Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.mft
File: DmmmfUshWj8x_EYvDqU074P471c.mft (raw, json)
Hash identifier: cx0upWyU/hPm3deES8+NjEyRcR4PXhGov8hPBbQCTEA=
Subject key identifier: F0:EB:A2:92:EA:1D:2C:C9:0F:6E:37:6F:E9:ED:13:7D:E9:98:9F:1D
Authority key identifier: 0E:69:A6:7D:4B:21:5A:3F:31:FC:46:2F:0E:A5:34:EF:83:F8:EF:57
Certificate issuer: /CN=0e69a67d4b215a3f31fc462f0ea534ef83f8ef57
Certificate serial: 019D98BD4CAAB80A98710220FDE9F18ABA1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmmmfUshWj8x_EYvDqU074P471c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.mft
Manifest number: 0AE2
Signing time: Fri 17 Apr 2026 00:00:35 +0000
Manifest this update: Fri 17 Apr 2026 00:00:35 +0000
Manifest next update: Sat 18 Apr 2026 00:00:35 +0000
Files and hashes: 1: 8svsIgn5tq4TwLZ8CqIwk9q5WfI.roa (hash: R7ukUl73bf88vyaN/XaccoEI8iCFq1NpX9UxV6nC/GE=)
2: DmmmfUshWj8x_EYvDqU074P471c.crl (hash: GdYCVbORalTE6LoBc2AzD14yh6cV5nO7QBLNuvQmhgk=)
3: eJSu2mwqjv-QqXPa-b6GRUSD3rQ.roa (hash: 8Xp/LdoxCaTuezyx5QRMEAVFrFHA3obUardNQYSwraI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DmmmfUshWj8x_EYvDqU074P471c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:4c:aa:b8:0a:98:71:02:20:fd:e9:f1:8a:ba:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e69a67d4b215a3f31fc462f0ea534ef83f8ef57
Validity
Not Before: Apr 17 00:00:35 2026 GMT
Not After : Apr 18 00:00:35 2026 GMT
Subject: CN=f0eba292ea1d2cc90f6e376fe9ed137de9989f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6b:18:d5:85:27:48:f7:48:25:c7:d8:e6:b1:
d7:35:95:d2:a2:4c:36:63:54:fc:ed:ff:f0:ab:0d:
33:33:a0:07:c9:94:aa:27:ca:49:50:cc:b2:c5:59:
73:f4:17:52:06:a3:de:df:ab:46:30:f1:8a:4d:32:
3e:20:56:cf:09:e8:9e:73:f5:fe:8f:9a:84:1d:66:
c1:2c:d9:d4:45:8e:0b:a6:3d:76:d2:b0:c0:49:16:
bc:d2:0a:b7:5e:32:e5:09:d5:2d:8b:96:c8:da:48:
52:79:c1:97:29:cb:71:3c:79:bd:94:8d:89:e6:76:
a9:c2:bd:67:46:2c:07:3d:15:05:46:04:f5:d5:2b:
90:40:da:3d:83:28:90:72:4f:a0:5b:81:da:2c:19:
9f:ec:c7:90:8f:be:e2:f4:62:b7:60:69:6c:6e:41:
26:65:3e:3b:d7:c2:e2:1a:40:58:18:f8:d4:bb:2e:
da:89:5b:4f:53:99:05:df:1c:e4:87:b6:cd:86:38:
78:a0:82:70:95:da:18:b3:19:a9:63:15:e4:39:2e:
d7:8b:b9:47:c6:28:fb:41:e4:db:1b:94:e1:16:52:
94:74:51:cc:53:ed:65:fc:37:ce:5c:73:f3:0b:ed:
c5:d3:2d:e6:7e:53:fe:88:1f:fb:0d:47:b3:82:37:
25:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EB:A2:92:EA:1D:2C:C9:0F:6E:37:6F:E9:ED:13:7D:E9:98:9F:1D
X509v3 Authority Key Identifier:
keyid:0E:69:A6:7D:4B:21:5A:3F:31:FC:46:2F:0E:A5:34:EF:83:F8:EF:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmmmfUshWj8x_EYvDqU074P471c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:3b:51:b9:7f:eb:8d:ba:52:2f:54:60:d3:48:98:9f:68:c0:
63:f0:00:85:38:69:6d:6e:68:2b:fd:64:69:6d:54:5f:f8:f2:
a0:86:30:6c:c4:12:c1:ec:e1:20:16:73:43:63:6a:8d:9b:3d:
55:0b:aa:cc:e4:ce:bf:ff:82:ad:1a:06:a9:4e:90:72:78:23:
b7:b6:65:28:d6:cf:63:a7:4b:ef:7b:8a:8f:08:0d:6b:91:39:
6a:8d:ae:bd:03:58:fa:ee:50:5c:db:ac:92:4c:d2:51:68:80:
00:d0:17:77:49:4b:54:b7:1b:24:4a:4f:a8:a4:f6:b0:b3:03:
96:48:97:e4:a8:2a:f5:38:36:8d:6f:78:94:a2:13:7a:3a:4f:
d3:f5:e6:e3:90:5e:84:ac:14:ec:d4:7e:b1:d3:78:df:6a:6f:
36:90:26:4f:bc:2c:63:df:fd:1a:83:04:43:3d:f0:12:af:52:
55:b1:22:d2:31:30:73:74:cd:42:26:ee:e9:24:82:06:44:b2:
82:69:fb:b3:99:c8:99:d6:b8:10:c8:04:5b:e4:5f:e6:bc:2f:
1a:c0:1d:05:5b:7e:8f:47:2c:86:b6:92:9e:18:a7:70:7b:17:
13:c2:87:22:75:62:f5:1c:c6:03:10:1b:3a:30:19:a2:5f:0b:
0f:8f:5d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:35:22 2026 by rpki-client