Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft
File: dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft (raw, json)
Hash identifier: zSg2pVZD2XLLe+G6WG3ZeqDEovDAJmX9MgccytzFCEQ=
Subject key identifier: A7:17:26:02:56:AB:45:43:73:D4:0D:67:C9:1C:52:70:2B:AD:76:98
Authority key identifier: 75:B9:82:EA:BA:44:08:CD:94:18:99:F5:CE:EC:1D:A6:A6:7C:5C:49
Certificate issuer: /CN=75b982eaba4408cd941899f5ceec1da6a67c5c49
Certificate serial: 019D9A751C92AE774D5C90465FE251C45556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbmC6rpECM2UGJn1zuwdpqZ8XEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 08:00:59 +0000
Manifest this update: Fri 17 Apr 2026 08:00:59 +0000
Manifest next update: Sat 18 Apr 2026 08:00:59 +0000
Files and hashes: 1: 21dEdElNkV3wCunznBThEBlJcX4.roa (hash: 5wxxdJq/NDV1f9XwNpVa9dOVitTrL0/8VPX3yplDJdQ=)
2: dbmC6rpECM2UGJn1zuwdpqZ8XEk.crl (hash: fAZOC1lTivuk4kk3FhS5qQLnnqxDAo24+4R3GRWBID0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbmC6rpECM2UGJn1zuwdpqZ8XEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:1c:92:ae:77:4d:5c:90:46:5f:e2:51:c4:55:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b982eaba4408cd941899f5ceec1da6a67c5c49
Validity
Not Before: Apr 17 08:00:59 2026 GMT
Not After : Apr 18 08:00:59 2026 GMT
Subject: CN=a717260256ab454373d40d67c91c52702bad7698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a4:d0:60:bd:d3:78:b8:83:a0:06:13:f0:77:
cd:a3:d0:47:12:1d:e5:de:7c:e6:cd:e0:30:fa:be:
04:19:fb:c0:24:8c:ac:0a:55:48:8c:53:9b:a2:b8:
5c:2f:a0:35:d6:0f:cd:9b:c2:d9:bd:61:52:78:66:
d4:f3:c3:8d:b5:57:e5:5a:7e:c1:89:85:f7:c2:01:
de:a9:86:ca:a8:61:5e:0f:3e:61:b2:27:49:9b:bc:
38:fc:10:85:da:70:07:e7:70:4f:9c:b8:0f:1a:32:
e8:b6:17:cb:b7:8b:61:2e:3c:fe:85:3f:6b:c2:a6:
29:1e:fd:c7:d8:b0:ee:93:f9:99:07:b1:17:91:e7:
01:4b:32:31:4a:48:94:34:bf:ef:08:70:4b:fb:e2:
48:8d:21:cf:35:dc:84:3a:52:8a:c0:6f:f6:53:1e:
36:7c:4b:43:60:36:5f:8a:ee:54:18:90:24:18:ff:
84:c5:f1:6c:e3:11:f8:26:b1:3a:c7:c8:7a:60:e2:
5f:1e:85:c0:9d:46:36:5d:35:f5:e6:3f:b9:a4:7f:
23:7e:36:5b:72:73:a5:08:66:26:2d:d1:4f:15:f1:
5c:0c:cb:0a:c5:0a:24:e4:bf:4d:bf:34:59:b5:bb:
02:a3:14:c1:fb:87:5b:83:f7:62:d8:18:d9:40:a8:
10:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:17:26:02:56:AB:45:43:73:D4:0D:67:C9:1C:52:70:2B:AD:76:98
X509v3 Authority Key Identifier:
keyid:75:B9:82:EA:BA:44:08:CD:94:18:99:F5:CE:EC:1D:A6:A6:7C:5C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbmC6rpECM2UGJn1zuwdpqZ8XEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:f4:f4:23:79:80:e2:f0:d8:7d:e2:1f:e9:a9:aa:2e:c0:58:
68:ae:57:48:ca:53:c8:a0:d3:ab:5c:cc:1a:d8:05:ec:ac:78:
4d:96:76:d9:b1:fa:61:c1:0a:14:dd:45:9b:97:b2:6a:ca:6d:
de:57:1f:12:02:bf:84:cb:99:a1:75:93:6c:6e:b4:ee:ce:a7:
d5:2d:59:df:57:33:cc:9c:f8:31:52:7f:43:2f:64:33:9a:c2:
72:73:5a:e8:91:f7:22:89:c5:98:81:b1:e8:56:61:c7:2f:c6:
c9:8c:3f:d6:39:4d:0b:9b:43:82:b1:da:d9:fa:a1:70:64:16:
68:fa:f8:e4:f5:63:4b:91:ce:75:5b:51:46:46:c4:13:a5:4b:
f0:1f:4e:75:d1:03:47:69:ca:ff:e4:ab:bc:19:fa:75:98:5e:
f2:dd:81:c7:33:88:c0:66:03:56:e4:cc:5e:94:43:b1:78:cc:
ae:69:7c:21:b3:7b:7c:96:61:71:72:d3:60:72:2e:ad:60:b0:
00:8e:df:4c:8e:fc:4d:07:48:58:1e:fe:b2:ed:e8:47:bd:7b:
f6:fe:17:5a:c1:f1:06:02:0e:99:58:88:c5:9a:27:7b:41:0b:
07:0b:c5:72:9f:1c:48:37:09:f6:18:87:95:54:ff:75:c2:39:
e4:a2:33:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:32:49 2026 by rpki-client