Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
File: DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft (raw, json)
Hash identifier: cflbn+Vxnk0x2K2AB6VTiaUofrU1wCXLdDJ6P/8AOlg=
Subject key identifier: FA:CB:F5:B7:99:6E:62:EC:EE:FF:1C:E1:EF:A4:EC:84:40:C5:7E:6D
Authority key identifier: 0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4
Certificate issuer: /CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4
Certificate serial: 019DA3781E033FCCEDC004A163844D653C5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
Manifest number: 0FAC
Signing time: Sun 19 Apr 2026 02:00:51 +0000
Manifest this update: Sun 19 Apr 2026 02:00:51 +0000
Manifest next update: Mon 20 Apr 2026 02:00:51 +0000
Files and hashes: 1: DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl (hash: 5cV7kREWyqzyjN/CpA+WvyLujaPKhkp/hqWvPcj2Wms=)
2: pEi1sXolFr3_KzzGy9GgxCb35YI.roa (hash: 0hWxK4UVYjDavdDARBqtyWujMUcunhSXg8YFegPVy8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:1e:03:3f:cc:ed:c0:04:a1:63:84:4d:65:3c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4
Validity
Not Before: Apr 19 02:00:51 2026 GMT
Not After : Apr 20 02:00:51 2026 GMT
Subject: CN=facbf5b7996e62eceeff1ce1efa4ec8440c57e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:12:2b:4e:cc:f7:7c:b4:2d:62:f5:6c:67:f1:
60:62:58:2d:2d:c0:dc:3c:6d:db:d8:ad:36:e1:d7:
98:74:09:f1:ea:ed:9a:68:62:86:75:ff:79:39:61:
4b:aa:28:19:53:60:d1:9f:3b:58:f7:2f:b7:22:f8:
c2:61:55:0c:db:19:69:c7:1f:88:f1:af:2d:6f:ab:
39:ed:48:45:dc:32:d3:e2:af:12:1c:06:2a:9d:91:
07:ad:3d:8b:42:bb:0f:49:fd:e1:b8:2b:e4:29:a7:
91:81:3d:5a:8f:ec:3e:dd:4e:a0:69:25:ea:17:b9:
8f:d5:0b:3a:fa:af:68:f3:a1:37:45:bb:9e:47:c2:
60:a0:7a:91:c6:fe:92:0b:9e:bd:a9:ee:a2:b9:56:
41:9f:35:8d:50:f5:70:76:6a:8b:d4:98:bf:e2:28:
0b:f2:4d:72:2a:67:96:43:ae:a9:d6:38:b7:e9:5d:
20:cd:23:c5:dc:1d:ff:7e:e2:33:7a:c5:9a:eb:4e:
41:a2:61:75:8e:7f:d6:32:af:3c:d7:54:d0:cd:3c:
41:dd:a6:40:60:ae:56:a7:76:6d:e0:22:22:2e:54:
bf:5a:cf:0c:6c:52:68:b2:67:6b:26:7d:5c:4b:47:
51:08:31:7f:06:2a:81:cb:98:fa:56:c1:28:9a:b8:
34:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CB:F5:B7:99:6E:62:EC:EE:FF:1C:E1:EF:A4:EC:84:40:C5:7E:6D
X509v3 Authority Key Identifier:
keyid:0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:77:1c:57:f7:7a:3c:ce:9e:7f:81:b3:9f:1b:c4:86:e4:9e:
e6:67:91:07:19:05:4c:a6:00:a5:f3:59:05:a1:41:bc:87:cc:
bf:6d:bf:5a:3d:5b:8f:b5:91:f0:56:94:8a:76:0c:c5:31:a8:
b3:16:3d:ec:0e:80:dc:b7:57:36:8f:7a:bb:60:b0:8b:11:3f:
67:bc:53:44:f7:a2:c0:65:15:4f:ba:38:e7:7f:35:e2:85:89:
a1:25:0c:6c:d7:12:74:2c:75:dd:f5:ac:b6:3a:b7:6b:a9:2b:
31:4f:43:a5:fc:67:f9:f2:a3:7d:e0:61:0f:1e:e1:db:d1:67:
3e:27:41:8c:df:88:91:e6:a0:75:03:33:2e:56:ca:40:d7:5e:
48:e7:a8:a4:3e:66:a8:2e:03:fc:2e:87:bd:ac:ed:38:4a:60:
6d:94:a0:eb:16:89:8c:00:75:4e:2a:8a:15:32:88:7c:7d:40:
47:ce:6e:79:ff:aa:7d:47:48:9f:75:c8:36:2d:4f:c3:ce:cf:
16:b2:1f:a9:2e:1a:c6:f2:98:f7:8d:aa:3c:fb:ad:be:ad:5f:
40:bd:24:0b:7e:1e:81:cb:04:76:6e:4e:9b:6a:ac:75:0c:3e:
6e:b0:0c:b7:c9:08:43:34:aa:6a:de:53:71:76:1f:f4:57:6f:
bb:31:2b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:28:02 2026 by rpki-client