Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
File: dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft (raw, json)
Hash identifier: xAknl1jiI8/K6rpgoNcrRXAtXeg2YY2uksHqAPjsk/k=
Subject key identifier: 95:0D:4C:56:96:4E:52:BD:0D:23:B5:E7:18:2A:85:C8:68:08:27:F4
Authority key identifier: 74:2E:57:1D:00:06:FE:7F:66:0B:03:08:CC:C6:1A:16:99:E3:49:17
Certificate issuer: /CN=742e571d0006fe7f660b0308ccc61a1699e34917
Certificate serial: 019D98F48C7403E755ED657B7ACCDD030C80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dC5XHQAG_n9mCwMIzMYaFpnjSRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 01:00:56 +0000
Manifest this update: Fri 17 Apr 2026 01:00:56 +0000
Manifest next update: Sat 18 Apr 2026 01:00:56 +0000
Files and hashes: 1: dC5XHQAG_n9mCwMIzMYaFpnjSRc.crl (hash: hEuovJ9DNhoaNCDZ24TJODIqAj4ZjcdhAnw2qtEmnMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dC5XHQAG_n9mCwMIzMYaFpnjSRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:8c:74:03:e7:55:ed:65:7b:7a:cc:dd:03:0c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742e571d0006fe7f660b0308ccc61a1699e34917
Validity
Not Before: Apr 17 01:00:56 2026 GMT
Not After : Apr 18 01:00:56 2026 GMT
Subject: CN=950d4c56964e52bd0d23b5e7182a85c8680827f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:22:76:89:33:8a:f9:63:c5:86:1f:6b:c0:e2:
16:c7:fd:9b:de:c6:a3:2d:17:f7:1f:52:70:3a:54:
2c:29:f2:b1:cb:69:da:53:c0:01:67:fb:49:d5:90:
40:7d:30:59:fa:b2:ff:64:14:be:3c:9a:14:6c:f0:
4f:26:02:2e:87:3f:ce:f4:ee:ea:38:c9:c1:99:b0:
b5:d7:f5:44:d5:20:2d:2f:f9:8c:98:bc:d0:f9:17:
29:a6:ad:99:cc:0a:46:34:2c:4d:ad:e0:84:5e:f3:
ab:e2:2f:3a:08:13:db:72:40:75:bb:de:53:97:48:
c1:48:de:47:f0:db:44:20:db:d8:be:8e:a0:ed:4c:
38:cd:8b:6d:33:e9:22:d8:70:8f:18:a2:7a:d7:e5:
b4:08:60:6d:4d:a9:ff:08:1a:83:d4:f6:d6:79:d5:
9f:e7:7a:34:fb:51:78:29:41:f8:ff:a1:21:ac:27:
f6:53:37:ee:63:36:c6:52:03:cf:3b:07:b5:30:3a:
f4:4f:d9:5d:00:b2:d4:09:e1:18:ba:d5:ea:53:39:
ce:b9:c5:20:b9:59:4f:3a:4d:fe:8c:3a:01:8f:13:
c6:56:a1:cf:dd:52:9e:d0:15:95:c2:14:06:fb:51:
2f:f5:6b:dd:50:60:5d:8b:26:78:1b:fc:3d:71:85:
41:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0D:4C:56:96:4E:52:BD:0D:23:B5:E7:18:2A:85:C8:68:08:27:F4
X509v3 Authority Key Identifier:
keyid:74:2E:57:1D:00:06:FE:7F:66:0B:03:08:CC:C6:1A:16:99:E3:49:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dC5XHQAG_n9mCwMIzMYaFpnjSRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ff:a9:82:86:5a:e9:95:04:6b:cc:4f:51:67:60:60:b4:cf:
d5:f4:60:ac:3f:cc:cd:a9:6f:b4:56:b6:ee:6e:9c:1b:b2:05:
ab:81:70:fe:f9:61:04:19:83:a7:77:91:7d:6b:72:0b:7d:35:
38:bf:58:d6:7a:eb:28:bd:a7:26:ff:2a:56:cf:3d:73:a3:e0:
5b:a2:98:ff:76:cf:cb:89:a5:d5:42:95:29:39:c5:34:33:4b:
85:e9:df:53:34:ed:fa:ed:2d:ca:ab:bd:58:b5:3d:80:36:ab:
a8:9b:11:6f:8a:84:ac:9f:eb:34:45:9b:47:2b:6b:3d:b4:c9:
00:fa:1a:5e:2f:9f:67:9c:ad:98:d8:b4:69:af:20:4f:bc:cd:
85:a6:e0:ac:85:b4:38:6a:78:19:a1:cb:4d:c2:a9:bd:07:86:
3e:87:1a:f8:13:d0:4e:a8:f5:6d:60:20:20:ca:74:79:fe:ac:
6a:fb:b2:f7:c6:08:4a:ff:e4:2d:79:9a:97:ad:ce:2e:0b:69:
4d:6b:4c:08:1a:f1:e7:75:e7:29:d1:06:ba:30:d6:3f:40:fb:
87:f3:bd:0f:7e:06:d7:17:a1:45:0d:47:60:d3:34:0f:e2:04:
61:cb:39:1f:14:f1:c4:c7:38:a4:c6:81:f9:45:17:b7:77:9e:
c7:2b:a4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:15:04 2026 by rpki-client