Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
File: dPEFnCc8UO3PPc7fxYABUuyR26I.mft (raw, json)
Hash identifier: W/LNjkCYQ3H9kR9izCwL2DTBw+go1zei0s67ZRQAY5M=
Subject key identifier: 1E:CA:A9:AE:1D:FC:6C:BA:FC:98:98:12:D0:06:91:EF:94:19:25:0E
Authority key identifier: 74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
Certificate issuer: /CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Certificate serial: 019DA3AEE04613AB79D81CD4559A5B744F13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
Manifest number: 18C5
Signing time: Sun 19 Apr 2026 03:00:39 +0000
Manifest this update: Sun 19 Apr 2026 03:00:39 +0000
Manifest next update: Mon 20 Apr 2026 03:00:39 +0000
Files and hashes: 1: 4zHqkXwTdPpErUuwool8-zX-SB4.roa (hash: LHnM5v5Sz1IzlHeFp2joapwPeszU3VAj2kHXfdYdwu4=)
2: dPEFnCc8UO3PPc7fxYABUuyR26I.crl (hash: 6Pvitwn6rA15bV9hDXBgoX0Q96KJkBQfy6LxPbhljN0=)
3: f_myMJMSIIWO9m-PmHiygg0XXSs.roa (hash: 3LE3GccOE6KqVlj9DZ+EFPId6e66LFjW7NsGN3ZdmPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:e0:46:13:ab:79:d8:1c:d4:55:9a:5b:74:4f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Validity
Not Before: Apr 19 03:00:39 2026 GMT
Not After : Apr 20 03:00:39 2026 GMT
Subject: CN=1ecaa9ae1dfc6cbafc989812d00691ef9419250e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4d:8f:e0:4d:af:ef:29:40:e9:75:c3:d8:5a:
c6:3f:56:c3:c8:52:65:e7:fe:5b:78:68:b5:86:73:
81:45:ff:f1:55:23:21:e9:74:cf:e9:1b:ac:e3:6a:
5f:70:65:5b:06:62:e9:f3:a9:90:e7:c9:97:95:da:
44:37:66:67:04:55:7a:79:ec:c1:38:0b:4c:c1:a0:
c9:16:08:cc:86:6f:ed:7a:3c:16:53:1a:f0:79:49:
bc:6f:c2:5c:13:21:70:05:f0:cf:42:52:a7:99:2d:
67:b5:7b:54:1b:31:92:e3:22:81:8d:4b:a4:b2:f0:
4a:6d:46:bc:9f:6e:3b:ac:f0:62:fc:ac:4b:70:97:
0c:4f:ea:08:48:9c:ef:ae:ae:cd:36:7f:33:c2:0b:
2e:ee:1d:60:fa:81:80:2e:6b:2e:61:bd:ed:af:8b:
7b:ef:e0:1c:60:01:e9:89:af:04:b1:97:50:7e:c8:
c0:5e:e7:67:c2:8a:05:41:cb:22:70:ad:b0:b6:af:
9a:b3:81:de:45:e3:b9:3e:0d:4d:9c:ff:fe:6f:5d:
14:88:3f:7d:65:af:59:32:f8:cc:2a:05:ec:8d:5c:
22:5b:6d:48:f4:a4:b1:36:46:2e:ca:e4:d8:da:59:
d8:7c:9a:74:04:b0:96:49:13:b5:2d:fe:31:8a:ca:
cb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CA:A9:AE:1D:FC:6C:BA:FC:98:98:12:D0:06:91:EF:94:19:25:0E
X509v3 Authority Key Identifier:
keyid:74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:6d:73:cb:e3:23:6d:de:09:dc:b4:e1:57:54:09:ed:6b:6c:
2f:6c:20:64:f7:5e:c9:e9:b1:4a:b7:2c:75:0c:a0:ad:cc:b8:
78:70:0c:91:73:6b:c5:90:a8:f1:ec:e1:84:4e:75:57:af:ea:
cb:4f:2e:83:34:9d:d7:50:48:85:19:6a:5d:33:97:bf:72:47:
05:34:65:94:b8:79:ac:cd:28:b1:a2:0b:64:f8:68:05:d4:04:
3e:8f:41:0a:96:f8:c2:ab:65:31:cb:18:1d:04:5a:f8:3e:12:
00:ce:3d:16:3c:8f:08:cf:03:d8:be:9c:ea:a7:bf:c1:bd:bb:
39:35:a5:f9:84:04:b0:1c:f0:55:f0:c7:39:e5:f4:0e:80:eb:
63:80:95:a5:fb:1d:7b:74:d6:20:8d:4d:5d:aa:4c:39:d9:ba:
77:6f:c8:bf:0a:48:93:65:78:89:12:7c:63:ca:3c:2f:cf:c8:
89:ea:bc:da:14:dc:6a:e2:54:dc:f7:76:08:6f:9f:b1:ae:23:
93:77:7b:6c:81:f1:cf:cb:4c:a0:55:fd:26:08:d3:26:47:c7:
e1:8e:28:f2:5e:87:f7:2b:fa:57:e4:de:e0:20:43:0d:66:89:
12:f2:54:10:6c:04:d8:9d:84:0f:dd:f6:b2:04:a9:38:36:68:
9d:e6:06:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:27:45 2026 by rpki-client