Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
File: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft (raw, json)
Hash identifier: Plu8C/PeVeQPIa6kTYJhjFiubhfmmRdEghNgwlRzfZI=
Subject key identifier: AC:64:75:B9:72:14:25:78:FD:84:6D:B8:DD:36:36:09:BB:35:66:52
Authority key identifier: 0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
Certificate issuer: /CN=0f516df64b3941b046743411ed86ea6030d72fba
Certificate serial: 019D9C2C82ED1EBF957BF36682A47B1E37EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
Manifest number: 16E6
Signing time: Fri 17 Apr 2026 16:00:55 +0000
Manifest this update: Fri 17 Apr 2026 16:00:55 +0000
Manifest next update: Sat 18 Apr 2026 16:00:55 +0000
Files and hashes: 1: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl (hash: pmh4Dfah6wDTwG4Tn5THlZKfJ+Ky/OosYHn7Gs/BsPU=)
2: dOFQf5AeWGROir3bR0l9oDiF_LY.roa (hash: NCU9gdpQPYAW35UhF4+gLu5Dhpwg+184qJ8TDUdFqxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:82:ed:1e:bf:95:7b:f3:66:82:a4:7b:1e:37:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f516df64b3941b046743411ed86ea6030d72fba
Validity
Not Before: Apr 17 16:00:55 2026 GMT
Not After : Apr 18 16:00:55 2026 GMT
Subject: CN=ac6475b972142578fd846db8dd363609bb356652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:30:8f:47:ec:0d:e7:52:9b:3a:e2:2c:e8:68:
7a:0c:e8:65:e0:fd:14:0f:d4:76:13:5d:d9:d4:72:
4f:68:26:6c:41:ba:60:f8:70:42:d0:bc:ef:ed:69:
aa:0f:8e:1b:84:bd:82:b3:d4:5f:e3:1d:bb:c2:5b:
61:2e:eb:58:37:46:67:0e:c7:40:80:bd:24:1f:5e:
ac:ad:1b:d2:bf:43:9e:42:b1:a2:cf:3e:6f:4e:ce:
b3:b4:29:8d:8a:bc:97:bf:c2:3c:8c:0a:af:c0:bf:
41:be:51:c0:0f:6a:f1:ca:47:c2:87:ef:d7:bb:b6:
f3:a1:79:96:35:14:fd:a1:79:65:63:74:df:be:15:
0d:3b:71:0f:ad:c7:20:8a:bb:b1:d8:cf:0c:fd:63:
a1:f5:8b:9f:ec:05:d0:a4:b7:2f:80:55:b5:f0:11:
25:48:f3:fb:3d:26:78:77:6c:31:1e:0d:81:b2:8b:
5c:3c:15:da:e2:4f:30:5a:d7:b4:8c:f4:e9:03:45:
2a:1e:a8:d5:b7:92:99:25:72:0d:8c:13:c5:b6:ce:
ce:61:ba:c4:a4:ac:d5:1b:b7:b5:41:54:23:66:0a:
cd:c6:e8:cb:ae:d9:ad:33:37:41:0e:d5:84:63:49:
45:f8:5d:b8:8f:83:c8:a1:4c:18:48:59:78:1d:d7:
13:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:64:75:B9:72:14:25:78:FD:84:6D:B8:DD:36:36:09:BB:35:66:52
X509v3 Authority Key Identifier:
keyid:0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:9a:6b:c6:ab:f3:4d:44:f7:24:07:e1:d5:97:c2:15:71:08:
46:ed:ac:14:3b:f8:db:52:0b:2c:21:55:27:fd:a2:8b:03:2f:
18:b3:af:7e:a9:87:35:3b:7d:2e:40:bd:45:c7:71:1f:74:80:
d6:24:2c:79:af:62:0b:09:74:12:2f:14:bd:f6:c7:77:b5:c1:
0a:03:6e:e0:b6:58:89:2c:1f:1c:d4:d5:f2:f5:38:55:71:7a:
58:d7:99:af:cc:d3:b6:2e:77:b5:8d:a1:9a:6c:2b:d0:69:d2:
05:63:67:c2:f5:9a:33:8c:92:33:a6:06:12:33:2b:3f:6b:b4:
50:38:5a:28:81:1c:2e:e7:28:5d:a0:f9:e5:eb:3c:ac:08:53:
8c:f9:a2:5d:b0:92:91:95:0e:1f:30:78:92:2f:91:c6:11:c4:
60:33:75:87:71:8c:c9:81:b2:4a:bb:95:06:f6:ab:22:83:e1:
d3:02:0c:ae:35:53:71:a0:46:d7:dc:3c:32:e2:e9:44:84:da:
d7:d9:c6:ff:95:18:cb:20:55:4c:3b:b3:50:2e:34:8b:51:d4:
e4:f2:bc:24:98:1b:de:d3:36:17:c9:db:72:08:77:ed:fc:68:
e8:6b:a6:d5:4c:ac:55:da:cd:7d:ba:5a:fc:6a:91:eb:ee:05:
93:7a:af:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:06:21 2026 by rpki-client