Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
File: DtjJoWGXLWi0RTPg4x9R5NzlunU.mft (raw, json)
Hash identifier: /rwLiq1s42znHD4S+O9cA2M2OnBzmG84pi56CTvh79M=
Subject key identifier: AE:11:C1:A3:A4:E2:97:DA:0D:03:6A:AB:A1:78:EB:36:20:3D:71:73
Authority key identifier: 0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
Certificate issuer: /CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Certificate serial: 019D9AE397E13CB05F27CC33B9682E109293
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 10:01:39 +0000
Manifest this update: Fri 17 Apr 2026 10:01:39 +0000
Manifest next update: Sat 18 Apr 2026 10:01:39 +0000
Files and hashes: 1: DtjJoWGXLWi0RTPg4x9R5NzlunU.crl (hash: nunMhBYnMDzOSaJYai7mjCA4r8qZdSVu9LV/P8zjPQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:97:e1:3c:b0:5f:27:cc:33:b9:68:2e:10:92:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Validity
Not Before: Apr 17 10:01:39 2026 GMT
Not After : Apr 18 10:01:39 2026 GMT
Subject: CN=ae11c1a3a4e297da0d036aaba178eb36203d7173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ce:fe:46:d0:e1:a9:31:30:8f:c0:71:b7:d4:
20:85:69:a6:21:18:8f:d7:4b:12:51:fe:1f:00:59:
ef:bb:d4:b7:72:34:41:f1:13:e0:84:6f:19:91:89:
bb:78:61:1f:50:06:d6:81:b0:36:ef:92:f8:ea:c6:
cc:3e:a0:ae:b8:b0:e7:2d:1f:b7:e1:3c:95:1e:05:
b8:2d:9e:e0:eb:6c:3b:7c:85:57:88:3b:8c:fc:6e:
ef:3f:37:72:bf:b5:3e:2d:ec:ea:eb:55:ec:a9:23:
28:e2:06:76:0d:05:73:3c:40:72:ab:1e:cf:7c:82:
ed:d7:d7:f4:9b:de:17:26:d8:ce:86:75:71:f3:15:
74:93:ff:a1:af:89:d1:11:f6:d1:5c:03:c4:d3:02:
1c:44:08:ed:7b:49:ba:39:36:fc:ca:57:f4:81:6c:
73:3b:52:91:aa:21:1d:57:6f:c9:57:1a:ed:ab:ad:
2a:b3:2e:32:37:b4:87:33:b4:e5:f7:eb:c1:4c:5a:
03:26:03:9e:df:1f:a8:a2:e9:ae:b2:4d:85:f3:b6:
18:0e:95:8e:58:9f:d8:fc:73:74:32:52:aa:b1:4e:
2d:39:64:0e:f6:46:5f:0b:33:bf:1d:62:d4:76:4a:
9a:26:a9:18:e9:4e:7d:21:2e:ea:f4:4e:09:5b:60:
90:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:11:C1:A3:A4:E2:97:DA:0D:03:6A:AB:A1:78:EB:36:20:3D:71:73
X509v3 Authority Key Identifier:
keyid:0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a6:62:c3:a2:76:9c:8f:d7:0a:85:f3:a1:70:61:77:41:7a:
c6:b3:92:5b:8f:a6:ea:e5:f2:ea:2a:45:c1:76:7c:93:81:2b:
d2:ba:7e:d3:93:ba:92:c9:1b:91:8f:14:16:25:56:43:e8:53:
9e:e5:b2:b2:85:5e:f4:b4:2d:e3:9f:9b:e1:75:e8:58:04:1e:
96:2a:b9:72:f2:9e:4b:55:86:3a:55:05:a0:6a:61:e6:12:0c:
55:c4:b2:0e:fb:37:ed:81:4c:74:5e:76:2d:89:c4:c3:38:61:
c0:f3:9d:5a:63:e1:70:e4:ff:6e:13:95:33:ae:ba:ba:c6:3d:
20:f0:00:ca:12:16:b3:f7:5a:dd:2e:51:16:2b:c4:8b:4e:37:
8d:83:03:5c:88:a8:02:61:c2:31:b0:45:f8:22:5b:7a:b9:20:
b6:2a:53:27:c8:75:8f:50:3a:7e:f0:ba:6f:6e:e2:b5:cb:e5:
55:ec:28:0d:e0:1c:28:f6:88:41:2f:a8:b8:81:a5:0a:41:78:
6b:db:f1:a0:ed:d5:0a:6d:e9:de:b3:a7:00:3b:9f:63:5a:ee:
ca:5f:0e:cd:6f:de:5e:f9:24:68:c1:ff:c1:0b:94:3f:db:25:
68:cd:30:48:c7:f8:8d:7a:8a:39:df:be:0d:8b:47:98:ec:a5:
1a:05:c0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:25:00 2026 by rpki-client