Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft
File: rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft (raw, json)
Hash identifier: ha04j3qfeagNVxsP/c8yI7tpkG3xW5ffew9dG8BLeoo=
Subject key identifier: 42:27:80:95:B7:59:62:62:41:53:2D:FE:AF:4E:75:C9:9E:C1:7B:67
Authority key identifier: AD:D9:20:79:94:BA:9C:7D:91:EA:7E:47:9F:EF:D1:B8:09:9F:62:CE
Certificate issuer: /CN=add9207994ba9c7d91ea7e479fefd1b8099f62ce
Certificate serial: 019D99D081244FB2CBEE02960B5F25C093D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft
Manifest number: 18CC
Signing time: Fri 17 Apr 2026 05:01:11 +0000
Manifest this update: Fri 17 Apr 2026 05:01:11 +0000
Manifest next update: Sat 18 Apr 2026 05:01:11 +0000
Files and hashes: 1: KyN0CWaCH1SDWYOUqLNksdNsPzE.roa (hash: /rmcscD08dlHwE/FpDvYW0hn0CSDsvSiHmlRiI8+lQg=)
2: rdkgeZS6nH2R6n5Hn-_RuAmfYs4.crl (hash: 1FzW2STpFM6h2gTyXZY4WyZS+tSh4mo6lsLVEQvEc2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:81:24:4f:b2:cb:ee:02:96:0b:5f:25:c0:93:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add9207994ba9c7d91ea7e479fefd1b8099f62ce
Validity
Not Before: Apr 17 05:01:11 2026 GMT
Not After : Apr 18 05:01:11 2026 GMT
Subject: CN=42278095b759626241532dfeaf4e75c99ec17b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:30:de:79:35:1f:ec:33:56:31:0f:97:1b:08:
a3:11:7e:ed:d9:21:ab:8b:9a:a8:c5:5f:01:54:5c:
08:45:b1:fa:29:02:7a:90:2a:6c:0d:b3:4a:b2:f0:
b8:e8:7b:7e:96:cb:01:71:27:f6:c2:df:dd:21:e2:
b5:45:41:75:77:09:c7:6f:30:20:31:e5:2a:15:86:
a0:a3:03:2e:97:a4:10:57:7b:5e:1e:41:b4:96:ce:
d5:09:7a:e8:50:63:75:b2:4a:f3:e8:3f:36:4f:47:
c3:f0:9a:b9:26:49:4f:98:68:39:c7:5f:c0:ab:c4:
9a:cc:fa:ae:93:0d:e8:04:3b:60:f8:ab:7d:65:79:
59:d8:e7:97:1f:b5:30:1e:28:70:fb:19:60:6d:17:
49:6f:0a:0c:a5:1c:a3:cc:57:ae:cb:27:d3:34:83:
b5:d3:53:bf:76:a8:e0:62:d0:2d:17:af:3f:fb:87:
fa:33:e6:32:0e:91:58:4c:31:49:fd:b4:12:73:27:
9c:be:94:e3:ac:30:ad:8e:ec:9b:24:e5:05:53:dc:
2b:75:bd:b8:f0:be:2e:d0:8a:65:7d:2e:0f:79:ec:
e6:fd:02:31:f1:03:cd:d1:7f:66:93:2a:52:35:f9:
6b:a4:18:3c:0f:ca:24:c7:6d:d4:1b:fd:4b:51:76:
21:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:27:80:95:B7:59:62:62:41:53:2D:FE:AF:4E:75:C9:9E:C1:7B:67
X509v3 Authority Key Identifier:
keyid:AD:D9:20:79:94:BA:9C:7D:91:EA:7E:47:9F:EF:D1:B8:09:9F:62:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:73:c8:68:78:bc:58:1c:57:2d:c2:fa:01:42:69:5c:75:0c:
2b:02:07:ef:6d:df:d5:b0:21:45:fd:88:50:88:c8:d0:99:bb:
de:89:eb:25:e8:2d:1e:4c:51:9a:76:2a:33:75:89:8e:ce:35:
50:40:50:82:d4:24:36:0b:ae:ce:14:18:36:d8:04:fb:f1:56:
95:ca:9b:6d:7f:b1:8f:47:78:9c:18:3d:fb:78:84:b9:fc:c2:
0e:d9:f1:b5:05:af:25:ef:dd:36:a9:09:3f:7a:8d:9a:e5:6f:
a8:84:01:70:2b:09:b5:f3:90:af:7d:74:6e:35:60:31:51:cc:
cd:a1:8f:3d:f4:6e:9d:e6:78:91:26:8f:c8:19:14:39:b9:31:
20:d4:24:b7:7c:5a:8a:04:fa:a9:88:51:a6:b0:ac:ef:28:f6:
dc:a8:20:41:e5:f3:28:34:c0:6b:6c:fe:d8:03:94:97:23:47:
f1:f8:0c:90:62:63:99:4a:a3:21:82:b5:47:e2:af:9d:51:49:
9f:04:74:84:d4:83:71:1c:91:1d:08:3a:2c:c2:b9:89:9f:f7:
5e:67:50:41:88:ba:47:ac:58:db:8c:13:75:00:6c:f3:45:72:
ad:5c:2d:8e:eb:88:89:1e:e6:70:d2:fe:49:4e:08:6b:68:b9:
ff:64:c1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:01:54 2026 by rpki-client