Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.mft
File: dCadQgSZl1rpNPNM45WTgRTJuns.mft (raw, json)
Hash identifier: V8mn5QIGrTbMSiWup+S68S+yjceIGmYJ1ci6JEnFvtk=
Subject key identifier: 59:56:1B:AF:69:23:7D:9F:A3:B4:EF:AA:5D:4D:47:BA:C2:AE:C2:D7
Authority key identifier: 74:26:9D:42:04:99:97:5A:E9:34:F3:4C:E3:95:93:81:14:C9:BA:7B
Certificate issuer: /CN=74269d420499975ae934f34ce395938114c9ba7b
Certificate serial: 019D9AE2B997771B7B8DFA102A526AC3C412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCadQgSZl1rpNPNM45WTgRTJuns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.mft
Manifest number: 1416
Signing time: Fri 17 Apr 2026 10:00:43 +0000
Manifest this update: Fri 17 Apr 2026 10:00:43 +0000
Manifest next update: Sat 18 Apr 2026 10:00:43 +0000
Files and hashes: 1: dCadQgSZl1rpNPNM45WTgRTJuns.crl (hash: 2VvphIJHoYalS9rEr2E40q89r+rnENwWj1R1gZ5Uypg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCadQgSZl1rpNPNM45WTgRTJuns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:b9:97:77:1b:7b:8d:fa:10:2a:52:6a:c3:c4:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74269d420499975ae934f34ce395938114c9ba7b
Validity
Not Before: Apr 17 10:00:43 2026 GMT
Not After : Apr 18 10:00:43 2026 GMT
Subject: CN=59561baf69237d9fa3b4efaa5d4d47bac2aec2d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1c:86:6c:14:86:44:4b:6b:84:87:73:48:a2:
a6:7c:a6:34:f0:a1:97:30:2b:76:a8:f2:d0:7b:7b:
e9:42:7c:42:a3:e1:82:37:51:ab:c6:2a:28:26:2f:
90:b3:35:39:f2:51:ec:c9:55:c1:f6:90:76:53:ad:
c6:f9:6e:c0:10:5a:80:b0:fe:4c:76:4a:55:d2:82:
59:85:c5:94:f5:9a:38:bc:be:97:e0:f7:a0:8b:e5:
d8:12:5e:e0:78:e9:f6:b1:dd:17:fc:43:15:62:ba:
0d:5c:1a:50:68:20:2c:2c:1a:27:39:e7:6d:a5:03:
5f:ad:57:11:69:e2:15:19:ef:a5:91:1d:f6:2a:05:
f4:24:fe:b7:58:24:2f:08:37:6b:bc:09:39:eb:29:
9b:68:b2:a0:9f:3f:70:2e:ba:67:56:36:63:72:27:
d2:6f:be:ec:ef:83:1b:53:4c:fe:a6:d6:33:9a:45:
fe:b7:6f:d4:d6:c9:81:65:3e:d1:57:46:a4:5d:93:
4f:d0:b2:fa:29:fe:bd:c0:3f:a8:f3:cd:d3:d1:28:
35:20:96:b2:fa:ef:42:ca:b5:40:da:f4:85:3e:29:
63:1e:e7:4f:5c:43:ea:88:16:12:07:0b:42:51:d5:
b2:b1:78:fa:57:9f:9f:3d:ba:9c:20:6b:33:6e:aa:
4e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:56:1B:AF:69:23:7D:9F:A3:B4:EF:AA:5D:4D:47:BA:C2:AE:C2:D7
X509v3 Authority Key Identifier:
keyid:74:26:9D:42:04:99:97:5A:E9:34:F3:4C:E3:95:93:81:14:C9:BA:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCadQgSZl1rpNPNM45WTgRTJuns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:7a:cc:e0:a5:a5:bc:89:7c:fc:a5:02:98:67:a0:b2:b6:8e:
63:25:64:30:00:d8:55:56:28:65:ff:5b:af:d3:23:cb:e4:25:
8f:e9:e9:28:a0:18:a0:1b:dc:d1:7b:6f:83:13:43:4c:a1:e4:
23:5d:1e:0f:30:3f:be:42:1c:8f:61:8f:37:81:5a:64:06:fa:
09:77:28:d5:41:1a:5f:fb:1d:42:94:2a:36:d3:29:52:3d:24:
25:42:3f:e2:ae:ea:fc:e1:9e:44:9b:89:6f:1f:3c:1e:54:7c:
b1:e0:c2:2e:c2:50:0c:e0:f0:76:4e:5a:76:f1:03:dc:b8:58:
d0:09:53:d2:b3:98:e7:17:3b:d7:94:4f:18:86:ca:ad:2c:49:
84:74:e3:a9:5c:d2:f7:7b:66:e1:3f:f3:30:36:67:5f:f4:7a:
f3:0b:3d:42:7a:9c:98:ea:d6:d8:17:8f:f2:c4:98:d0:b2:bd:
28:ef:ac:a3:e2:9f:e8:2d:55:0d:59:5c:52:94:54:20:6a:78:
0d:f9:ea:71:36:0d:6c:52:af:3e:02:0a:c4:18:d3:cd:63:76:
9a:4d:02:d2:72:7b:03:3b:7d:22:df:e0:fd:c4:e5:28:11:9b:
b6:7b:7b:24:6b:54:02:09:e4:16:53:bd:fe:dd:76:5d:f5:80:
62:7b:72:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:32:51 2026 by rpki-client