
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
File: 1-DzK75yREg7G-xT_TExXRaAjm3c.mft (raw, json)
Hash identifier: q2TdBoXNZu1k/2eDcdt1zhR6pjxf4l4uF2qcNv3EMK4=
Subject key identifier: D8:DC:EB:84:3C:57:87:0F:32:1B:1E:7D:10:CE:82:94:99:C3:FE:7B
Authority key identifier: F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77
Certificate issuer: /CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
Certificate serial: 019D99CFEBADDB8299922781CCF7A214ABD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
Manifest number: 1806
Signing time: Fri 17 Apr 2026 05:00:33 +0000
Manifest this update: Fri 17 Apr 2026 05:00:33 +0000
Manifest next update: Sat 18 Apr 2026 05:00:33 +0000
Files and hashes: 1: 1-DzK75yREg7G-xT_TExXRaAjm3c.crl (hash: AM3+8P84p346hNhVNMLK3yQLnS28S7dN/nRdzISbs1Q=)
2: W8PXcMyrmfRSqYOFlpTyQQni5Fg.roa (hash: dRzn2uxU587w+8HTL/6mVCqJFuzClYuZ55vRVG+mWEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:eb:ad:db:82:99:92:27:81:cc:f7:a2:14:ab:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
Validity
Not Before: Apr 17 05:00:33 2026 GMT
Not After : Apr 18 05:00:33 2026 GMT
Subject: CN=d8dceb843c57870f321b1e7d10ce829499c3fe7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b6:a5:b4:2c:29:93:42:44:7d:3f:99:de:d0:
28:84:71:ae:b9:b8:5d:89:37:7a:ef:05:c2:23:ef:
d8:b3:04:70:ca:90:84:fa:93:c5:27:65:9c:9a:bf:
79:43:7b:a8:6e:77:6a:c2:e5:da:34:50:f9:84:bc:
a3:62:d6:d1:74:d8:7b:eb:e0:22:e8:10:d2:c4:9a:
43:4c:69:e4:04:d9:60:5d:25:32:4b:7a:77:26:fa:
a3:a8:84:89:63:19:e9:6f:8d:00:e1:11:9c:d7:81:
7c:e1:6f:f5:50:6f:ea:e1:6d:be:b1:a6:50:a0:a7:
29:8a:47:70:97:d3:a6:e7:09:3d:1d:28:ee:14:81:
35:54:3d:94:31:7c:f6:37:e4:cb:68:8a:3f:bd:8a:
4e:a2:20:c1:b8:09:84:9e:47:8a:ce:9b:bf:09:74:
de:83:d4:b0:a2:e9:8c:c5:73:21:f0:e3:a5:62:1d:
f9:c2:f3:dd:c3:00:20:00:1d:a7:72:e5:f6:a7:35:
36:19:66:8a:d1:e7:af:1f:78:7e:30:a8:5b:3a:81:
a2:5a:f1:ba:9b:10:24:48:9d:e8:0d:52:71:89:ac:
67:93:25:a8:c9:df:b1:6e:ae:74:41:5b:15:74:1e:
cc:0b:ef:a8:f8:72:fc:2e:bc:2f:d7:63:a5:3c:82:
f5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DC:EB:84:3C:57:87:0F:32:1B:1E:7D:10:CE:82:94:99:C3:FE:7B
X509v3 Authority Key Identifier:
keyid:F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a7:60:c7:56:fe:d2:7c:14:ca:c3:7c:6f:70:3a:0c:16:7b:
8e:5f:79:d7:4a:fa:54:fc:3e:bd:1c:61:53:ba:ab:b8:f8:bc:
4d:d9:c2:c9:f5:54:34:20:1a:67:11:89:a3:6f:df:fd:26:99:
10:ba:42:a0:87:26:ef:99:a8:a3:b1:65:38:c2:3c:9c:47:74:
24:3e:eb:9e:bd:9b:37:e1:6b:c3:ac:79:51:ab:4a:d2:66:a0:
a8:08:0a:69:9f:9d:06:88:e4:12:e9:fe:f4:0c:98:08:c3:c6:
ef:ed:5b:47:8f:4b:52:ed:bd:bb:8f:4e:44:e4:f6:f5:8e:a2:
38:d7:4a:87:7e:d9:b9:8c:e4:b2:7f:38:0d:dd:1c:d0:01:e1:
46:39:ee:50:06:e2:9c:ab:78:66:38:f9:ae:87:5b:b4:93:20:
98:28:4a:16:9d:b7:ba:60:88:d4:f6:54:2f:bb:7c:8c:61:81:
42:5f:a8:b8:c6:1f:d6:7f:fd:ec:00:07:cd:01:fd:48:fd:65:
1f:f7:6e:25:7a:95:d6:96:54:c5:5e:80:46:1d:15:30:05:41:
4c:fa:bf:28:76:86:ae:e7:85:c7:f3:51:fa:a0:13:fd:5c:b9:
d5:a3:64:53:dd:3c:73:75:56:58:60:1b:cd:45:48:d5:6d:c3:
a7:a6:30:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:33:01 2026 by rpki-client