Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
File: DvJQ9m3TDDt1RDCoXVMjbxczG38.mft (raw, json)
Hash identifier: pADpS+do1FbsIhy4QVrXjbP9+pOOma6aR0/6t/qZ690=
Subject key identifier: 9C:C5:8C:A4:E6:62:34:A3:FD:E9:EE:D8:2F:97:B1:81:6A:0D:9B:46
Authority key identifier: 0E:F2:50:F6:6D:D3:0C:3B:75:44:30:A8:5D:53:23:6F:17:33:1B:7F
Certificate issuer: /CN=0ef250f66dd30c3b754430a85d53236f17331b7f
Certificate serial: 019D99D04DD542B52B017FF8D4B07D029B5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
Manifest number: 0560
Signing time: Fri 17 Apr 2026 05:00:58 +0000
Manifest this update: Fri 17 Apr 2026 05:00:58 +0000
Manifest next update: Sat 18 Apr 2026 05:00:58 +0000
Files and hashes: 1: DvJQ9m3TDDt1RDCoXVMjbxczG38.crl (hash: b7R7tR341Vi6TjaWyGVZCHYZcN4phOeH+bYiouAGNtQ=)
2: wUZK58GnfnXrFcL-rJ6SW3dQ9lM.roa (hash: tpiKkysQtleOXY8s7JxmnW98sGuzWNG7qUWUKxa7byA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:4d:d5:42:b5:2b:01:7f:f8:d4:b0:7d:02:9b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef250f66dd30c3b754430a85d53236f17331b7f
Validity
Not Before: Apr 17 05:00:58 2026 GMT
Not After : Apr 18 05:00:58 2026 GMT
Subject: CN=9cc58ca4e66234a3fde9eed82f97b1816a0d9b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a8:4d:23:9b:3b:1a:87:70:89:2d:b0:74:2f:
fb:c3:ab:10:e3:7a:3e:eb:69:2a:37:1f:ba:a7:2b:
1e:b3:25:3f:e5:e4:fe:20:ac:a0:08:4a:69:ba:15:
5b:53:9e:28:35:dd:a5:36:cf:0c:ac:f5:b7:74:f8:
3b:8c:53:a4:c0:7d:ae:fd:3b:cb:33:30:47:4e:b9:
73:3c:70:53:70:56:d6:07:e8:a1:62:6e:e4:4f:50:
68:a3:7b:c0:de:49:69:3a:98:5d:b3:f6:e8:78:f3:
b4:d8:f9:56:e8:a6:09:92:a1:ae:61:81:6f:f1:18:
90:ac:f4:3b:2c:94:f7:c8:50:9c:16:20:a6:cf:ca:
21:a1:fa:11:f7:59:b6:af:9e:5c:ce:21:86:7e:3e:
2d:2b:e9:da:2f:f7:a5:cd:b6:5f:3a:e7:53:ab:84:
d3:4d:56:79:94:aa:35:54:d0:aa:89:35:a7:06:6c:
bb:9b:fb:fd:52:ad:ca:eb:12:a0:aa:2f:af:37:d0:
de:ca:e4:4b:6e:47:54:bb:bd:cf:f9:82:46:b6:48:
d3:72:10:df:82:ef:07:06:51:a8:cc:0f:44:f1:24:
cb:de:3a:7d:7c:9b:00:d4:de:f0:bf:f3:8a:39:13:
50:04:34:ad:ab:40:ae:43:43:92:4c:a8:b6:e0:84:
0c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C5:8C:A4:E6:62:34:A3:FD:E9:EE:D8:2F:97:B1:81:6A:0D:9B:46
X509v3 Authority Key Identifier:
keyid:0E:F2:50:F6:6D:D3:0C:3B:75:44:30:A8:5D:53:23:6F:17:33:1B:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:2e:f5:eb:a3:35:57:7e:76:e0:71:5f:ea:ad:f4:d3:18:1f:
ac:0a:ad:0a:b5:87:9f:4a:68:16:dc:c1:7c:c0:96:5d:72:09:
ea:34:92:db:24:6f:39:37:96:6e:d8:3a:d8:24:fc:cf:09:18:
84:c3:8d:d4:c3:90:2b:83:6c:ce:06:55:6c:b8:5b:18:7e:0a:
89:1a:87:e1:27:0e:24:53:f3:7b:03:a8:18:99:4d:9f:f8:30:
9b:40:64:6e:cb:e9:13:e2:49:87:79:cd:d2:50:8b:1b:40:73:
98:c9:9a:16:11:47:26:87:aa:e6:49:fb:d5:e8:66:a5:97:18:
da:05:47:2e:42:a4:15:c9:83:73:d1:d4:b8:3d:74:f2:8a:30:
f1:d0:44:5a:aa:9f:e6:55:b1:80:08:5c:d2:b0:80:32:fe:14:
e3:13:98:71:8d:c3:75:5d:79:8b:1a:f4:49:6e:87:f2:4f:e4:
3f:a5:53:8b:7e:3b:d8:3e:18:06:0a:96:2e:38:48:f5:0a:5e:
47:bd:d2:64:86:20:5e:7d:e7:14:5f:e1:ff:ac:46:ca:dc:8d:
ab:4e:81:75:07:bb:45:83:63:7b:90:3a:2a:53:4b:98:95:f7:
28:da:d1:c3:36:aa:3a:a1:f1:e5:75:ab:ec:12:bb:84:9c:cc:
07:de:3e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:22:11 2026 by rpki-client