Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
File: dh55HzroOuiyY-PNtoKjR1tXB98.mft (raw, json)
Hash identifier: RWLQv7uqPnCYdecPhBbduswJf22At6vED9Uf2PLyZns=
Subject key identifier: C8:7A:49:16:D3:43:8E:5E:62:C4:4A:76:22:A7:2B:12:DF:14:9A:4A
Authority key identifier: 76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
Certificate issuer: /CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Certificate serial: 019D9BF570CE1C12E5E876A0051E57472584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 15:00:46 +0000
Manifest this update: Fri 17 Apr 2026 15:00:46 +0000
Manifest next update: Sat 18 Apr 2026 15:00:46 +0000
Files and hashes: 1: HeTj1rlCLTtvBYW1onGZ7LauPQY.roa (hash: weFl57AveWg1aEff8nmfajyotthwbCTL0U0EBzxk8Zk=)
2: dh55HzroOuiyY-PNtoKjR1tXB98.crl (hash: iZX36lEduW+kh3/X1DdC8KzmFfaA0aQt91qenzhNLoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:70:ce:1c:12:e5:e8:76:a0:05:1e:57:47:25:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Validity
Not Before: Apr 17 15:00:46 2026 GMT
Not After : Apr 18 15:00:46 2026 GMT
Subject: CN=c87a4916d3438e5e62c44a7622a72b12df149a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d1:e8:fd:79:5f:84:d6:a7:ec:76:8a:8e:3a:
7d:e8:51:c8:0c:2f:8b:23:5c:e6:65:03:54:53:51:
fd:0f:0f:47:a5:8a:c3:0a:6b:38:fb:a5:c4:49:be:
bb:d3:f9:b4:7b:f3:97:2e:96:ea:75:a8:9e:f1:a0:
dd:46:dc:66:ae:2e:9c:83:77:77:ea:4d:ac:7d:4c:
3e:11:ee:cd:52:5c:51:d4:18:76:7a:e5:07:3a:7d:
63:1e:93:d7:a2:f9:5e:3b:99:1c:fd:f8:f1:03:72:
72:b6:4c:d0:fb:4e:f3:82:83:77:d3:1d:de:82:4c:
97:d8:75:73:55:cb:14:95:f3:ab:b5:52:55:25:96:
54:69:65:2e:91:b6:6e:29:e7:05:26:ca:01:82:d7:
f5:90:c8:8c:7a:7a:34:b1:7e:7d:d3:ef:5d:88:7b:
e5:cd:c8:e1:ca:4a:f8:f4:a6:55:f8:b2:d6:63:e2:
c3:9e:05:5e:32:6a:2a:b0:49:c2:f8:00:61:fd:7a:
15:97:1b:08:cc:78:36:e4:77:49:8a:dd:f9:7b:1c:
51:5b:42:f9:f9:c5:95:2f:f1:c4:38:51:88:20:9e:
33:40:d4:be:f6:63:66:54:6b:3f:ed:5a:19:9f:64:
1c:ff:65:44:81:ab:55:49:ea:b3:95:94:b5:ab:d1:
15:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:7A:49:16:D3:43:8E:5E:62:C4:4A:76:22:A7:2B:12:DF:14:9A:4A
X509v3 Authority Key Identifier:
keyid:76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:14:26:df:f5:25:7a:fa:ec:48:b8:02:b7:9e:29:7e:7f:c5:
bc:cb:bd:65:63:f9:27:8f:d7:d4:53:89:f1:71:90:c4:86:15:
d9:d5:22:6f:6c:63:33:30:6f:e0:8f:95:df:e0:97:ff:c3:66:
be:76:b4:13:dc:45:9d:d6:ab:52:c1:89:5a:78:0a:d9:b8:d2:
6b:27:bd:e5:21:c8:59:21:39:32:b5:ef:80:3e:e1:02:1e:72:
bf:6f:6f:06:ce:63:28:74:55:3d:6a:ab:ae:28:7f:4b:a8:d5:
fb:a4:40:a3:5f:34:04:04:6a:25:54:4c:86:f3:33:76:3c:87:
c2:b9:55:56:f4:ee:e4:43:2d:80:68:c5:b8:99:2d:05:f5:2c:
84:e7:56:6a:dc:40:27:11:c5:34:74:87:85:13:d0:ab:56:e3:
91:58:cc:2a:0d:67:c0:33:ff:d6:1c:f2:54:0a:02:ee:13:8a:
cc:33:67:10:c7:83:e4:1b:33:2c:82:f7:d6:ff:40:de:85:32:
96:3d:9b:34:80:d7:5b:0c:c5:2d:82:0a:b3:e0:8d:c9:6b:7d:
0c:51:94:aa:7e:fd:e6:13:f5:cc:fd:cc:d3:1e:48:05:0a:d5:
24:f6:8f:50:2e:ee:9f:a3:fb:4d:44:b7:85:cc:3f:87:b9:c2:
f8:f0:92:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:28:12 2026 by rpki-client