Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
File: bRULQ4zGj2LcFdNZWTFh95neU68.mft (raw, json)
Hash identifier: zTfWeE3jPC4oI0mGrL8R9S7293H+D95MkzC5vtt14rs=
Subject key identifier: DB:35:E0:F5:86:C7:41:79:00:5D:22:C4:64:AC:5F:8F:1A:30:E5:99
Authority key identifier: 6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
Certificate issuer: /CN=6d150b438cc68f62dc15d359593161f799de53af
Certificate serial: 019DA3E6E29505B19BB2821DD27653DE2511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
Manifest number: 18CC
Signing time: Sun 19 Apr 2026 04:01:50 +0000
Manifest this update: Sun 19 Apr 2026 04:01:50 +0000
Manifest next update: Mon 20 Apr 2026 04:01:50 +0000
Files and hashes: 1: bRULQ4zGj2LcFdNZWTFh95neU68.crl (hash: QKGEbSXsfXugK5qujSkqFdHLkfNsxn6c5myF2fJg1k0=)
2: dUgHWvpijFkm-akrw3sQ7y1cNbs.roa (hash: VxdxXUFgModksbeo9KT6w1E0Db503HU1KT/Tj4UeJQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:e2:95:05:b1:9b:b2:82:1d:d2:76:53:de:25:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d150b438cc68f62dc15d359593161f799de53af
Validity
Not Before: Apr 19 04:01:50 2026 GMT
Not After : Apr 20 04:01:50 2026 GMT
Subject: CN=db35e0f586c74179005d22c464ac5f8f1a30e599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4b:d4:03:ea:a3:7d:0e:a0:23:b7:56:2f:b9:
6e:de:0a:4a:b4:4c:1e:69:5f:61:75:10:13:5a:cb:
69:a4:11:f3:7f:c0:de:ba:c8:70:12:fa:92:2e:2b:
a3:57:77:c4:1b:f8:5a:54:87:6f:99:7a:27:2c:5e:
a1:c9:a0:f4:bf:e1:5c:18:cc:76:8c:f8:c9:8b:b9:
9a:99:9a:e9:ab:db:19:16:08:e5:d1:7b:02:55:0b:
13:9c:a5:7b:d6:42:c8:8c:fe:6c:f1:db:9c:90:5d:
e5:e1:29:9f:8b:96:52:a0:8b:be:b1:a6:1d:16:92:
13:54:6f:d9:e0:d9:ee:6f:a5:3b:75:38:80:db:b0:
42:44:16:4e:a2:bb:81:3f:2a:a3:ec:46:ee:c7:27:
e2:b6:1a:c7:2f:0b:31:f7:19:5f:40:7f:ec:cf:6f:
e3:bd:02:1e:67:59:11:e5:22:39:f2:32:88:6f:22:
36:7d:79:25:37:e8:10:bc:9e:52:de:67:69:b1:b9:
c4:db:cc:29:57:e0:97:2c:61:08:ab:e3:9c:51:89:
73:19:f1:3e:8c:ee:9e:12:66:9a:65:d3:cd:9a:c0:
6c:23:1e:e8:b2:ef:5d:23:a0:f2:fe:a0:2c:09:19:
0f:a1:9b:3b:a1:27:0e:1a:d1:c8:20:d6:66:0e:9b:
8a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:35:E0:F5:86:C7:41:79:00:5D:22:C4:64:AC:5F:8F:1A:30:E5:99
X509v3 Authority Key Identifier:
keyid:6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:32:3a:58:f5:20:65:cd:53:0f:ad:c6:dc:d5:c2:47:89:d7:
fe:7e:26:f7:f8:02:19:5a:b5:69:93:0b:e1:4c:d4:85:a5:5c:
c7:45:f8:07:5b:1a:9b:81:c9:69:4d:cd:53:8b:55:6e:ef:d7:
f2:6d:99:d0:47:cc:8c:6d:5e:9b:11:37:18:45:de:25:74:d2:
28:8a:78:1d:fd:e5:74:6c:56:3d:c2:b4:2b:3c:0f:2c:7a:28:
5b:1a:1e:a7:12:df:a0:bb:8f:57:28:54:66:6a:0e:95:1e:ab:
9d:32:cc:a8:3d:96:1a:8d:00:9f:37:4c:f2:9b:32:27:51:fa:
54:52:d0:b8:47:e8:aa:72:75:9f:8d:56:fc:aa:5b:1a:aa:7f:
a0:de:51:93:84:cf:0c:e5:ba:df:71:f6:61:7c:3c:56:39:65:
e9:14:3f:cd:0b:85:af:54:d7:26:7a:e9:19:74:fb:c7:a8:81:
1c:3a:12:68:16:29:f5:da:4b:0e:c1:41:0a:50:f9:46:2c:88:
06:2a:80:f9:ce:b7:d9:bf:b4:5d:06:46:6a:4a:e7:b1:30:12:
5a:b3:05:03:e3:20:47:fc:39:db:7a:64:f1:f3:c2:f3:3b:52:
4b:5f:80:f3:e7:d9:ef:c3:8c:40:a5:e4:e7:dc:36:d6:44:98:
19:d3:d9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:41:48 2026 by rpki-client