Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
File: DM6IMtApSYAfEZjp0TuxjtWDLQw.mft (raw, json)
Hash identifier: Jyjn9r4mOhn3NuOQVCtvjje4Sy1G6ArMDk6+VWHIJq4=
Subject key identifier: 88:29:C2:D3:E0:20:BE:AC:51:28:BC:47:58:F7:87:99:AC:C4:BD:47
Authority key identifier: 0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C
Certificate issuer: /CN=0cce8832d02949801f1198e9d13bb18ed5832d0c
Certificate serial: 019DA378DA8321D2E23C03729DB3C8A7278E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
Manifest number: 18CC
Signing time: Sun 19 Apr 2026 02:01:39 +0000
Manifest this update: Sun 19 Apr 2026 02:01:39 +0000
Manifest next update: Mon 20 Apr 2026 02:01:39 +0000
Files and hashes: 1: DM6IMtApSYAfEZjp0TuxjtWDLQw.crl (hash: a5TOdRE+wP+8hA5Fo5Co95tWHRRrEvaYywBSJmJZT60=)
2: iDDbiSH2d_40GsJwPvUC4BGeuXA.roa (hash: vwX7F1KiY4ZWTpCyVu83FRegfcFV6IZjqYP0GrVArzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:da:83:21:d2:e2:3c:03:72:9d:b3:c8:a7:27:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cce8832d02949801f1198e9d13bb18ed5832d0c
Validity
Not Before: Apr 19 02:01:39 2026 GMT
Not After : Apr 20 02:01:39 2026 GMT
Subject: CN=8829c2d3e020beac5128bc4758f78799acc4bd47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ca:bb:f6:df:51:bb:93:1e:24:56:fb:86:5c:
5d:f1:30:17:ff:3b:cb:6f:a2:57:93:4c:10:68:6c:
7d:0f:7a:e1:cc:a1:0f:d8:99:79:57:0f:40:78:3b:
89:3a:cc:39:f2:de:70:61:42:92:22:ae:47:47:f0:
41:99:fb:25:58:b9:a7:e6:50:99:50:f7:02:5e:80:
45:33:45:ce:8c:68:63:b8:64:53:ae:8f:7c:7a:8e:
c4:e4:54:83:34:38:5e:24:c0:ef:8f:af:4a:ad:bb:
a9:09:f5:8e:8b:37:a0:be:77:58:af:56:d2:7c:bc:
e5:6c:57:68:fc:ca:58:4d:90:f4:ba:cb:57:01:b9:
9d:c9:e4:53:ea:70:7d:de:fb:98:8a:76:e3:24:d3:
31:af:d5:dd:e6:b8:e7:f1:cc:ab:b3:16:f1:51:20:
b8:04:6d:85:29:24:d8:ca:99:05:1d:9a:6d:b4:58:
e8:80:c0:02:f6:6f:74:30:76:e5:36:c6:a1:6b:f7:
b5:21:9f:89:2c:c5:8a:9f:69:5f:3e:e1:05:44:12:
dd:6c:cc:62:4e:50:d2:f6:c0:5b:34:e8:08:05:a8:
f1:23:ad:01:5f:71:ee:a9:42:fe:8e:26:7e:f8:83:
5a:1f:1d:f7:92:b1:bd:85:63:e5:71:26:ce:ba:30:
17:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:29:C2:D3:E0:20:BE:AC:51:28:BC:47:58:F7:87:99:AC:C4:BD:47
X509v3 Authority Key Identifier:
keyid:0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:57:aa:6e:83:69:2e:ce:35:6f:b4:e7:21:f3:9a:45:0a:b2:
48:9f:ae:5e:10:b5:33:75:7b:92:7b:8a:51:a0:da:3f:59:b8:
75:c2:00:26:62:2f:99:42:5d:72:eb:11:1f:f6:3a:9b:97:62:
0e:27:5a:02:4f:f6:4c:3d:ed:fe:e6:84:7f:e0:06:65:09:07:
95:6f:41:7a:3e:0f:1b:60:ec:04:5f:a7:fe:ef:76:2c:c9:16:
fc:c1:e4:a4:2e:13:ed:34:7c:e7:c8:b4:14:19:50:7f:dc:60:
ca:a9:45:76:61:b7:d1:bf:99:d8:7f:ad:6b:24:f7:fa:6d:42:
b0:73:e7:6c:c5:9c:51:5a:fb:80:fe:39:ab:e1:97:70:9b:e6:
86:7f:52:67:66:18:55:fe:33:0c:fc:4e:2d:6a:c7:20:ba:54:
41:ee:57:00:ae:5e:12:43:32:96:a4:03:82:a8:ea:f9:9a:30:
8d:20:24:81:fb:d1:bd:37:51:19:91:86:4e:c5:82:25:fd:61:
fd:5e:e8:80:9a:6b:2d:5a:85:02:4c:0c:52:85:fb:8d:e7:e8:
d0:4b:8d:56:b5:7b:ba:ce:9b:0b:9f:ff:6d:55:3a:36:3f:73:
0e:c8:01:34:81:e5:24:3f:92:7e:ec:c5:93:79:f2:a9:85:dd:
00:35:c1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:16:21 2026 by rpki-client