Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft
File: dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft (raw, json)
Hash identifier: zRMIFACtMC36l/PGAXyU1O/Z8MilF9sxNRBjSxshpg0=
Subject key identifier: 3B:D9:3D:6D:DC:96:AF:5B:8C:2C:7A:32:DC:AC:1F:02:74:D9:75:AF
Authority key identifier: 74:5D:BA:56:CF:1F:FC:2C:FC:1D:05:F4:FA:83:31:17:EF:D7:C7:8A
Certificate issuer: /CN=745dba56cf1ffc2cfc1d05f4fa833117efd7c78a
Certificate serial: 019D9A3E8E47EC212EA58D18C88175088BB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft
Manifest number: 0857
Signing time: Fri 17 Apr 2026 07:01:23 +0000
Manifest this update: Fri 17 Apr 2026 07:01:23 +0000
Manifest next update: Sat 18 Apr 2026 07:01:23 +0000
Files and hashes: 1: 0PbPEQsG-kj7SoehWuyEm8KHUSs.roa (hash: PSFO3oJW97UfWkTdnQLs8C6Bk6abk9LmfHzrgXAaZBA=)
2: dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.crl (hash: Ec0zHuSb02vCfZMqVoOkKCKq0/vJQFUyiuB0YIf3dX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:8e:47:ec:21:2e:a5:8d:18:c8:81:75:08:8b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745dba56cf1ffc2cfc1d05f4fa833117efd7c78a
Validity
Not Before: Apr 17 07:01:23 2026 GMT
Not After : Apr 18 07:01:23 2026 GMT
Subject: CN=3bd93d6ddc96af5b8c2c7a32dcac1f0274d975af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:90:ae:a8:a2:0f:17:37:63:81:01:4c:6f:d9:
f9:ce:3b:d6:5a:a9:5e:ce:3e:f6:34:c3:af:74:88:
9b:9c:d1:e1:e6:f4:22:ea:54:69:40:0e:d1:a9:21:
db:1c:84:2f:07:44:c3:4e:c2:40:d1:50:eb:c5:5b:
57:a8:eb:e6:29:78:c3:d9:68:73:c6:45:64:37:65:
85:b1:8c:48:66:73:d1:41:e2:0d:2c:0c:1b:05:e2:
ac:b7:bc:0e:96:67:af:ce:b5:c0:29:ac:2c:91:57:
87:ee:b0:9e:95:c8:56:55:2c:d0:c4:f0:7e:fb:46:
d4:89:ce:60:fc:a8:8e:5a:2f:44:2e:43:09:98:05:
48:77:c0:63:6b:61:fe:ba:f7:a7:db:0a:de:a1:07:
40:31:74:11:e7:9d:e0:01:23:10:fa:8e:7a:da:41:
5b:11:e3:28:8a:38:36:66:70:bc:91:7a:fe:30:bd:
f4:49:a8:70:1b:ae:b5:dd:5e:4f:ba:a4:3f:91:19:
ca:27:a1:aa:13:c8:c2:86:cd:42:e2:a5:fb:3e:51:
f4:94:43:04:92:2d:9b:63:47:c7:24:f4:50:8d:72:
85:1a:55:72:8b:3e:b4:10:99:17:cb:56:7e:aa:4b:
b3:c1:52:48:3d:87:99:1e:79:54:8e:2a:b1:57:4d:
24:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D9:3D:6D:DC:96:AF:5B:8C:2C:7A:32:DC:AC:1F:02:74:D9:75:AF
X509v3 Authority Key Identifier:
keyid:74:5D:BA:56:CF:1F:FC:2C:FC:1D:05:F4:FA:83:31:17:EF:D7:C7:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:09:3a:b7:2b:10:8c:b4:db:a9:b2:40:b7:91:2e:94:7a:4d:
b6:de:d4:88:27:b8:95:24:60:a2:d4:97:55:6f:1a:0e:ad:fe:
4c:0b:60:a8:72:bc:63:30:c7:8f:bc:b5:ee:6c:d5:fd:8f:b5:
6f:bb:c4:07:49:1e:4d:87:0e:fc:15:c9:bd:71:d0:d5:9d:51:
14:bd:84:fa:26:f2:23:88:ac:8d:63:41:18:70:a7:9b:7a:51:
1d:87:bd:93:0a:cb:14:7b:e6:fc:22:04:6b:e4:84:49:01:94:
23:21:e8:29:b7:22:98:04:00:e2:f2:46:3e:54:0b:82:f2:db:
c1:28:b6:1b:a8:89:18:76:a5:5c:c0:d3:dc:ca:1a:c4:bb:e7:
30:7a:05:11:be:40:8e:9c:60:e9:1d:d1:ba:3b:11:ba:e0:ba:
cb:0c:84:90:7b:82:01:dc:f5:4e:c3:d7:e7:c6:9d:16:1b:8b:
bd:f2:cd:00:3a:a9:d6:f0:c5:29:e6:ca:71:e8:fd:05:05:f4:
64:52:14:8b:62:69:d5:a2:d1:c9:11:96:50:c2:6d:03:02:a5:
af:88:83:34:3f:cc:70:67:53:5e:ab:5d:37:ca:04:0f:c7:5b:
e9:05:c3:7a:51:0c:42:a8:38:43:28:26:6c:3e:1e:48:f0:ef:
e5:ab:59:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:27:44 2026 by rpki-client