Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
File: DNLKvrHXJOekjdYemn4MUKTpv1A.mft (raw, json)
Hash identifier: pSM9Ccf7T0FN+ZhQ8vG1bwYRPnnaILDVWm+FDFSxI14=
Subject key identifier: 2D:1F:CB:5D:E2:2D:FB:9B:3D:32:AD:CE:FC:C7:36:13:16:71:A1:70
Authority key identifier: 0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
Certificate issuer: /CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Certificate serial: 019D9A7509986066C3409080E05C46BA82AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
Manifest number: 0992
Signing time: Fri 17 Apr 2026 08:00:54 +0000
Manifest this update: Fri 17 Apr 2026 08:00:54 +0000
Manifest next update: Sat 18 Apr 2026 08:00:54 +0000
Files and hashes: 1: 1--Z6Q8BarjYadI1h8WmhE35LM8U.roa (hash: pUDJuTCmc9bQJt1IcbDsRbQfB75IO5Jl60DjnzyNbKQ=)
2: DNLKvrHXJOekjdYemn4MUKTpv1A.crl (hash: Lx9SkLvl+RV/vPqajCS/D3O0LeVKCyc1diBGFvgw6kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:09:98:60:66:c3:40:90:80:e0:5c:46:ba:82:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Validity
Not Before: Apr 17 08:00:54 2026 GMT
Not After : Apr 18 08:00:54 2026 GMT
Subject: CN=2d1fcb5de22dfb9b3d32adcefcc736131671a170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b2:cf:bc:f8:25:c0:89:96:47:56:6d:ab:84:
f8:7d:6f:3e:00:cd:3a:10:01:5b:93:14:c4:59:82:
bd:a7:c6:84:3f:52:49:e6:cd:83:d6:79:d9:d1:f1:
78:ae:6d:83:90:15:5c:d9:67:45:cf:33:64:96:92:
59:13:d7:0c:ec:1e:6a:db:78:c6:20:a2:79:87:8f:
c9:15:6a:8f:d3:41:e1:c7:11:98:da:e5:5b:3a:7b:
6c:b6:34:10:52:db:6c:f5:38:98:cb:d1:b6:9e:0e:
49:f5:3e:29:07:4f:a5:2c:6a:0f:ed:ff:a0:f2:e3:
4e:7a:c2:a8:a1:97:f6:f8:17:9f:1a:ed:b6:5f:8b:
f0:6a:6c:e6:ac:ca:46:45:c8:1c:b3:a4:61:36:38:
f3:43:d8:df:3b:a8:42:b3:8b:4c:19:b5:66:6c:f0:
83:c5:c6:96:ba:77:4f:a3:81:d1:13:6a:3f:c9:53:
92:fa:1a:d5:07:c1:8c:54:44:3c:40:9c:7a:91:4e:
b8:57:20:9e:ac:4d:99:c2:3d:14:9d:41:10:d5:9a:
e8:47:0b:a2:93:c8:0f:20:a4:59:6c:a0:16:07:6b:
49:dc:2e:d7:6b:09:d2:5c:ec:39:01:39:c7:a5:51:
25:ba:45:33:43:c2:34:b5:f9:3c:9b:90:7d:87:51:
fc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1F:CB:5D:E2:2D:FB:9B:3D:32:AD:CE:FC:C7:36:13:16:71:A1:70
X509v3 Authority Key Identifier:
keyid:0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:a5:a7:50:dc:42:d5:a7:c3:6d:36:56:a6:bd:17:a9:6d:a8:
0a:4b:17:18:9b:8b:5b:2f:19:fb:15:be:a1:d3:a9:1b:f1:ca:
94:d5:9b:a3:1b:b7:f7:34:4f:93:0b:d9:3a:7d:ed:e4:5d:d8:
29:e5:7e:86:08:45:a7:92:07:7b:64:92:61:fe:d9:a0:39:6f:
cf:b6:12:e6:06:95:59:2c:4a:10:49:bb:be:bd:7a:63:d2:f1:
55:79:74:cb:01:7d:54:22:62:77:40:4c:6c:08:20:7d:ea:ab:
3e:c0:df:d5:81:f5:1c:9b:f4:46:2d:a6:6c:8d:e0:0d:a5:33:
84:4f:fa:30:51:a8:49:81:a8:4a:ab:b4:9b:21:b5:04:cc:ed:
03:75:f9:01:5b:f9:47:12:0e:1e:d3:6b:c0:eb:84:c1:73:d6:
5a:fb:e2:b3:a2:4c:41:b5:e3:5e:28:eb:70:5d:69:e1:3d:0f:
40:ab:05:30:9f:2c:9f:d5:b0:7c:9b:1d:b0:e0:ec:a4:04:0d:
ab:7e:cb:f4:9c:d6:8b:9c:fa:00:b7:77:e6:db:8b:15:9f:6e:
80:cc:03:24:39:d6:0e:19:3a:db:dd:b9:85:8d:a0:28:3f:76:
2b:9f:8d:10:17:97:1b:a3:85:5d:4d:f4:03:f4:10:db:80:e5:
81:ab:03:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:40:55 2026 by rpki-client