Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
File: D81k6vJZSCLz-aLrzRnbm3-nDZo.mft (raw, json)
Hash identifier: /uJ7IxoZ1d89PKy6zlKXwU8J1EK3kNRk8vc4oNHypqA=
Subject key identifier: 47:A6:30:EE:5E:20:93:BA:9E:F8:42:4E:F9:7D:2B:5B:B1:FA:56:8B
Authority key identifier: 0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
Certificate issuer: /CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Certificate serial: 019D9EBF82BA61C68D53D4B6AB2FB936A60D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
Manifest number: 04CD
Signing time: Sat 18 Apr 2026 04:00:44 +0000
Manifest this update: Sat 18 Apr 2026 04:00:44 +0000
Manifest next update: Sun 19 Apr 2026 04:00:44 +0000
Files and hashes: 1: 1HQ2oYdrkzbGmcEGuOKgDpKVA-A.roa (hash: +R86VJ/9zKCCo9on3dPLqNmwVLLy9nPRqGdyKqWuego=)
2: D81k6vJZSCLz-aLrzRnbm3-nDZo.crl (hash: auOmeD3fenuXUUYBREX3FXmyDMS2/juEFpLZjs7So/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:bf:82:ba:61:c6:8d:53:d4:b6:ab:2f:b9:36:a6:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Validity
Not Before: Apr 18 04:00:44 2026 GMT
Not After : Apr 19 04:00:44 2026 GMT
Subject: CN=47a630ee5e2093ba9ef8424ef97d2b5bb1fa568b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:57:94:58:06:54:16:29:d6:46:ca:87:1b:aa:
6e:f8:92:e9:ec:c5:25:8b:67:fd:f2:e0:80:ed:6b:
da:a5:af:b2:6b:f3:8f:20:bf:62:21:6e:f5:7f:02:
7c:28:e5:bf:3f:4f:4b:ff:e7:f8:41:03:be:f0:6e:
a9:6f:45:30:d0:c4:d6:a4:a7:8f:12:5f:29:35:1b:
ec:86:25:d8:31:d8:f3:9f:17:0d:65:6a:ed:f0:43:
ca:74:af:b2:9a:5e:3f:48:1b:ef:ab:44:66:06:08:
7f:bb:22:da:0a:b6:f4:64:e7:fc:6a:f3:08:bd:96:
8b:1e:94:85:cc:07:88:ef:82:d2:21:fe:38:d9:86:
48:bb:00:e8:50:eb:fc:a3:ce:03:e8:62:a9:f2:18:
a5:11:d5:52:3f:88:68:6f:8e:f8:7b:ae:22:fe:ed:
10:02:a9:52:4a:5c:a3:09:a3:4b:f3:7c:0b:77:10:
8b:96:82:7f:64:3b:50:40:e4:b9:5e:3a:b2:76:b1:
2b:68:7e:6e:dd:66:23:43:e2:c3:c7:2a:c8:ca:ef:
cf:d4:dc:ef:d9:8b:80:2d:95:cc:b5:53:42:b0:3e:
1d:2b:e8:6a:22:b3:22:76:c7:61:24:48:88:4a:d1:
fb:4b:6b:74:f1:6e:66:73:5e:d1:6f:0f:93:95:e8:
16:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A6:30:EE:5E:20:93:BA:9E:F8:42:4E:F9:7D:2B:5B:B1:FA:56:8B
X509v3 Authority Key Identifier:
keyid:0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f6:c7:bc:88:8e:b9:2a:54:03:54:a9:2c:12:e1:bf:b4:03:
70:77:41:a8:91:c9:17:85:71:c5:2c:82:38:15:f2:5b:d0:03:
53:8f:74:da:1a:5b:e4:fb:fd:8b:36:30:dc:28:aa:d3:84:f8:
59:83:2b:21:24:e5:04:64:7c:5f:77:51:0b:3e:b5:37:73:fe:
8f:ce:0b:6f:97:c0:c8:51:90:33:3f:96:9b:10:7b:44:e4:c7:
b7:b7:6f:2c:36:df:63:1c:44:2b:82:c5:40:2f:d9:df:bd:53:
2a:5b:bc:41:b7:21:fc:20:1a:0e:59:e6:22:dd:2a:8e:c9:ab:
b7:ec:68:4e:53:5f:ef:bc:b0:68:f0:13:e1:f0:e5:b3:5a:22:
cc:47:7f:ad:fc:75:6d:3e:0a:39:a0:34:a6:e3:a8:e0:b4:02:
3b:9a:0c:61:75:91:ca:16:a7:c4:53:5f:e5:4f:b3:ac:fb:20:
2c:38:bd:87:2a:47:06:ff:19:da:74:42:62:26:5e:0f:2c:31:
ac:58:cc:d3:a0:db:34:6d:8a:0f:52:53:9f:0a:04:2d:6e:04:
4f:20:2d:88:06:e5:fa:5c:e0:d9:d8:a2:9f:9f:f6:a5:25:2f:
f0:d6:3b:54:72:79:5f:9a:22:2f:ed:23:91:bc:a9:b4:59:4a:
fc:d5:d0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:06:39 2026 by rpki-client