Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
File: dBc29lciH8E0MWMjsHQFhanBsgw.mft (raw, json)
Hash identifier: ChSODuPTEHsEGSTyud5ACCRT3sAQUYiArGwgsiG2iAs=
Subject key identifier: 24:07:01:55:3B:FF:45:2A:E2:AE:A8:C5:26:D9:A9:98:8A:0F:D4:E0
Authority key identifier: 74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
Certificate issuer: /CN=741736f657221fc134316323b0740585a9c1b20c
Certificate serial: 019D996276AD2B9F98434A83017F946CB7C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 03:01:00 +0000
Manifest this update: Fri 17 Apr 2026 03:01:00 +0000
Manifest next update: Sat 18 Apr 2026 03:01:00 +0000
Files and hashes: 1: 3D6ST7VPwU1ruJHTqcORchHTAiE.roa (hash: NASIK7MkKYD9o//4ZODXB3XY9C+uWrjRQevxzYiJxB0=)
2: FsryNOkpTRhYXYiVpfSErxkdF5I.roa (hash: 7TnmsucFlZLELXfMUZN9SGlpQMX8+cF0eWaXdVfCFOM=)
3: dBc29lciH8E0MWMjsHQFhanBsgw.crl (hash: DGabejwfWJEJlJrHrfUOpm8AxCeVClbigYS4IEyO7ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:76:ad:2b:9f:98:43:4a:83:01:7f:94:6c:b7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741736f657221fc134316323b0740585a9c1b20c
Validity
Not Before: Apr 17 03:01:00 2026 GMT
Not After : Apr 18 03:01:00 2026 GMT
Subject: CN=240701553bff452ae2aea8c526d9a9988a0fd4e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:73:65:0e:d7:d1:4b:d6:87:13:4b:b3:60:c7:
c0:fe:6e:5c:f0:5d:d7:8a:d7:5a:2d:9e:23:d8:1e:
36:b1:72:dc:4f:ab:7d:e9:1b:7a:37:60:aa:b2:bc:
81:bb:0d:9d:cf:b2:48:0e:c7:3c:eb:70:49:97:63:
e4:d2:ed:de:8f:21:34:5a:b4:95:bb:d7:0f:61:69:
0f:43:09:22:d3:89:b0:27:45:23:61:9d:5d:5f:95:
01:01:81:5b:b0:c8:84:ba:63:30:6c:2b:7e:55:d4:
35:db:bd:49:3d:6e:c7:41:80:7a:3a:c4:8f:2d:5c:
f0:6d:a2:6d:13:87:68:48:48:6e:89:19:26:e2:8c:
26:2e:c9:e1:ac:64:37:4a:80:34:8d:53:65:0b:43:
2f:c7:6f:bc:dc:d4:58:f6:51:0e:5a:bc:e5:3c:4d:
20:24:16:db:c9:24:8c:e2:78:0c:8c:96:bf:48:fe:
3e:c8:66:51:cd:5e:d4:df:71:97:bf:ac:97:ed:d6:
67:dc:3a:36:7f:2d:e7:a1:17:36:09:3b:9b:fa:9f:
7c:bc:81:13:c1:ea:a8:23:20:21:4a:60:a0:fa:ac:
af:af:a2:df:12:d7:68:ab:82:c1:02:62:8d:aa:6b:
cb:79:64:f3:98:91:d0:0f:9f:f8:15:04:25:0f:b4:
5e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:07:01:55:3B:FF:45:2A:E2:AE:A8:C5:26:D9:A9:98:8A:0F:D4:E0
X509v3 Authority Key Identifier:
keyid:74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:fd:44:60:cc:98:30:e4:1f:27:3f:28:45:14:dd:0d:b5:f5:
18:f2:be:8a:3b:7c:ad:98:eb:e4:5d:53:0f:e8:13:5e:08:98:
37:e6:8b:a0:03:5b:58:3b:ea:e2:2e:04:c5:0a:cf:af:0b:81:
45:d6:ff:25:83:58:4d:a7:5e:02:a9:ac:a8:9a:73:a4:9e:4d:
27:90:bf:20:6b:0c:56:0e:43:21:c0:77:93:f2:b4:61:8a:84:
a2:4b:99:00:e4:61:5e:0f:ff:22:3a:b4:68:6c:ef:98:50:29:
90:64:6f:c6:b7:59:53:bf:88:db:9c:b5:f5:39:7d:53:95:6a:
2b:c7:61:d9:12:93:c8:30:68:bd:99:1d:11:87:e7:47:24:53:
e5:2b:9b:89:cf:75:b3:30:f1:69:3f:ba:49:4b:c0:9a:2a:92:
ae:22:c7:d4:e2:a4:db:43:9b:31:fa:86:96:8d:a4:66:d6:d3:
f1:17:da:ac:46:40:84:f0:13:29:41:56:57:1e:4b:50:fa:6d:
86:1d:24:aa:ef:73:bd:4d:c4:1e:57:af:37:f4:d5:0f:5d:47:
6f:04:ae:47:7a:cd:64:82:d9:24:c4:62:df:3b:2a:0d:2e:54:
da:82:73:f5:32:14:07:73:52:93:e5:b5:62:f9:24:92:cd:8d:
67:17:19:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:48:50 2026 by rpki-client