Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
File: DwJfo1fCCrvxGEJiNGWOYtfccHY.mft (raw, json)
Hash identifier: RpMkJvq07gM1fkyiYIwnXZoolakCF4f4N2tTiO7e92o=
Subject key identifier: E2:4B:6A:88:DE:00:54:D2:18:BC:95:B7:29:B3:C8:88:96:D3:13:90
Authority key identifier: 0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
Certificate issuer: /CN=0f025fa357c20abbf118426234658e62d7dc7076
Certificate serial: 019D98BD829004CEE26F7953AA28F68814A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
Manifest number: 0644
Signing time: Fri 17 Apr 2026 00:00:49 +0000
Manifest this update: Fri 17 Apr 2026 00:00:49 +0000
Manifest next update: Sat 18 Apr 2026 00:00:49 +0000
Files and hashes: 1: DwJfo1fCCrvxGEJiNGWOYtfccHY.crl (hash: uozVjpBXMkTMY8+bJzSo5/iKU/LLtO7MBfhpSgo1h1s=)
2: elu1abDHd3RfzpApGEKnDnwdAcI.roa (hash: HHOSPK0nfYS+xwtq8H1DXb/qJlWmVpm7P0B6dxlEAcU=)
3: ygV7k6nVaZCAnScNFHt4paZc8MM.roa (hash: Fv0BlTXpeeDK0QHZ/q3zQcl9lKT33vm1AnUd5vQrW08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:82:90:04:ce:e2:6f:79:53:aa:28:f6:88:14:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f025fa357c20abbf118426234658e62d7dc7076
Validity
Not Before: Apr 17 00:00:49 2026 GMT
Not After : Apr 18 00:00:49 2026 GMT
Subject: CN=e24b6a88de0054d218bc95b729b3c88896d31390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:dc:36:dc:ad:b5:81:ac:84:32:56:bf:84:03:
0c:4d:92:f5:bd:ee:6e:65:97:9a:e3:0b:33:18:88:
bd:b2:d4:71:58:9a:f9:a7:56:75:72:b0:63:d1:72:
02:1c:6a:f5:2a:bd:88:11:d2:9d:6a:bc:38:82:0d:
5d:8e:4b:26:b1:0e:8b:25:53:9a:90:98:3a:9e:df:
50:9f:15:15:bc:2c:17:b5:48:a8:4c:b0:03:af:88:
31:68:40:83:a6:81:f8:3e:c7:21:51:84:56:eb:e8:
ec:d4:62:13:f0:68:2b:84:a2:32:d4:9a:c0:10:45:
4c:a8:e5:29:57:5d:67:95:fb:2c:cf:bd:38:83:fc:
31:65:98:02:76:05:db:31:91:9c:c9:67:73:20:91:
ea:d8:f3:d9:0b:2e:a4:93:c3:1f:8a:8b:36:e0:18:
13:e8:6d:c3:5c:d2:d3:99:fc:3f:94:93:e1:96:33:
47:44:62:27:ab:6c:4a:3f:02:24:7c:d8:5d:15:16:
c7:da:88:23:a6:98:3a:dd:ec:04:8a:66:0b:6c:68:
5d:8e:60:10:86:99:1c:a5:ad:ac:b4:f2:a3:38:4e:
eb:f4:25:1c:76:bb:d3:c3:44:4b:23:92:c9:08:d8:
4e:0a:33:f5:1f:00:d4:5c:1f:dd:3d:25:6d:6f:1f:
29:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4B:6A:88:DE:00:54:D2:18:BC:95:B7:29:B3:C8:88:96:D3:13:90
X509v3 Authority Key Identifier:
keyid:0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:1e:f2:13:cd:78:28:c4:dc:c6:3b:0f:0a:12:16:f5:6b:81:
87:35:3b:d3:ad:3f:29:68:74:88:51:98:fa:c6:d3:b4:13:df:
ea:57:82:fc:71:67:ae:75:80:2d:95:a3:e6:a3:db:c2:ab:f0:
be:1e:59:e0:5a:fc:66:6d:29:e3:55:bb:01:48:e3:68:b6:86:
5e:5d:20:dc:84:f4:3b:88:b6:56:bb:04:c8:64:be:7a:c2:9d:
38:3a:b0:0f:23:6e:74:8c:44:eb:1f:e4:41:24:44:31:98:7d:
1b:87:82:f0:52:b3:1f:36:99:ed:ce:74:a5:90:f5:10:a9:78:
b4:81:5f:5a:04:bb:58:53:24:b9:47:ec:40:8f:2b:8f:3e:fe:
b5:4b:95:5a:66:37:de:c2:7f:31:b7:e8:33:a1:a7:4e:f5:ae:
9c:45:21:ca:5a:a7:da:07:b9:c9:eb:e2:1e:8d:e6:91:f6:d8:
b8:05:08:06:3d:8b:92:a5:b6:c7:dd:25:32:72:a4:d3:ff:86:
59:b6:3d:d6:10:0d:cc:b1:e2:97:b9:c2:e5:30:00:dc:1a:54:
66:cf:a0:d2:06:4c:9a:42:8c:10:0c:8d:1e:76:58:16:12:f7:
f8:14:df:f9:34:72:fc:eb:7e:57:a7:30:f5:66:1e:6d:7f:b8:
ac:2d:6c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:49:19 2026 by rpki-client