifest this update: Fri 17 Apr 2026 06:00:21 +0000
Manifest next update: Sat 18 Apr 2026 06:00:21 +0000
Files and hashes: 1: _dcAK_Oi6s_IgdXhoCEQmMZplWw.crl (hash: /z61A0ApZENHFlMwpdIUFYQSQZ18GkPML00EdrVPTV4=)
2: r1owUcHIHUNrR_fArdJ-3GEuqbk.roa (hash: zJDM6tfQVuv+cogBgNYX5vbZST7r1hIuZqSJ4ODXwnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:aa:21:c5:3d:a7:7e:0d:ca:32:0d:62:24:f6:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd7002bf3a2eacfc881d5e1a0211098c669956c
Validity
Not Before: Apr 17 06:00:21 2026 GMT
Not After : Apr 18 06:00:21 2026 GMT
Subject: CN=136b9e60364f42b7c44602b266a6144c34fdcfe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3e:1e:2b:bf:ee:96:0d:eb:2b:1e:27:f7:5d:
ec:c9:cf:92:db:16:e9:84:0e:e1:e0:0d:65:8e:03:
04:3a:59:28:2d:28:3e:5b:cc:cb:f2:94:b0:85:aa:
b7:68:d1:15:9b:74:39:6b:66:01:c7:33:b3:a9:7e:
a1:36:40:41:94:80:19:17:72:54:47:ff:1f:ac:e8:
8e:c5:fd:7e:5c:eb:14:83:de:ca:e8:0d:83:00:7e:
f1:6c:a1:ed:40:36:ae:e1:44:d1:eb:5a:92:6d:7c:
94:10:92:a7:a8:1c:15:32:d7:0b:49:7e:10:73:6e:
2e:93:86:36:9e:86:3d:ce:03:d0:35:a7:1f:78:bc:
a4:cb:d9:80:fa:4c:bb:6f:0e:53:0b:ab:71:ec:a5:
d8:7b:87:f4:79:6b:8b:bf:8b:42:ea:05:32:ea:a7:
db:e8:26:0f:2b:30:93:78:74:f1:d2:be:3c:91:da:
ae:a6:be:05:90:96:cb:41:47:cf:3f:76:35:b3:d6:
45:19:00:ec:c4:40:3e:e2:1b:f2:ee:38:de:55:d2:
19:23:34:e9:ba:ee:9c:03:e9:ff:e5:73:f5:a7:26:
4d:d2:97:90:69:ba:f4:8f:0a:ad:3e:c4:2d:fc:5a:
5d:04:ac:20:3a:5f:b6:78:fb:53:23:fe:98:fb:86:
aa:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6B:9E:60:36:4F:42:B7:C4:46:02:B2:66:A6:14:4C:34:FD:CF:E2
X509v3 Authority Key Identifier:
keyid:FD:D7:00:2B:F3:A2:EA:CF:C8:81:D5:E1:A0:21:10:98:C6:69:95:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:a8:9b:ae:dd:b8:a8:65:3d:74:23:3e:61:65:73:06:64:ec:
08:a3:63:30:57:2b:2c:6e:70:8e:f8:31:5f:b6:4c:ee:58:ce:
ab:33:c6:81:ba:71:c8:30:65:c7:c4:76:b8:e0:78:5d:e9:78:
27:73:5d:9b:09:16:a9:b8:ff:24:be:40:66:6a:ed:41:9d:6b:
49:fa:0e:60:2a:76:69:ce:23:46:dd:2f:72:3a:2e:f5:ca:57:
63:b9:73:00:35:5f:23:ed:88:0c:74:e2:6d:9f:6d:c0:31:2d:
ff:cc:2d:9d:67:52:77:0f:15:7b:66:3f:86:42:d6:b5:08:d4:
88:76:40:e4:4e:1c:c0:69:54:f7:42:8f:05:c0:15:d0:85:dc:
39:c6:0e:00:7b:15:a9:cb:95:5a:33:af:55:ca:a2:34:84:9b:
47:2d:80:8e:31:0d:6b:f3:b0:a8:f6:17:f6:60:c0:3d:e6:49:
f1:5a:ae:bd:12:e4:1e:bc:7a:dd:bb:7a:69:51:5c:bc:bd:97:
ce:84:61:c8:3e:d7:8e:fc:2f:1b:76:03:72:26:13:69:c6:2f:
a1:18:09:1b:e9:0a:41:93:25:17:1c:d9:49:e1:09:00:ae:b2:
5e:3b:ac:b9:bf:c4:2e:a5:d4:52:c7:46:94:36:8e:6d:b7:1d:
64:94:36:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:13:01 2026 by rpki-client