Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
File: DgE0-vunLgYznK3FXV8TuuSCsS0.mft (raw, json)
Hash identifier: AKfUjvjcaYkCfSIZV4x05OxO5CRBm2U6DdHT3xI4v1E=
Subject key identifier: 12:97:D0:07:DA:9A:9B:8D:F9:89:72:9F:AC:97:1E:47:3D:AB:1B:44
Authority key identifier: 0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
Certificate issuer: /CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Certificate serial: 019D992B2E5511AB0510E4AA847D36F0540A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 02:00:37 +0000
Manifest this update: Fri 17 Apr 2026 02:00:37 +0000
Manifest next update: Sat 18 Apr 2026 02:00:37 +0000
Files and hashes: 1: 8TaBsBYidW6NwN4w-r-_-frpmPw.roa (hash: d3cj9imIBJIrG7w+OMuxucJCXGk/PoAG60c7YkaGWUU=)
2: DgE0-vunLgYznK3FXV8TuuSCsS0.crl (hash: 41GClrWAAN3N4PLpJ4g+UrCEWnaX9j/cI0Xcs4WfW5E=)
3: cfuyV7WY5uCzefphkg9dkFiDF4o.roa (hash: 56j+8wClcw9KajdQHM4PT6tZ5VXaRrrlOf4m/1pMO8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:2e:55:11:ab:05:10:e4:aa:84:7d:36:f0:54:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Validity
Not Before: Apr 17 02:00:37 2026 GMT
Not After : Apr 18 02:00:37 2026 GMT
Subject: CN=1297d007da9a9b8df989729fac971e473dab1b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:14:4f:fe:12:1c:b7:a5:0b:db:0c:e0:f2:8a:
8f:b5:8b:c5:fe:7d:ec:38:86:6a:c2:f2:59:69:4e:
a6:3b:ef:55:d4:a0:1d:1e:1f:d0:0e:3a:0f:91:ef:
6d:6b:fc:c4:2f:de:ab:d6:fb:2e:99:4e:53:b9:55:
ae:ab:7d:d0:bf:f8:d6:71:1f:6e:2a:73:c4:a7:1a:
26:ac:5f:9e:7f:85:03:cc:47:f7:de:1c:1d:f6:be:
7e:33:79:95:b7:04:83:93:d5:e3:0f:26:8e:26:0e:
c6:48:fe:6a:74:51:e7:eb:da:ca:7f:af:36:9a:69:
c1:07:38:42:b5:67:5d:cf:26:2b:86:d7:26:ac:ac:
2c:81:db:a8:05:0d:3f:63:ef:dc:39:9a:0e:09:86:
e0:29:52:3e:be:cb:f6:f3:38:53:14:49:b3:4f:a0:
a9:11:da:15:66:49:ca:9d:8a:57:8b:6e:1d:ba:07:
61:78:fc:2a:f6:fb:9a:5f:80:65:cf:97:ca:17:e6:
23:9b:ad:16:26:14:75:c2:bb:d0:ab:36:67:23:e3:
4d:3e:62:97:79:15:46:b0:d7:d8:a9:f2:16:a1:6a:
69:54:90:2f:6c:70:d1:3d:84:0e:a0:18:07:e4:4f:
49:34:7b:cb:9b:28:5d:79:12:15:54:5e:3b:52:95:
25:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:97:D0:07:DA:9A:9B:8D:F9:89:72:9F:AC:97:1E:47:3D:AB:1B:44
X509v3 Authority Key Identifier:
keyid:0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:3a:90:e3:74:66:9c:96:fe:7f:d3:56:1e:2a:76:93:b3:10:
5f:9f:b1:b4:89:2c:c1:6a:68:19:2c:c6:c1:d6:f0:66:97:bd:
55:af:54:6b:a0:72:c3:28:1b:db:65:14:56:30:e5:ab:64:d8:
28:04:fb:a8:55:02:f0:8f:97:3a:20:6d:cd:80:7a:67:f5:87:
b6:bf:7d:b4:45:1b:b8:9f:8b:4c:46:89:1d:de:3e:9f:c4:db:
9c:bd:83:11:88:bf:b9:f5:ea:12:cb:a4:a6:a2:f3:9a:bf:d4:
93:d4:e8:7f:bd:52:5b:df:57:88:a7:85:52:2e:90:a9:43:b1:
67:9d:5a:e6:73:de:bc:83:95:a1:7e:ca:f5:af:ee:4b:78:fc:
1e:83:fd:38:40:60:14:11:3c:4b:a4:5a:93:11:40:4d:b7:30:
5b:d3:e1:78:59:09:ad:af:3a:7a:b3:9b:aa:12:8a:a7:46:bc:
45:17:61:be:0e:f4:c5:4f:4e:cc:56:a0:53:d3:a4:f1:a6:34:
0c:76:64:ce:72:85:ec:82:57:2f:46:50:29:ce:7d:02:cc:15:
e8:c4:68:9d:64:b3:3b:16:4f:fd:5d:49:16:0e:1a:6e:51:b2:
f9:0e:30:e7:1f:60:ae:d9:40:0e:15:e7:39:72:50:19:be:3d:
09:3f:17:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:04:41 2026 by rpki-client