Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
File: DiKD5uavmRQidDcR96cjE3aA5p4.mft (raw, json)
Hash identifier: y5nOdxNEk/iF6ijeVW/ng/JUADk345wcL6VOtv/6ktI=
Subject key identifier: F7:2D:05:15:A3:45:1C:84:74:91:48:D9:CA:F5:19:2E:41:55:81:12
Authority key identifier: 0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E
Certificate issuer: /CN=0e2283e6e6af991422743711f7a723137680e69e
Certificate serial: 019D984FB280EB69969CE1C5483DF0A0DE6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
Manifest number: 06DC
Signing time: Thu 16 Apr 2026 22:00:52 +0000
Manifest this update: Thu 16 Apr 2026 22:00:52 +0000
Manifest next update: Fri 17 Apr 2026 22:00:52 +0000
Files and hashes: 1: DiKD5uavmRQidDcR96cjE3aA5p4.crl (hash: /3wXAYF+9GIUMTgXFRG0xITkinZbmVKyeEv/peaROGI=)
2: YWPvVhMhWOdJq4IgusjcDgptc9E.roa (hash: VwHMf9+Fwh3KRyIosC2+XI4IaINip+46g+Oe4aIU/sk=)
3: oZhmNHo1g-fLhYbLEUh1GW508Ns.roa (hash: pc/tqbY3tzsPX8Y1oHBCD976XbZr/U1sHfOZb8voLLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:b2:80:eb:69:96:9c:e1:c5:48:3d:f0:a0:de:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2283e6e6af991422743711f7a723137680e69e
Validity
Not Before: Apr 16 22:00:52 2026 GMT
Not After : Apr 17 22:00:52 2026 GMT
Subject: CN=f72d0515a3451c84749148d9caf5192e41558112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ce:b0:86:fa:6b:64:96:97:50:7f:7b:86:1c:
0f:a8:6d:bc:0a:59:d9:20:ef:62:cb:fe:41:18:78:
d2:46:96:bf:91:ba:1d:cc:03:5c:ce:35:8c:ec:ab:
96:8a:18:7c:84:79:c6:62:a3:08:d4:16:82:47:ae:
fc:4f:9c:e4:04:db:f0:b5:a9:fa:e1:98:d3:77:bb:
04:64:71:8d:08:c6:b4:0d:39:d9:b4:4f:cd:2c:c4:
83:4b:a3:49:03:0b:4a:8a:d9:7f:71:41:64:9b:e7:
1b:95:b3:cb:b5:29:0c:0f:62:1b:72:40:80:b5:8f:
c5:66:a6:09:7a:73:d1:2a:67:0f:da:9a:4b:f2:78:
58:95:18:ee:e2:a0:82:b7:32:9d:a5:b9:22:24:25:
8a:2c:12:df:73:19:d8:ee:50:0c:21:20:2e:fe:b7:
ff:a9:4e:7d:6d:f0:84:e6:3c:4d:36:29:8f:a0:2a:
3a:83:a8:50:d9:ce:f7:f9:40:bb:ca:60:82:5e:3e:
66:d9:df:aa:52:c9:2a:6c:c6:50:cc:8d:38:b9:f4:
01:a9:4a:03:48:e0:f7:7c:32:c5:56:72:11:af:7a:
43:83:24:b8:7e:c6:fc:b7:02:55:05:06:71:ca:57:
16:ab:62:bf:8e:3a:f3:26:22:40:87:b0:d8:87:6f:
f1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2D:05:15:A3:45:1C:84:74:91:48:D9:CA:F5:19:2E:41:55:81:12
X509v3 Authority Key Identifier:
keyid:0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:55:4d:78:99:74:94:bf:82:1e:c6:b9:89:de:29:19:4e:51:
ee:e9:d8:6b:60:2d:a7:39:eb:90:ec:0d:5b:b6:af:63:74:0b:
dd:55:d6:c2:bc:c6:14:4c:fe:19:9b:d6:e7:86:1e:92:ec:ec:
1a:5d:06:ab:07:84:11:78:c9:17:92:d8:0b:22:45:f1:e7:30:
bd:1d:f7:80:ef:f9:62:7e:b0:10:23:6d:10:1a:8e:97:d5:f9:
16:6b:5d:9c:5c:39:ee:d3:eb:bf:da:ce:d1:6e:c0:93:f6:a2:
bc:c9:e7:5d:f4:8d:12:40:b3:16:c1:a8:f0:7f:c0:72:49:3b:
a5:1e:88:7f:9f:ce:2f:3e:3d:f4:ef:96:b0:cb:e6:6f:22:7c:
1d:8f:20:ef:97:32:e3:28:18:c8:ab:86:a0:35:5d:bb:35:b0:
60:0f:61:28:34:4f:5b:cd:37:55:4d:b7:f7:72:64:6c:aa:14:
b6:d4:26:5b:26:49:74:51:ea:7f:6e:5d:87:4a:6b:8a:85:60:
87:2e:40:b9:d6:64:af:50:ec:d3:8c:08:ec:d5:27:79:64:f4:
27:c1:e5:4a:96:19:0c:fd:63:a5:9a:8d:66:db:cd:a2:41:7e:
0f:30:21:29:d4:6d:e4:86:38:fb:8c:90:bb:99:a9:1e:ed:9e:
57:85:d2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:08 2026 by rpki-client