Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
File: DXj57XHKOklrjVS5fxR5GNrbnFQ.mft (raw, json)
Hash identifier: y0BDQ/ojxyg3hq13UbNkhUNIw3Z4UjZyti+Fr4a3Uwk=
Subject key identifier: 92:A9:B3:13:91:C0:42:64:1D:62:42:74:9B:12:B2:0D:22:C7:A9:AA
Authority key identifier: 0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54
Certificate issuer: /CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54
Certificate serial: 019D9962F8EC4289E14C7B23635663335DED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
Manifest number: 0459
Signing time: Fri 17 Apr 2026 03:01:33 +0000
Manifest this update: Fri 17 Apr 2026 03:01:33 +0000
Manifest next update: Sat 18 Apr 2026 03:01:33 +0000
Files and hashes: 1: DXj57XHKOklrjVS5fxR5GNrbnFQ.crl (hash: dxcV7EFcBhROjflaOkS1EBe0HQm8bYSgKJrpjc0Fesk=)
2: WBE9XqEf7MFyalSUqu-vF0MYUwE.roa (hash: dqMxE1BdW8dFl07KbG3IeIB419vd91Jj1Eyr9ex+Uk0=)
3: WBO5Gvlksp1h2Nj2XcuQWgWe3aM.roa (hash: 21Q33n7ktv9Mw0KQGNV5mbgpviM4S02U0e8hX8gzv14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:f8:ec:42:89:e1:4c:7b:23:63:56:63:33:5d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54
Validity
Not Before: Apr 17 03:01:33 2026 GMT
Not After : Apr 18 03:01:33 2026 GMT
Subject: CN=92a9b31391c042641d6242749b12b20d22c7a9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:81:1e:2c:60:3f:09:4d:5a:92:75:dd:6b:15:
7b:ea:4b:e9:b3:48:e4:65:f3:a5:75:eb:c4:b3:6c:
63:9b:af:3d:27:06:68:b5:7a:14:35:d6:ee:65:14:
99:4d:f8:eb:ad:cc:52:f8:c0:0c:5e:fe:c3:d7:3b:
bc:8f:ad:0e:0a:8b:40:82:e5:6b:35:ad:f3:8d:89:
84:fc:0a:72:2e:5a:3a:62:ad:b0:55:b2:b5:2c:d3:
36:8b:c4:23:a3:80:89:1d:13:e4:29:61:b1:8d:c4:
31:8d:8c:74:24:84:ec:dc:b0:76:f0:7f:79:85:04:
b9:a2:47:cb:a5:77:7a:ba:1b:82:94:41:22:ec:e2:
11:0a:20:06:7f:61:f6:ed:dd:a2:4d:04:78:79:a1:
f0:ab:c6:1c:81:24:f7:10:04:30:92:d5:b5:79:67:
bd:b6:cc:f5:db:46:6d:5d:56:55:b3:0a:27:22:9f:
4d:e4:6b:20:bd:ce:6f:7c:a8:17:64:38:1d:46:2c:
db:62:df:a1:86:bb:7d:6a:c6:8d:75:86:96:17:46:
16:70:78:02:5d:bd:24:bd:53:20:2f:69:6b:ae:26:
68:85:95:74:7b:48:27:36:3c:80:7a:73:10:24:df:
1a:e0:c8:ac:6b:b1:f8:8b:36:38:d1:9f:ab:5d:d1:
f8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A9:B3:13:91:C0:42:64:1D:62:42:74:9B:12:B2:0D:22:C7:A9:AA
X509v3 Authority Key Identifier:
keyid:0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f1:7e:36:24:b8:88:d9:15:d1:ef:fd:ea:77:39:77:da:34:
3a:fe:01:6d:ab:87:30:bb:b1:6f:8c:af:83:68:96:42:fa:bd:
80:0d:79:52:f9:cf:86:6c:82:c0:07:85:7d:15:c2:4e:ff:f1:
1e:22:44:26:26:f3:ae:ff:6b:8b:2c:29:a7:31:72:65:41:a8:
a5:be:5f:20:f4:16:78:34:07:2d:85:7b:a3:47:75:5d:8c:82:
5b:44:03:f3:29:8e:bc:7a:a2:8d:43:a3:d7:3f:da:54:9c:61:
90:28:ac:40:c5:b2:0d:9b:6f:19:b2:fc:75:e5:41:6f:b1:0d:
25:48:39:91:9e:d5:af:69:f9:37:85:7d:3c:33:2f:c1:30:19:
7e:14:9e:3c:e3:b9:0e:e1:d1:e6:38:1a:20:96:38:5e:54:a2:
5e:41:39:88:25:b0:9d:12:07:29:88:c1:e7:89:e6:e5:91:08:
f5:a6:6b:c4:df:f5:d2:61:6d:57:97:b2:38:34:c2:0e:5a:b6:
f8:63:b3:c3:7a:67:88:6f:0b:80:35:5c:21:8b:4e:37:87:f4:
d5:fd:9d:89:f8:0d:b2:72:0e:8c:63:b2:ab:13:6e:df:bd:9f:
67:ef:83:6d:91:15:89:72:4d:7e:69:c0:27:70:d1:56:70:dc:
76:52:96:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:18:39 2026 by rpki-client