
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
File: Dg9Icq0cH0_LITtrLts4ii2cmiM.mft (raw, json)
Hash identifier: zRx0oXTxKXzj7ACED9qxnJ4XOLouwodlsj2SdXVKytM=
Subject key identifier: 68:82:F2:5F:DA:60:B1:68:34:CC:34:C2:39:FF:8E:8B:CA:69:E3:11
Authority key identifier: 0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
Certificate issuer: /CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Certificate serial: 019D9A752838CAD056781D984ED8A0306409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
Manifest number: 18D2
Signing time: Fri 17 Apr 2026 08:01:02 +0000
Manifest this update: Fri 17 Apr 2026 08:01:02 +0000
Manifest next update: Sat 18 Apr 2026 08:01:02 +0000
Files and hashes: 1: 6-VbzQgi8XA2TJAq8RgMaysx0X8.roa (hash: nwaIi9ebrKp/Q5R4ShMm9TiJvoby9UkF3818QuosS1w=)
2: ByAZZvD6ZO4dFVGZCOox_IHwdzo.roa (hash: wGFO7OyD3Pn5gOzCEOeYwv/8FCnWxDnlJBKiFmfnr/k=)
3: Dg9Icq0cH0_LITtrLts4ii2cmiM.crl (hash: iRvyC8dcA07yhvo1mmDLHsI/YaWibMYZVRAEajdMges=)
4: KM6PkAFxCJgnCXLELW5hiOAKjus.roa (hash: DuJVolLG90aax0OKvLaTyX/VTpILvcyZxRZVQhnBPeY=)
5: YoJZ9epoonqwiI5Cz_IYJxFC0KQ.roa (hash: rcBdfpWe95Pbv9jR1rFIiVQgv2ItDDK2rcgQtFQdM3o=)
6: kZOcgE-yQiEGZ59-58kZODUnVtk.roa (hash: NpX21ZAdgdJK8Ql3JOW4Xo/GtwmqnfCpzM6EirlUM7w=)
7: odPvkDMmAxjrc3ZPhrKtHv1Pl_Q.roa (hash: WbetbahmmvNLGyGKWf2niABo2rq9cUlLwj18Yb3Jj3M=)
8: ps2vvRE8em2BhpWugO8HL3Oy4sw.roa (hash: UVRw/RrZWURZppeHPUhCU3KyC7ib1pGilFd5giOzN0U=)
9: sT5NvgSrjzuwTioYpNTeZgud1ao.roa (hash: eCoPPFfnRnkLIs6eZVD/zHitzMoyIccre5mcG4E3t34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:28:38:ca:d0:56:78:1d:98:4e:d8:a0:30:64:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Validity
Not Before: Apr 17 08:01:02 2026 GMT
Not After : Apr 18 08:01:02 2026 GMT
Subject: CN=6882f25fda60b16834cc34c239ff8e8bca69e311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c7:22:23:95:04:ab:5c:c6:69:9b:61:f7:ac:
ac:14:c4:5c:a1:67:66:72:56:5a:3d:41:cf:5c:dc:
af:13:01:50:ef:e0:58:42:20:6d:fe:70:5f:50:64:
dc:41:0d:6d:c1:69:20:a3:52:75:6c:75:9f:a6:11:
7b:54:b2:84:3c:8e:6b:3f:cf:f6:5d:8b:07:ee:bf:
8b:c8:b0:dd:53:03:69:55:48:c8:ad:84:7d:f6:67:
4f:8e:ac:91:d0:36:43:ed:66:09:8a:d1:fd:7d:6c:
71:39:74:13:30:7e:fa:b0:d3:d6:0d:6e:e0:4e:b5:
ab:1b:0e:e0:f4:d0:f5:31:40:08:40:7b:c9:5a:de:
e6:b8:88:bd:a8:88:b4:42:fd:f7:89:14:f8:45:5f:
19:71:78:94:db:80:6f:0a:25:78:e8:17:48:22:9b:
61:b7:6a:8c:13:6a:32:47:c9:2f:3d:17:59:60:a8:
61:97:2d:0f:0f:c0:1f:ab:af:a1:a1:12:3b:de:78:
c8:6a:02:91:3a:47:3e:12:91:56:fb:98:e5:04:48:
d8:1e:2d:01:d3:4b:33:67:6e:ac:9b:52:1f:f5:4e:
06:ed:40:2a:db:e5:e5:c2:a5:da:0b:ac:ca:c8:2a:
0e:04:51:b8:d9:c4:43:92:a3:9a:e4:ae:e8:ec:5a:
2d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:82:F2:5F:DA:60:B1:68:34:CC:34:C2:39:FF:8E:8B:CA:69:E3:11
X509v3 Authority Key Identifier:
keyid:0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:5b:8a:98:7c:6d:c4:c8:fc:fa:30:21:22:68:eb:2c:ce:ac:
e6:82:80:49:a5:e7:48:3d:7e:40:32:a2:37:ad:73:7e:96:a9:
47:cb:d6:13:f3:e3:07:99:e3:0a:70:53:85:fd:ab:ae:05:5f:
b3:78:d8:e7:d4:3a:31:e2:54:24:2c:03:da:7b:68:64:76:fd:
06:24:85:a4:57:6b:01:ac:34:77:ac:ec:42:6c:59:a2:b5:ef:
08:f1:d3:76:e1:d4:13:4b:50:5e:96:f1:d7:eb:14:73:0f:82:
8e:5c:63:40:cc:4d:70:fa:a7:46:3e:7d:fe:6a:ab:27:17:68:
e3:9c:02:86:a4:5d:bb:4e:e1:24:7b:69:3c:cb:81:24:d6:23:
39:9c:9a:85:bc:41:34:1b:bd:f1:a9:a0:ea:d9:7c:0b:f5:29:
89:d0:fb:fc:e8:38:b6:87:72:85:05:39:38:80:b9:1d:2e:08:
87:e5:ee:7a:7c:3e:a2:60:4a:7e:06:2d:cf:f9:f5:3a:75:fa:
88:8b:53:18:fc:83:a1:af:1b:dc:07:cb:8d:95:90:a9:ee:78:
16:53:c6:75:bb:26:93:99:c2:73:2b:bb:d5:65:2a:8f:b9:c2:
99:fe:23:17:4a:5c:e1:52:60:f4:6a:cd:de:6b:0a:38:b7:ea:
f5:4e:83:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:57:17 2026 by rpki-client