Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
File: DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft (raw, json)
Hash identifier: MjVPVKAqrQ+4/ypbMTJ+Uu+uMenJx9H5oaJxchJFWpU=
Subject key identifier: B7:94:C6:2B:9C:2E:9D:6C:95:31:7D:5D:46:00:46:E2:68:52:2F:83
Authority key identifier: 0D:F6:E6:33:06:7C:06:6A:E9:BE:F1:D3:77:1C:C3:00:E4:B4:D1:A7
Certificate issuer: /CN=0df6e633067c066ae9bef1d3771cc300e4b4d1a7
Certificate serial: 019D984FCB47FBEB456CA1A25257111B69B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
Manifest number: 18C5
Signing time: Thu 16 Apr 2026 22:00:59 +0000
Manifest this update: Thu 16 Apr 2026 22:00:59 +0000
Manifest next update: Fri 17 Apr 2026 22:00:59 +0000
Files and hashes: 1: DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl (hash: SlGCD6byex5Ty6HExWuDwy3kLd4mlHULsIlogSmACFg=)
2: O42Gic4dc360gIgddLeLvJAb0gg.roa (hash: cQ+n7ZgZ26eThRiniwC6AUO7/0CEDaEl6tna9PIT/9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:cb:47:fb:eb:45:6c:a1:a2:52:57:11:1b:69:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df6e633067c066ae9bef1d3771cc300e4b4d1a7
Validity
Not Before: Apr 16 22:00:59 2026 GMT
Not After : Apr 17 22:00:59 2026 GMT
Subject: CN=b794c62b9c2e9d6c95317d5d460046e268522f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:61:89:bd:d2:e9:b2:e8:86:20:3f:6f:2c:eb:
3c:f1:55:12:a4:9e:fa:f5:ec:11:c6:be:8e:52:d9:
e7:bc:16:09:45:36:4d:47:01:60:de:44:4b:b5:11:
3f:c5:31:7f:5e:43:40:98:56:b9:ad:fe:84:58:31:
68:43:12:9e:4c:02:e2:bd:eb:69:2b:98:ac:8c:c5:
c7:d0:b8:87:9b:f7:43:bb:3e:c9:5a:97:3f:16:8b:
a4:33:28:2e:8f:96:b7:1b:30:b2:c5:d3:e0:54:71:
df:fc:1c:8f:07:66:29:ec:ae:b1:3c:45:0f:ac:1a:
ba:22:ff:11:5b:7d:3f:9d:46:40:7a:da:60:e8:5a:
ef:b3:27:6a:bf:d0:0d:5e:3c:70:ba:c9:67:e4:bd:
89:57:cd:20:7f:32:62:d7:a4:fa:52:2b:9a:eb:2a:
e1:fd:e6:20:f5:10:6e:be:0b:90:91:5b:a6:23:bf:
9a:06:3e:d4:39:63:4d:e2:af:9c:6a:a2:87:11:ff:
fa:f3:84:e0:4e:ae:11:59:19:ae:5b:9f:0d:31:f7:
b1:9d:6d:81:23:76:bd:c2:52:bb:98:e6:c0:66:1e:
3a:50:59:28:c5:71:7b:31:ad:e4:a4:41:61:d9:d1:
dc:1f:a5:04:7d:fa:00:2c:87:93:08:9c:f8:11:7b:
d7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:94:C6:2B:9C:2E:9D:6C:95:31:7D:5D:46:00:46:E2:68:52:2F:83
X509v3 Authority Key Identifier:
keyid:0D:F6:E6:33:06:7C:06:6A:E9:BE:F1:D3:77:1C:C3:00:E4:B4:D1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:31:b0:61:be:80:b0:45:f3:c1:fc:ce:8b:46:8e:0c:f1:be:
b8:dd:ac:07:eb:9a:30:f6:d6:63:d7:3d:07:95:fe:d5:64:4e:
8e:7c:96:92:07:24:b5:c0:f6:64:89:29:42:2d:f9:fb:7a:7b:
9d:0a:66:67:ed:e3:0d:f5:3d:df:a8:d5:57:de:be:da:a4:9b:
35:0d:28:e3:45:d5:18:45:4f:69:4e:d7:d4:f1:da:f5:2d:98:
d2:fc:17:db:57:c7:11:db:5f:5f:97:75:ab:fc:76:7c:12:1f:
a1:3a:c4:ee:27:cd:c5:49:96:db:5e:78:c8:17:92:63:d5:4a:
ad:91:a0:43:fb:57:05:ed:76:80:04:89:67:76:44:1f:b4:33:
ef:5c:b5:b6:2a:f1:58:c1:66:ed:3d:0e:5a:5e:0f:17:83:91:
b5:e8:8f:0c:1d:a3:70:ec:9c:08:aa:74:59:a2:ad:f3:6e:4f:
74:4d:4d:b6:24:e6:09:6f:9b:17:1f:19:40:2d:90:e9:ef:7e:
58:cf:1d:4a:a3:27:6f:4b:ca:f0:e0:ce:a0:2c:85:bf:3d:ab:
8a:28:19:90:6e:3d:6d:74:ec:b4:cc:02:e8:c0:d1:03:ed:7e:
4c:3f:49:f1:ae:42:f9:c7:e8:66:27:0e:2a:25:12:d9:19:0e:
26:c8:0b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:27:53 2026 by rpki-client