Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
File: dKjYRykGwgOKrshMez5Wwglr6GA.mft (raw, json)
Hash identifier: 2bINcQdo/vzwQ7USZBjEIclE2+Do+Pt2E6Ck4NG+2sI=
Subject key identifier: 4D:BC:40:4A:5D:4E:5A:F5:80:BA:3A:02:AB:4C:85:C2:B3:1C:7F:77
Authority key identifier: 74:A8:D8:47:29:06:C2:03:8A:AE:C8:4C:7B:3E:56:C2:09:6B:E8:60
Certificate issuer: /CN=74a8d8472906c2038aaec84c7b3e56c2096be860
Certificate serial: 019D9A0770C8240478226D02812E00ABDC41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
Manifest number: 15D9
Signing time: Fri 17 Apr 2026 06:01:11 +0000
Manifest this update: Fri 17 Apr 2026 06:01:11 +0000
Manifest next update: Sat 18 Apr 2026 06:01:11 +0000
Files and hashes: 1: dKjYRykGwgOKrshMez5Wwglr6GA.crl (hash: fIj1eiKJbTT4RJQ3Oyffr7zK3Ytlk2aiSpK9dfWUNb0=)
2: oQCJF4siUdcpboMPfHP2EbeM0ps.roa (hash: IesKj0DCrmac38Ifbjs7D9byS/qB5f4vRUYllQm6ZFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:70:c8:24:04:78:22:6d:02:81:2e:00:ab:dc:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a8d8472906c2038aaec84c7b3e56c2096be860
Validity
Not Before: Apr 17 06:01:11 2026 GMT
Not After : Apr 18 06:01:11 2026 GMT
Subject: CN=4dbc404a5d4e5af580ba3a02ab4c85c2b31c7f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c2:23:c1:38:57:68:76:43:35:06:c8:c0:6d:
05:ef:04:7c:75:f2:5c:96:6c:37:64:a5:db:65:81:
a8:50:f2:3e:88:d0:60:4e:8c:f3:bd:5e:6e:75:c8:
cf:83:4d:37:37:7f:36:d8:6b:4d:d3:4b:c4:99:9c:
23:d5:d3:cf:b6:1b:c0:b7:d0:8e:a4:0c:c2:f2:97:
e1:7a:61:e7:87:e3:c1:4d:35:06:38:fa:7c:5c:b2:
fc:60:4d:b6:35:60:05:15:bd:92:78:e5:ce:0d:99:
45:18:9a:59:4f:97:9f:66:41:7d:95:d5:eb:90:83:
fd:4a:06:10:c1:0d:b9:3c:fa:60:63:f5:46:b0:a1:
06:56:2a:c6:bb:0b:dc:40:6e:36:2c:c7:5f:4c:b1:
d9:50:04:e4:20:5c:91:6f:5a:59:25:99:32:9f:59:
80:da:7c:41:04:20:41:bd:d2:55:82:66:f8:9e:a4:
40:35:0b:92:22:40:06:45:88:69:01:7f:b4:63:03:
26:ba:5e:06:d5:35:26:fa:a9:88:52:fa:ed:3c:dc:
1d:ff:e6:0c:20:09:33:5e:a2:18:a8:d8:91:8b:81:
7a:ed:e7:ba:24:d0:d0:b6:af:ab:35:d2:18:87:14:
9f:c8:e6:8e:38:01:19:61:09:7a:e0:5e:7d:c0:91:
0f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:BC:40:4A:5D:4E:5A:F5:80:BA:3A:02:AB:4C:85:C2:B3:1C:7F:77
X509v3 Authority Key Identifier:
keyid:74:A8:D8:47:29:06:C2:03:8A:AE:C8:4C:7B:3E:56:C2:09:6B:E8:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:aa:6a:83:fd:3d:82:b0:81:c3:6a:c4:d9:74:85:7a:39:42:
1f:c8:66:dc:c6:7a:cb:00:ef:ce:16:8b:73:bb:78:d6:e8:f0:
fa:d2:38:2d:e8:6f:db:85:19:7e:aa:15:57:03:8b:63:85:a6:
c2:9a:41:3a:29:a5:1a:e2:19:d3:76:c5:68:5e:35:35:48:a9:
43:93:e6:54:17:5d:55:13:50:df:58:0a:20:fb:53:cd:cd:41:
89:f2:59:a4:ff:50:30:0a:26:f9:8f:2b:f2:92:05:91:10:eb:
0f:0c:9f:9d:5a:cf:7b:cc:d6:80:4c:8a:60:d1:56:b7:38:91:
ef:28:0b:42:99:24:f5:61:94:49:67:b5:7b:91:a7:2a:df:cd:
4d:d4:0e:fc:d0:32:1f:23:7a:1b:cb:0a:7b:8f:47:28:ee:f1:
28:53:f7:84:bb:16:8d:e3:89:88:4b:39:b6:57:72:35:ae:2d:
d6:bc:ed:82:c1:d5:c8:f3:71:5a:b7:d6:7a:52:b2:0a:b0:93:
65:21:cb:26:61:1b:87:bc:f1:6d:af:68:a2:b3:a0:91:93:60:
11:75:2d:42:a9:fc:eb:c8:99:a8:e5:81:9b:91:b7:2e:d1:fc:
7f:1c:1e:44:d9:97:6c:cc:d8:cc:d7:89:1b:81:59:f2:b2:61:
f6:e8:15:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:17:51 2026 by rpki-client