Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
File: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft (raw, json)
Hash identifier: Mk1kMm14T5WrPDuuJJXpmsjaRqSF4NBrjk4ISb1/hzM=
Subject key identifier: 40:08:56:07:D8:56:C3:62:48:F6:AB:66:22:74:AD:4C:A6:FB:DC:14
Authority key identifier: 74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
Certificate issuer: /CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Certificate serial: 019D99D0A0163B73A9ABD9045771224C8450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
Manifest number: 138B
Signing time: Fri 17 Apr 2026 05:01:19 +0000
Manifest this update: Fri 17 Apr 2026 05:01:19 +0000
Manifest next update: Sat 18 Apr 2026 05:01:19 +0000
Files and hashes: 1: PeJEMtupept21vf-rfjqUX1mldY.roa (hash: L3Vq59CQQkeuB9Tb5q+mJV+IQYi3JZHbF6U8aJ9gFYU=)
2: aD0lsDcoNGKfxZpDG-OdR_bzMnU.roa (hash: bvoZBbd9QoLZ+N5I+xfKDL3PeYR6CygFLOwHX1oAOxI=)
3: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl (hash: Dv2/bSaAV/W7A28PVJEo3yrJ4cWLvsYLaZzDA6CZLL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:a0:16:3b:73:a9:ab:d9:04:57:71:22:4c:84:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Validity
Not Before: Apr 17 05:01:19 2026 GMT
Not After : Apr 18 05:01:19 2026 GMT
Subject: CN=40085607d856c36248f6ab662274ad4ca6fbdc14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:90:6e:12:3a:a8:ff:db:36:79:1e:ce:11:db:
71:07:96:d7:c0:c2:00:d2:ea:22:df:01:48:ba:35:
a9:44:fb:65:9b:e5:96:da:93:70:05:31:e4:2f:c3:
13:36:88:ec:c3:b6:b5:8f:5f:86:ed:d8:ad:a1:04:
42:a5:f6:a9:c7:5d:1a:2f:5b:e3:0b:9d:a4:65:b2:
d9:0e:b2:3b:f6:6d:d0:c4:e3:be:d3:92:69:c2:bd:
5a:62:f4:bf:d8:fc:7c:7a:97:51:08:86:38:1e:45:
9c:e4:fc:ee:77:12:fd:1f:8f:28:ee:c9:c8:f1:5e:
14:10:d7:02:73:8d:b7:20:ff:5f:e3:b9:e2:5c:11:
be:13:69:63:2f:9b:d6:90:97:97:f7:2a:f7:54:4e:
76:9f:47:5a:7a:41:ed:89:3c:ab:0d:36:72:62:73:
e6:2e:9f:51:86:80:6f:b0:6e:cc:a2:41:1d:41:f9:
ec:9c:54:2a:cc:66:ac:26:a8:88:34:c5:3b:36:1f:
33:2a:72:2f:2c:5d:5d:41:6e:25:f7:3f:34:1f:41:
ae:da:0e:0c:4d:bd:87:c6:35:8c:a2:4b:64:3c:d6:
73:62:76:3e:b4:41:0e:48:54:8b:f3:36:11:ec:40:
69:83:15:f2:ff:d3:1d:b4:d1:f0:2a:60:55:aa:61:
55:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:08:56:07:D8:56:C3:62:48:F6:AB:66:22:74:AD:4C:A6:FB:DC:14
X509v3 Authority Key Identifier:
keyid:74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ce:cd:c5:8d:cc:ca:cb:4e:8c:79:d2:65:89:40:f4:fe:dd:
6b:76:1f:b4:89:0c:fb:a0:a9:ec:6b:d4:95:1d:c9:ae:3f:da:
bc:bf:6d:6b:97:bd:9d:4e:2d:a5:c7:8b:ff:bd:c2:12:fe:34:
d7:46:97:95:ca:26:43:99:de:86:fb:ce:a2:4c:9d:78:49:89:
13:f0:f5:92:33:b3:45:c5:94:53:b7:70:fb:26:9c:9e:8b:f5:
66:76:0a:93:58:2b:cf:c7:c4:c8:c4:1d:fd:92:38:b3:6e:4c:
b8:6d:b1:95:71:56:b8:3a:0b:f1:90:47:c6:21:f3:c5:bf:2a:
dd:4c:b0:ca:3d:d4:9d:88:4f:30:b0:8a:7d:8f:29:11:c2:a5:
19:8c:eb:5e:b4:a6:0a:1c:4d:a8:32:2d:ac:a5:ac:6a:02:6e:
38:7e:de:6e:f4:b9:ae:8f:14:2b:ef:df:11:58:88:1c:da:e2:
d6:98:fa:b1:db:e2:82:73:87:79:42:8b:a0:61:af:71:d2:b4:
ef:1f:36:8b:82:30:e3:0d:98:02:21:88:34:fb:bf:fd:29:04:
66:3a:25:9c:5d:22:58:0b:50:6c:e8:cf:a3:07:e8:05:97:9b:
6f:ae:35:3b:94:80:eb:28:62:ea:99:34:5f:7f:c7:23:df:43:
db:1a:20:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:36:27 2026 by rpki-client