Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft
File: DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft (raw, json)
Hash identifier: sjgjKg0//vScytKrnwALArgyAhv/ef5JlLstDiJ3aRc=
Subject key identifier: CA:7E:47:FB:E2:6E:2A:AC:5D:C2:87:FA:DB:50:80:B7:DC:D2:09:C0
Authority key identifier: 0E:56:C9:E5:8D:96:AF:1E:41:30:D7:22:42:21:19:2B:2C:13:2A:5C
Certificate issuer: /CN=0e56c9e58d96af1e4130d7224221192b2c132a5c
Certificate serial: 019D9AAC08308EFB08E6268842A08991942E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft
Manifest number: 1853
Signing time: Fri 17 Apr 2026 09:00:58 +0000
Manifest this update: Fri 17 Apr 2026 09:00:58 +0000
Manifest next update: Sat 18 Apr 2026 09:00:58 +0000
Files and hashes: 1: DlbJ5Y2Wrx5BMNciQiEZKywTKlw.crl (hash: es2Vr2ljQdUxeRYj3vFDNO9uDPkHwMkT8puACcm8Ggo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:08:30:8e:fb:08:e6:26:88:42:a0:89:91:94:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e56c9e58d96af1e4130d7224221192b2c132a5c
Validity
Not Before: Apr 17 09:00:58 2026 GMT
Not After : Apr 18 09:00:58 2026 GMT
Subject: CN=ca7e47fbe26e2aac5dc287fadb5080b7dcd209c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:49:fc:36:7e:af:0a:02:45:48:ba:3b:8c:11:
ae:4d:74:9e:f1:83:6d:d8:39:58:ed:86:0a:94:d2:
53:81:0f:19:db:f0:3f:f9:4d:b7:89:ea:4a:80:58:
86:dc:e9:32:81:eb:18:0f:41:5e:32:9a:0f:c7:ab:
4c:66:65:5f:a6:3b:c4:da:34:e2:eb:37:aa:cf:c4:
c4:16:ee:1d:11:82:32:75:1f:7f:f4:a3:9c:b1:84:
05:d3:e5:98:1c:fa:11:09:85:e4:e8:a5:50:24:5b:
5f:85:3c:5f:41:da:11:c8:35:a0:76:51:7b:eb:67:
d3:02:59:f4:ee:d8:51:d7:a7:db:16:1c:4c:ad:9d:
96:15:95:f5:df:27:68:c8:1b:8f:96:d4:ed:f1:00:
bf:b2:0d:f8:49:68:af:2d:27:b6:60:17:d7:f5:c0:
15:53:46:b4:83:b4:94:45:93:c4:8b:e9:41:cf:84:
7b:6f:71:68:30:ab:31:0a:5c:cb:a2:61:5b:ad:54:
b3:03:13:b9:fc:08:73:77:35:bc:27:b7:25:28:bd:
94:97:f7:57:97:cf:13:8b:ba:f5:78:70:05:f2:a6:
70:55:f3:94:72:eb:d8:9a:b5:a8:3c:9c:e1:e6:c2:
4c:5c:2f:99:8b:4b:30:65:fa:fb:63:47:0f:ba:ae:
65:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7E:47:FB:E2:6E:2A:AC:5D:C2:87:FA:DB:50:80:B7:DC:D2:09:C0
X509v3 Authority Key Identifier:
keyid:0E:56:C9:E5:8D:96:AF:1E:41:30:D7:22:42:21:19:2B:2C:13:2A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:1c:8e:d0:99:17:88:21:02:a5:5c:2d:7c:58:41:e1:26:75:
3a:ec:3d:0b:93:27:64:02:24:d8:23:6b:4a:41:08:3f:09:88:
77:aa:0f:de:c2:67:20:bc:42:d1:15:3b:ba:7d:4c:20:1a:c7:
68:3d:f8:95:c2:25:e3:a4:82:d9:4f:b3:47:e9:35:b6:79:eb:
fa:f4:81:12:5f:de:c5:1d:e2:74:53:c3:f8:7c:e7:e3:1d:f6:
4f:da:61:96:69:3f:58:2f:ca:e7:77:ad:b3:be:e6:06:59:d8:
eb:9d:3f:93:cd:00:ee:2f:c2:4e:ba:dd:ec:4c:4d:15:f1:15:
29:28:a8:76:3a:36:1d:0a:78:a0:45:29:5a:ce:0a:a0:48:0f:
03:57:5c:9a:71:06:d7:ef:b5:1c:5f:ee:d8:08:96:7a:e6:69:
7b:d2:10:4b:e6:be:b3:4a:9f:97:88:45:74:9d:52:4d:fa:7d:
a2:03:3d:3a:fa:9e:5e:18:0b:7f:63:74:98:9e:a8:6f:84:f2:
1c:ef:64:e9:05:42:e3:7a:94:fd:84:da:06:77:c9:6b:93:1d:
22:d6:c2:e2:bc:04:85:93:94:72:69:fb:48:a1:1c:e7:ef:f2:
43:94:2c:15:61:aa:95:b2:92:7c:a4:ba:e3:57:80:2d:29:c6:
d5:11:ba:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:40:12 2026 by rpki-client