Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.mft
File: dQ_7ZVLViud0ukJNVSezUGJPqvw.mft (raw, json)
Hash identifier: Oanw8KkArfjwxpZgFLfDCuVQwMwP7NeM5YEGolKx+c0=
Subject key identifier: 40:9E:A5:DD:D1:80:18:17:34:E5:A3:2A:32:80:63:A6:8A:58:C8:C2
Authority key identifier: 75:0F:FB:65:52:D5:8A:E7:74:BA:42:4D:55:27:B3:50:62:4F:AA:FC
Certificate issuer: /CN=750ffb6552d58ae774ba424d5527b350624faafc
Certificate serial: 019D9BF56B076BCF3D1A1CCBF656943764CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQ_7ZVLViud0ukJNVSezUGJPqvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 15:00:45 +0000
Manifest this update: Fri 17 Apr 2026 15:00:45 +0000
Manifest next update: Sat 18 Apr 2026 15:00:45 +0000
Files and hashes: 1: dQ_7ZVLViud0ukJNVSezUGJPqvw.crl (hash: gyI+MNwkjfV/CNBFBqUHZAk3U3fAocCVkKE/tyX1H84=)
2: wpBz1cZtdv79Ar3akf9GaInWtzg.roa (hash: ite+6yHL6pp97dJQxSW2RVfxFWR32C053YIMvKgrigM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQ_7ZVLViud0ukJNVSezUGJPqvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:6b:07:6b:cf:3d:1a:1c:cb:f6:56:94:37:64:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=750ffb6552d58ae774ba424d5527b350624faafc
Validity
Not Before: Apr 17 15:00:45 2026 GMT
Not After : Apr 18 15:00:45 2026 GMT
Subject: CN=409ea5ddd180181734e5a32a328063a68a58c8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:54:ba:e5:6d:01:52:b0:04:3a:b5:68:fc:f0:
32:c7:38:90:8c:d9:f0:09:df:af:33:07:57:af:92:
43:ef:1c:a5:a1:ba:3e:26:71:96:d1:51:00:99:ce:
c0:b5:76:7f:59:1b:64:31:07:a8:36:0c:30:6b:21:
a7:e6:11:ba:cc:33:00:0c:d0:08:5a:21:9e:11:b6:
53:50:cb:f6:6a:a8:f9:c0:ce:4b:8e:31:6a:e1:42:
58:a6:07:07:d2:f1:ed:00:44:db:c3:09:cd:12:a9:
9e:05:75:9e:e3:7f:20:47:da:2b:10:3f:61:02:d1:
79:e9:a5:40:d2:96:e6:59:9a:99:9d:18:ed:a7:01:
f6:bd:27:4d:8c:19:85:15:e6:6b:2b:2e:c5:a8:99:
38:fe:55:ed:8c:ab:f0:43:9e:2a:e2:b2:02:66:cc:
6f:47:b8:c0:33:b6:f1:54:33:98:ed:d1:27:20:46:
2d:bc:03:18:5d:39:6f:1b:87:dc:f7:0a:f5:13:ce:
fe:90:f0:6d:95:b2:07:02:5f:05:6c:98:ec:d9:01:
c5:40:42:02:9b:eb:1d:76:9a:eb:49:c0:36:e8:ae:
85:78:c3:ca:48:ae:9a:de:b5:1b:0b:18:19:ef:0f:
4c:87:41:6e:a6:91:03:4e:28:d6:52:00:6e:4b:18:
6c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9E:A5:DD:D1:80:18:17:34:E5:A3:2A:32:80:63:A6:8A:58:C8:C2
X509v3 Authority Key Identifier:
keyid:75:0F:FB:65:52:D5:8A:E7:74:BA:42:4D:55:27:B3:50:62:4F:AA:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQ_7ZVLViud0ukJNVSezUGJPqvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b3:56:e8:c0:4a:fa:aa:7f:9e:53:5b:b9:0d:b5:a0:f4:0b:
49:f7:60:ba:7e:a1:08:0b:4a:c4:35:c7:0b:53:c5:20:1b:06:
c8:a3:74:72:cc:8c:07:8a:fb:58:f1:02:36:9a:e2:71:5c:dd:
4c:1e:2e:a2:f1:62:31:22:67:2b:39:eb:2d:22:ac:f0:99:4c:
ac:fc:11:5f:20:4e:fa:25:1b:8c:5a:b4:30:1a:d6:2a:5b:94:
37:30:b0:1d:38:30:7d:ff:7b:10:a9:85:b0:8d:42:97:d8:9a:
4b:54:7b:09:c0:34:d5:fb:94:0e:6f:b7:ce:06:de:c6:f4:f5:
e2:05:ce:8b:b4:4d:e7:7d:de:17:a4:df:50:63:d5:83:bb:50:
ec:5a:f8:4a:80:ad:66:57:7f:78:b8:05:d1:b7:a8:01:57:2e:
5c:f0:30:d3:1b:2f:a7:42:21:44:e1:ab:30:ff:8e:63:b5:46:
b8:16:c7:7b:78:73:87:96:52:18:dc:26:d5:77:2b:1a:70:d0:
91:96:95:fc:27:4e:d1:7b:dc:b0:c1:c2:b0:07:ab:c3:b5:8c:
7f:1a:69:c7:52:6e:47:bc:30:28:15:ae:42:82:14:de:82:79:
20:5e:5a:48:1e:54:09:6a:1a:f1:7f:34:7e:71:1c:2a:c3:a7:
7b:02:2e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:40:28 2026 by rpki-client