Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
File: da9OLDR4Dz2fUegKU7rDvm8yWUM.mft (raw, json)
Hash identifier: aVHLlC5XnAD8XZ0+8gEdtb99AAca7k8XhhYWsRK7jKw=
Subject key identifier: 98:89:1C:2C:F0:EA:D5:E7:BB:E3:4A:EE:21:A2:6A:36:3C:F9:A6:CD
Authority key identifier: 75:AF:4E:2C:34:78:0F:3D:9F:51:E8:0A:53:BA:C3:BE:6F:32:59:43
Certificate issuer: /CN=75af4e2c34780f3d9f51e80a53bac3be6f325943
Certificate serial: 019D98BD490AEE92ABE5C0A2BC2ECB6BFCC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
Manifest number: 11AB
Signing time: Fri 17 Apr 2026 00:00:34 +0000
Manifest this update: Fri 17 Apr 2026 00:00:34 +0000
Manifest next update: Sat 18 Apr 2026 00:00:34 +0000
Files and hashes: 1: da9OLDR4Dz2fUegKU7rDvm8yWUM.crl (hash: PbhzaeklmVX1mpTozI1lDut5xjYexKOuRLGjBEAkDGE=)
2: oGvgPtzFT-aTFQ_B85J22DwDAck.roa (hash: 6nOejPxS/rpc0rhO5giVJoyCV3cG0CBp7/FNYjbRlys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:49:0a:ee:92:ab:e5:c0:a2:bc:2e:cb:6b:fc:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75af4e2c34780f3d9f51e80a53bac3be6f325943
Validity
Not Before: Apr 17 00:00:34 2026 GMT
Not After : Apr 18 00:00:34 2026 GMT
Subject: CN=98891c2cf0ead5e7bbe34aee21a26a363cf9a6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3b:05:f4:ad:7e:be:5b:31:00:9b:d5:9a:65:
d3:8e:52:35:98:61:c8:c5:99:2c:aa:4f:b9:72:86:
16:c7:b8:b7:c0:84:00:60:93:d8:82:ba:e3:83:af:
51:9f:72:37:7f:74:10:58:51:c7:dc:ab:6d:c6:07:
83:d3:80:46:d2:f6:c8:57:53:2e:15:09:02:8e:7c:
ba:3b:4f:4a:d7:b9:c3:3d:5c:3e:e8:b8:f8:76:dd:
cb:a6:6e:36:a6:f3:ea:ce:cc:94:1c:98:f0:00:9d:
41:48:58:8e:cd:aa:b1:37:56:da:7c:94:69:96:1c:
2e:e1:7f:9f:d0:47:81:69:aa:2c:31:84:40:3b:cc:
c6:00:b1:35:3d:0d:8b:86:03:60:d7:72:9c:c7:14:
78:23:c7:84:d1:b5:40:1b:98:68:b5:9c:54:f7:c5:
9a:4e:0a:12:4c:7b:7e:90:e7:33:36:61:b9:50:1f:
3e:60:87:d4:2f:e9:b7:03:11:6d:13:68:58:9a:4b:
3d:67:76:71:b8:96:47:3d:5c:ca:83:9a:8a:b7:e4:
80:61:45:1c:f3:4c:2a:43:45:18:1e:c0:f7:c8:05:
87:e5:1d:1c:72:33:85:7b:15:3c:e3:b1:72:69:93:
9f:f3:21:86:7e:4b:87:8b:a7:20:80:f5:df:54:fe:
24:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:89:1C:2C:F0:EA:D5:E7:BB:E3:4A:EE:21:A2:6A:36:3C:F9:A6:CD
X509v3 Authority Key Identifier:
keyid:75:AF:4E:2C:34:78:0F:3D:9F:51:E8:0A:53:BA:C3:BE:6F:32:59:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:cb:51:08:99:a4:47:17:11:3a:4e:86:69:f8:a6:13:18:1e:
e8:04:98:6a:3c:f6:e6:cb:ec:57:7d:3d:a7:5b:10:fb:06:38:
da:a1:2f:9c:e8:14:52:e3:ce:a5:f3:0a:08:80:d1:49:63:9d:
87:5c:c1:be:5e:3b:e7:84:06:35:35:9d:1a:47:0b:e8:8c:fe:
fa:3e:5a:1d:d2:81:42:ba:69:db:95:be:3c:7d:9a:1a:a8:79:
f7:79:55:b2:60:71:a4:76:8c:15:0b:98:25:4a:ba:d2:48:c7:
a3:84:80:ea:2a:ad:d8:9c:71:64:55:f7:cf:48:da:07:02:a7:
bf:ed:41:81:04:e0:4f:c5:96:87:3d:2a:6d:b0:eb:96:37:1c:
17:96:03:7b:e0:24:be:77:58:32:03:fb:d7:fe:cf:57:18:c4:
2d:88:2c:7b:4e:da:16:60:3f:63:31:8f:09:6c:72:56:5f:a1:
2d:ce:4b:01:0b:d9:cf:2e:65:13:7d:fb:e0:d2:3c:29:06:1e:
ec:a9:e4:d4:a1:bd:cc:1b:11:0c:c9:8f:67:cb:d3:3e:11:97:
48:b4:cb:90:2d:2b:98:bf:2e:ce:0a:8d:8f:84:ab:9d:62:42:
71:ee:95:ac:a9:68:e8:97:b1:05:55:3e:17:32:d2:28:21:ca:
ff:d3:3f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:38:54 2026 by rpki-client