Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
File: DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft (raw, json)
Hash identifier: fkiHQgdRlC37bHZd1csqNFQTHSLQdoKtuy4NQqGrhJw=
Subject key identifier: 61:B7:88:8B:E4:A4:47:29:F6:49:BB:75:63:46:D5:80:5B:D4:48:0A
Authority key identifier: 0F:34:47:7A:A0:F0:12:31:38:C0:47:2F:5B:35:28:E4:D2:19:3E:68
Certificate issuer: /CN=0f34477aa0f0123138c0472f5b3528e4d2193e68
Certificate serial: 019D9BF5B8754DE7144973490D54E8D4FEA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 15:01:05 +0000
Manifest this update: Fri 17 Apr 2026 15:01:05 +0000
Manifest next update: Sat 18 Apr 2026 15:01:05 +0000
Files and hashes: 1: DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl (hash: JoCXIKWpg6ofKzHy8y8vIp7cbXTYixMZMHPyQ+kmOjI=)
2: sJbabSr0DQsUKcF8whYiP0keQLk.roa (hash: VLMKLJgJtAQMDHLOL+HZaV58yPgmwNt2u2OyVf266h4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:b8:75:4d:e7:14:49:73:49:0d:54:e8:d4:fe:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f34477aa0f0123138c0472f5b3528e4d2193e68
Validity
Not Before: Apr 17 15:01:05 2026 GMT
Not After : Apr 18 15:01:05 2026 GMT
Subject: CN=61b7888be4a44729f649bb756346d5805bd4480a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:6e:b8:c0:34:86:d4:de:62:01:b3:f3:cd:38:
df:e7:98:bb:ae:86:0a:5f:74:81:26:ee:56:a8:b0:
01:ba:5e:19:32:f5:a7:40:33:ea:88:82:3d:3a:17:
38:17:9a:79:78:2f:09:56:0a:bd:82:50:76:0f:83:
d4:f0:c6:ed:cd:a9:c2:d0:fc:cf:c7:15:5b:97:d0:
24:8a:e4:fa:dc:63:41:c1:cd:5e:f5:4b:f2:c5:98:
f6:cc:38:5f:8d:23:7a:a5:b5:0c:99:f4:83:f9:78:
67:5d:bc:6c:4f:e5:7e:33:09:3a:66:13:63:7e:fa:
56:01:33:44:2c:4b:5e:7e:f7:d0:fe:bf:d5:0c:11:
ed:f6:3b:fc:10:68:19:03:b8:45:76:8b:45:aa:cb:
14:fb:e4:94:6d:3f:20:59:6f:b9:9c:8d:a1:9e:02:
70:c4:2f:12:e5:ee:bf:5e:2b:2d:06:61:79:99:2a:
23:b9:6b:64:b2:28:ae:b9:de:9e:8a:9d:bc:50:3e:
e4:b6:91:84:89:1e:a1:6a:06:d9:04:a2:89:c9:d5:
df:21:aa:f0:ee:fa:2d:50:82:75:b5:e0:1d:2f:36:
14:14:3d:2a:18:87:d0:5a:ca:69:0f:01:45:62:18:
f2:96:d5:5c:df:b0:d3:77:7f:07:46:50:1a:4d:39:
d3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B7:88:8B:E4:A4:47:29:F6:49:BB:75:63:46:D5:80:5B:D4:48:0A
X509v3 Authority Key Identifier:
keyid:0F:34:47:7A:A0:F0:12:31:38:C0:47:2F:5B:35:28:E4:D2:19:3E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a9:b8:ae:49:98:8b:c3:ee:54:1e:c8:db:5b:b1:d8:98:77:
44:af:4b:0a:0c:35:9a:44:0b:86:05:89:8d:1b:10:7d:96:5f:
10:58:10:5d:b4:6f:d0:1f:25:31:b9:a8:bd:2a:61:e3:c0:bd:
4a:46:1f:8b:d2:0e:a2:6c:a3:06:d3:7d:86:01:12:c8:ff:bf:
11:af:63:e8:8a:6e:92:4e:55:46:5e:10:3c:98:3a:1a:7e:8d:
0e:0e:62:12:b1:7d:bc:c0:e2:99:0c:0c:8f:1a:0e:1d:20:ed:
fc:3e:ed:02:b7:e7:d6:62:38:3f:fb:58:df:9d:4c:33:01:8c:
5c:d1:3a:3a:67:e4:fe:02:3b:7d:cc:e3:cf:63:5a:57:31:83:
cf:e6:46:ef:4d:bc:bf:8a:19:dc:b1:3e:93:c0:22:52:b4:4e:
44:d2:11:74:10:b4:b2:5d:4d:9a:58:c7:13:e3:60:76:d9:b4:
bd:8a:74:a3:e9:db:dd:fb:eb:dc:1a:40:af:94:02:df:a6:3a:
bd:f8:8c:9f:63:29:84:56:d1:47:f3:1e:d3:b6:de:f0:c7:f3:
91:70:7a:90:5b:30:a7:fd:82:ba:34:71:04:bf:0d:ab:fb:17:
18:81:29:63:e8:d3:62:4d:90:c2:d0:1f:76:80:a4:25:e5:fd:
2c:42:78:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2b9bh1TecUSXNJDVTo1P6nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMzQ0NzdhYTBmMDEyMzEzOGMwNDcyZjViMzUyOGU0ZDIx
OTNlNjgwHhcNMjYwNDE3MTUwMTA1WhcNMjYwNDE4MTUwMTA1WjAzMTEwLwYDVQQD
Eyg2MWI3ODg4YmU0YTQ0NzI5ZjY0OWJiNzU2MzQ2ZDU4MDViZDQ0ODBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6264wDSG1N5iAbPzzTjf55i7roYK
X3SBJu5WqLABul4ZMvWnQDPqiII9Ohc4F5p5eC8JVgq9glB2D4PU8MbtzanC0PzP
xxVbl9AkiuT63GNBwc1e9UvyxZj2zDhfjSN6pbUMmfSD+XhnXbxsT+V+Mwk6ZhNj
fvpWATNELEtefvfQ/r/VDBHt9jv8EGgZA7hFdotFqssU++SUbT8gWW+5nI2hngJw
xC8S5e6/XistBmF5mSojuWtksiiuud6eip28UD7ktpGEiR6hagbZBKKJydXfIarw
7votUIJ1teAdLzYUFD0qGIfQWsppDwFFYhjyltVc37DTd38HRlAaTTnTSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGG3iIvkpEcp9km7dWNG1YBb1EgKMB8GA1UdIwQY
MBaAFA80R3qg8BIxOMBHL1s1KOTSGT5oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHpSSGVxRHdFakU0d0Vjdld6VW81TklaUG1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi85ZDRiZWYtOGViZC00ZmRiLWFhZjAt
ZTA5YmM0ZWFlMTg5LzEvRHpSSGVxRHdFakU0d0Vjdld6VW81TklaUG1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi85ZDRiZWYtOGViZC00ZmRiLWFhZjAtZTA5YmM0ZWFlMTg5
LzEvRHpSSGVxRHdFakU0d0Vjdld6VW81TklaUG1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfqm4rkmY
i8PuVB7I21ux2Jh3RK9LCgw1mkQLhgWJjRsQfZZfEFgQXbRv0B8lMbmovSph48C9
SkYfi9IOomyjBtN9hgESyP+/Ea9j6Ipukk5VRl4QPJg6Gn6NDg5iErF9vMDimQwM
jxoOHSDt/D7tArfn1mI4P/tY351MMwGMXNE6Omfk/gI7fczjz2NaVzGDz+ZG7028
v4oZ3LE+k8AiUrRORNIRdBC0sl1NmljHE+Ngdtm0vYp0o+nb3fvr3BpAr5QC36Y6
vfiMn2MphFbRR/Me07be8MfzkXB6kFswp/2CujRxBL8Nq/sXGIEpY+jTYk2QwtAf
doCkJeX9LEJ4NQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:58:14 2026 by rpki-client