Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
File: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft (raw, json)
Hash identifier: Z8bYTcHafZJQml7Dc49dx8qRKSkdCATUZWx3K1XHQIQ=
Subject key identifier: 8B:06:9E:E9:69:9C:5B:39:24:88:E1:46:D3:E0:20:10:CF:18:F1:EB
Authority key identifier: 0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
Certificate issuer: /CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Certificate serial: 019D9A06A8325A53A1526CBB9E4263B2386C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 06:00:20 +0000
Manifest this update: Fri 17 Apr 2026 06:00:20 +0000
Manifest next update: Sat 18 Apr 2026 06:00:20 +0000
Files and hashes: 1: 0f-a9_GN4BlFPHzpxP1ErjNcYpw.roa (hash: liGbjhGL+F+gsqi1YSPCU6zeplSqGVUh3nmEpRRgfOY=)
2: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl (hash: hcNn3sOWYgF4tliL/78mHRr7nFlXSBmximLfXX9mtCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:a8:32:5a:53:a1:52:6c:bb:9e:42:63:b2:38:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Validity
Not Before: Apr 17 06:00:20 2026 GMT
Not After : Apr 18 06:00:20 2026 GMT
Subject: CN=8b069ee9699c5b392488e146d3e02010cf18f1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:60:73:55:95:b4:e3:a3:5e:9d:50:f4:62:a3:
d2:4c:3b:1e:95:f4:d8:28:b9:55:5f:36:84:fd:18:
b0:11:39:63:da:17:cc:eb:b8:7c:e3:70:3f:bc:8b:
3b:b6:da:02:d3:26:f0:76:d1:f4:d3:7c:9f:93:10:
4f:bf:7a:40:1f:38:fd:51:d2:fc:58:30:1c:89:ad:
8d:54:f1:73:ac:75:30:8e:d4:7a:8d:87:73:23:cf:
55:13:9e:b6:a1:9c:79:51:db:fa:c3:87:19:38:15:
ed:ab:cf:d7:5c:a5:8b:9f:cf:ac:34:37:b5:46:f5:
63:38:04:4d:c2:e3:b6:d0:38:2a:2d:e6:a9:2b:e7:
80:ce:84:68:f0:aa:71:0d:ad:b2:31:70:25:f3:54:
74:ef:74:e0:d1:7a:de:26:d0:5a:eb:30:0f:23:61:
f6:f6:e0:7b:c9:8f:09:f7:dc:9c:d1:bc:73:db:df:
99:1d:71:f4:44:7f:f1:24:ca:91:77:f4:46:16:33:
5a:e2:88:15:82:a2:de:aa:21:83:46:4f:6b:42:20:
d8:bf:fc:f2:7c:86:38:df:c9:61:42:4d:66:45:d9:
bb:d4:1d:0d:42:37:65:9e:7c:99:94:8b:97:7e:5f:
f7:7d:58:e6:5b:7e:f7:76:1e:34:3d:cd:34:04:6f:
ba:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:06:9E:E9:69:9C:5B:39:24:88:E1:46:D3:E0:20:10:CF:18:F1:EB
X509v3 Authority Key Identifier:
keyid:0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:9b:97:df:62:0b:1d:c9:ee:66:54:1f:c7:df:74:02:8a:83:
1e:77:1b:d3:6e:0c:74:f9:d9:5d:a3:a1:02:8c:ec:15:cd:da:
cd:3a:87:d6:43:81:85:7c:df:04:80:ff:7e:e1:ee:cd:28:57:
2e:b9:8a:49:97:45:17:e2:2a:d8:09:ce:1e:a4:94:bc:8f:00:
92:6c:c2:e3:8a:2a:5a:b9:de:92:26:35:15:7d:2c:f2:d1:28:
45:b0:84:bb:1a:16:2f:77:a0:4f:32:d5:35:59:41:d2:b5:1b:
d6:3a:e6:dc:3a:9c:aa:c7:4f:e2:2b:37:0c:c5:d4:16:f4:b4:
03:05:47:e5:e0:91:37:3f:4a:18:45:8d:ad:ed:25:42:2f:50:
a1:ba:1f:59:4d:48:6f:9c:60:58:b0:7a:bf:aa:05:dc:75:39:
31:bb:71:25:00:2e:05:9f:00:21:72:dd:df:f6:80:69:1e:d0:
f5:85:3c:b6:0e:3f:7d:f0:92:b7:73:77:7c:eb:29:66:fa:50:
c9:35:30:2d:82:35:d5:dd:33:d3:ff:d4:04:98:53:3b:21:18:
9c:8d:44:ef:96:d5:ea:77:c0:54:be:eb:cb:75:e5:66:25:15:
7d:0a:4d:a7:47:d1:50:b6:8e:30:9f:28:dc:0f:f9:0f:7d:7c:
3d:f7:5e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:59:33 2026 by rpki-client