Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
File: Da7a5Z2cmvUe9UivsMlkOM73IRw.mft (raw, json)
Hash identifier: QYwiBOtDAAlV44xSMyj/jf8BLyp1Iu0UTsHEyrOHN+8=
Subject key identifier: D3:30:2F:62:07:1F:09:AA:9A:E2:64:E0:6F:5E:B7:12:83:2C:2A:96
Authority key identifier: 0D:AE:DA:E5:9D:9C:9A:F5:1E:F5:48:AF:B0:C9:64:38:CE:F7:21:1C
Certificate issuer: /CN=0daedae59d9c9af51ef548afb0c96438cef7211c
Certificate serial: 019D97AB1877652B4E7C65A9D94A927A8669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
Manifest number: 18BD
Signing time: Thu 16 Apr 2026 19:01:05 +0000
Manifest this update: Thu 16 Apr 2026 19:01:05 +0000
Manifest next update: Fri 17 Apr 2026 19:01:05 +0000
Files and hashes: 1: Da7a5Z2cmvUe9UivsMlkOM73IRw.crl (hash: xcvymQ4Jgvs/5fHFl8tNf6Esur7dAl/mQ3hHII3xIOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:ab:18:77:65:2b:4e:7c:65:a9:d9:4a:92:7a:86:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0daedae59d9c9af51ef548afb0c96438cef7211c
Validity
Not Before: Apr 16 19:01:05 2026 GMT
Not After : Apr 17 19:01:05 2026 GMT
Subject: CN=d3302f62071f09aa9ae264e06f5eb712832c2a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f6:01:b1:ae:b1:15:af:a0:8b:f5:3a:04:01:
03:54:09:51:00:44:a8:f5:2c:6f:bd:45:34:78:83:
4b:1a:1b:50:4e:ab:2c:3e:97:5e:2b:f7:47:51:c3:
09:5d:74:4d:88:e4:5f:c8:77:b4:6f:a1:8a:d6:93:
24:bf:78:4f:3f:56:00:dd:0c:0d:2e:6a:1e:df:0f:
d6:55:2a:17:eb:15:5f:40:51:79:4f:75:2c:6a:ec:
90:a7:0c:07:3c:96:1c:03:15:c3:86:ec:c2:02:f2:
58:03:15:19:de:7c:99:49:7e:ee:9e:04:60:48:8b:
16:35:cb:d0:9d:ff:cc:54:11:63:6e:a3:5a:91:06:
cc:6c:43:df:56:de:68:c5:77:74:73:66:13:17:86:
de:85:4c:28:7f:e4:d4:8c:ce:30:3e:97:2e:8e:6d:
98:34:89:94:d1:ae:ea:5c:36:45:b7:ac:cb:dd:9d:
20:05:f6:ed:54:d0:57:5d:79:db:a5:15:d8:bd:4b:
05:7c:7b:4a:3f:da:5a:74:85:41:e1:0b:47:7c:e5:
73:05:2f:73:04:9c:29:52:2f:5e:b2:33:68:83:f5:
55:4e:aa:8f:da:2c:2c:ce:16:db:b7:50:e2:0e:7c:
e3:a8:66:12:69:bb:10:47:1b:e8:8a:2f:7b:71:51:
5d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:30:2F:62:07:1F:09:AA:9A:E2:64:E0:6F:5E:B7:12:83:2C:2A:96
X509v3 Authority Key Identifier:
keyid:0D:AE:DA:E5:9D:9C:9A:F5:1E:F5:48:AF:B0:C9:64:38:CE:F7:21:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:a5:d2:34:47:02:42:9e:72:e0:39:0e:2c:1a:bd:06:de:28:
5d:c7:f8:f3:8c:7a:cf:64:f2:cb:ab:47:bd:a8:cc:b5:5e:6d:
8e:98:d3:0d:15:13:47:7d:97:c7:99:2f:07:22:f1:b6:e6:4c:
e8:58:de:70:fa:52:f6:81:11:90:21:99:d1:35:48:78:f6:a5:
ae:73:9e:25:0c:d6:d8:54:44:83:53:aa:6a:95:4f:05:d5:65:
a3:96:9a:ca:27:a9:04:e9:93:87:63:b9:12:ca:1b:8a:ed:f7:
46:aa:2d:0e:22:db:da:3c:0f:1e:7a:bd:5e:c7:cf:66:6d:18:
ac:f2:fa:36:a1:50:8b:26:3f:34:58:cc:5f:a1:6f:a8:a5:a4:
08:cb:e3:d5:13:e1:76:e9:db:ec:a9:6a:b7:d9:bc:e6:70:59:
e9:66:55:06:5c:5e:13:93:dd:f4:67:9b:a4:2e:54:e6:4b:4f:
0d:e5:24:7c:20:74:cb:96:a2:a1:9c:bc:bf:3b:21:52:cb:2c:
f8:d0:b1:d7:c7:e0:1d:87:97:6e:16:08:78:97:39:02:c3:c7:
76:56:fb:d6:52:50:b9:5b:5c:95:d7:d9:81:fe:bf:77:d5:e3:
4a:14:88:83:26:e4:90:bb:ee:d5:29:a8:df:9d:74:f8:68:26:
0d:59:8d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:43:59 2026 by rpki-client