Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
File: dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft (raw, json)
Hash identifier: lhhvWAZOFklXV6WNa8i7RGlYzNrsbt+v35PPgBnAyPQ=
Subject key identifier: B8:02:85:20:BF:61:79:F1:8A:60:9D:19:9E:DD:D3:45:61:63:45:36
Authority key identifier: 74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04
Certificate issuer: /CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04
Certificate serial: 019D992B03993134751711906F5D3BE99E63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 02:00:26 +0000
Manifest this update: Fri 17 Apr 2026 02:00:26 +0000
Manifest next update: Sat 18 Apr 2026 02:00:26 +0000
Files and hashes: 1: dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl (hash: KE9/FD2zAaLFZtY7J9QqQZY1yTezSTjDY4lPqmPbdEM=)
2: g7fYHM51W9swYseMkrEDa3soWXY.roa (hash: k9K4BHL4fbJsHQSn19Joe+3Hon27U4MZ6GclcBUO56E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:03:99:31:34:75:17:11:90:6f:5d:3b:e9:9e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04
Validity
Not Before: Apr 17 02:00:26 2026 GMT
Not After : Apr 18 02:00:26 2026 GMT
Subject: CN=b8028520bf6179f18a609d199eddd34561634536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6f:68:cf:29:b9:37:3f:9d:28:4a:2e:eb:6b:
ff:0c:34:0e:69:69:32:b6:c5:6a:54:65:5e:f8:c2:
29:90:8b:6f:cf:82:63:13:b9:48:a3:ac:70:4d:01:
7f:8c:16:26:06:fe:99:ff:c7:46:f8:16:d6:99:af:
c8:a6:5c:4b:bb:28:72:f8:8a:0a:62:c3:6f:b8:6a:
3d:69:43:bb:20:32:2d:b9:5b:45:8f:df:38:7d:bf:
ef:2f:98:09:e5:6d:7a:9f:5a:c3:10:16:78:78:52:
fa:32:e7:93:31:18:14:76:2f:e3:6f:20:3c:4d:c5:
6c:1c:27:e7:92:9a:da:50:26:e6:ae:42:bb:9c:93:
f9:8d:72:be:20:46:3e:62:ff:ab:89:40:95:9c:af:
3c:28:d1:7b:f9:40:d4:7a:5a:cf:44:eb:5a:79:ba:
20:2a:21:fa:e6:26:ed:13:71:3b:f1:73:de:01:ba:
85:e2:8e:8a:3e:cc:02:06:af:5d:d0:f6:1d:82:0b:
84:cd:fb:31:65:a8:79:4a:6d:24:d8:52:33:da:df:
4a:3e:9d:0f:a4:5d:1c:41:d8:b3:d3:64:90:c7:f7:
dd:fb:24:bf:47:d4:69:bb:a0:b7:93:e4:27:1b:bc:
8d:a8:8f:5f:00:eb:47:6e:0d:33:92:ac:3a:ec:d1:
22:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:02:85:20:BF:61:79:F1:8A:60:9D:19:9E:DD:D3:45:61:63:45:36
X509v3 Authority Key Identifier:
keyid:74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:8e:a9:28:fa:d3:c3:7b:eb:df:02:04:21:75:58:e9:94:92:
cc:e3:c4:95:e9:c9:7d:0a:b2:a0:b8:2c:41:27:77:e0:32:22:
6b:03:6b:a5:0b:57:da:e5:11:e6:f9:88:ae:b6:a3:b2:0c:5a:
a1:86:3c:12:28:50:64:07:26:79:86:ae:14:eb:e8:7f:b8:73:
dc:1d:67:41:35:9d:35:90:36:63:05:7b:80:a8:f5:e5:e3:d3:
c1:0a:97:41:c5:dd:a8:f8:11:0c:2e:06:0b:40:63:7e:c0:57:
8e:35:01:7d:ad:e9:8e:4c:62:97:67:2e:64:96:9a:9a:fb:e2:
01:71:b5:0f:d1:86:a2:c2:8c:0e:cd:c2:71:c8:33:30:e5:2b:
f5:14:49:ea:6e:d8:bb:38:cd:90:da:dd:80:84:33:1a:29:a1:
3c:76:e2:b3:64:79:77:02:56:fd:8e:1a:a4:7a:6e:cc:90:45:
a1:8c:0b:ba:68:0f:20:92:4d:ca:6a:d2:d6:42:3a:0a:7c:fe:
33:c6:9b:77:de:f1:e8:0d:01:e8:e8:e4:3c:5d:c2:78:aa:d1:
30:c8:9e:8a:56:c3:ce:44:da:d8:8b:3e:bb:25:76:4e:41:90:
11:25:06:5b:2b:c5:a6:53:7c:9f:ab:7d:f0:2d:84:73:7e:3c:
86:b9:27:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:28:46 2026 by rpki-client