Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
File: dcuRtTn9feisVTjK9Tu_L6wbslk.mft (raw, json)
Hash identifier: +mB2m/GyCjkH+dOulTHLpxlol9i8gKgFcFjQkw3D/EI=
Subject key identifier: 4A:EE:68:8B:84:5C:69:F6:26:56:94:4A:D6:51:10:F2:B9:B8:FF:05
Authority key identifier: 75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59
Certificate issuer: /CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259
Certificate serial: 019D99D0C541EA1BC26B6F6548377E086803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
Manifest number: 0973
Signing time: Fri 17 Apr 2026 05:01:29 +0000
Manifest this update: Fri 17 Apr 2026 05:01:29 +0000
Manifest next update: Sat 18 Apr 2026 05:01:29 +0000
Files and hashes: 1: RirrsvwYX5j7L-75yH60raw263E.roa (hash: IOJ4XETq/n9kBBATZy+5z0L1BPBp5v7kLy/O5w5iiLM=)
2: dcuRtTn9feisVTjK9Tu_L6wbslk.crl (hash: /vrSEA/rxNeQnTSKX0/BSbH7URNnPNMtAWTBAPK94X4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:c5:41:ea:1b:c2:6b:6f:65:48:37:7e:08:68:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259
Validity
Not Before: Apr 17 05:01:29 2026 GMT
Not After : Apr 18 05:01:29 2026 GMT
Subject: CN=4aee688b845c69f62656944ad65110f2b9b8ff05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1b:f6:6c:bc:61:e7:60:31:5c:bb:23:9b:c2:
91:c3:1f:b5:b7:b4:65:d4:ac:67:14:1b:9d:84:d5:
55:9b:25:9e:9e:6c:c6:1a:f2:cc:51:d0:8a:9a:41:
c2:bb:98:8d:f3:2f:98:72:68:f6:ef:1c:89:29:7b:
06:90:24:39:5a:b3:6a:29:9c:73:53:e3:d8:d5:25:
1e:51:3a:5b:bc:2e:5d:87:ce:5d:77:d7:a5:c9:42:
e8:96:83:63:53:d2:a5:ce:30:27:aa:48:49:57:68:
3f:67:dd:16:f2:76:18:0a:7c:8b:0f:83:29:0b:72:
d4:e3:44:f6:7f:61:03:55:b8:25:55:33:67:22:9a:
f8:90:93:97:af:19:69:fa:58:5f:40:07:9b:8d:9d:
95:e2:de:bb:2b:8b:0b:2f:1c:93:bd:d2:8d:6c:5d:
1b:3e:1c:f7:80:81:4b:d2:4c:ed:7e:e9:52:24:2e:
ca:a3:75:3d:f9:00:66:f7:73:98:b8:96:70:64:2d:
75:c4:14:38:23:02:53:31:95:3b:3a:d9:4a:f0:8f:
c2:4a:24:1c:1a:29:07:b4:e5:ac:ba:3c:49:ea:50:
01:d3:4c:6f:bf:62:b9:1f:02:5b:bc:41:37:9b:aa:
f2:a6:47:6c:5d:3c:25:28:79:02:e6:50:de:ff:a3:
f2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:EE:68:8B:84:5C:69:F6:26:56:94:4A:D6:51:10:F2:B9:B8:FF:05
X509v3 Authority Key Identifier:
keyid:75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:0d:22:68:8d:65:11:99:9f:7c:28:24:cb:68:6c:89:c6:1b:
45:2e:e7:ba:03:5c:0a:74:e9:a2:53:67:45:55:41:2f:d0:9e:
31:c3:fc:de:ea:6a:5e:e9:fe:7b:a7:15:b0:21:a6:2b:62:f3:
ef:b6:91:3a:ef:56:ba:e3:ea:cb:f6:86:3d:f2:57:fc:60:37:
cc:54:63:ca:7c:45:69:39:91:70:07:f6:a0:43:15:50:20:75:
42:17:86:57:7d:61:f1:25:75:0d:cc:a8:a8:21:64:63:19:f8:
5f:b7:ee:90:39:3b:c4:a8:75:47:44:3f:87:96:84:39:df:39:
41:fd:ba:de:36:5e:16:ea:a6:31:71:60:0d:97:c6:ed:6d:7e:
06:f8:87:04:96:b5:f0:71:29:75:5b:7e:09:b9:e0:c6:02:2f:
b3:a4:68:5e:68:3f:ca:df:ec:6b:2b:37:65:b1:6f:b5:e1:e1:
df:dd:04:f5:e2:dc:9c:d6:79:77:64:fd:22:f4:2e:dd:8f:c2:
57:94:76:ab:f0:25:1f:d8:5d:fa:c2:7c:5f:13:53:9a:e6:5a:
97:08:46:eb:f1:3f:bb:b1:0f:9e:51:f6:65:6c:76:e0:1e:95:
5d:cd:4b:9d:e0:5f:62:87:54:25:4d:1c:f3:dc:64:cd:4e:4d:
a4:f0:f2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:14:03 2026 by rpki-client