Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
File: dE4TPKDK2fH9FhWAWQspbbIjCM4.mft (raw, json)
Hash identifier: Uq0GRYes4z5d9REwI7x+8bhHgipRq3A0CJ1SGQvG71M=
Subject key identifier: 5C:FD:54:69:CC:59:0C:77:1A:6C:61:B0:D0:9F:D5:0F:F6:45:35:B7
Authority key identifier: 74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
Certificate issuer: /CN=744e133ca0cad9f1fd161580590b296db22308ce
Certificate serial: 019DA30AB30FF3306878FDD4E77B75CA79D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
Manifest number: 0C81
Signing time: Sun 19 Apr 2026 00:01:20 +0000
Manifest this update: Sun 19 Apr 2026 00:01:20 +0000
Manifest next update: Mon 20 Apr 2026 00:01:20 +0000
Files and hashes: 1: CWBx_YaW55wp0Q8nHPmUDJfmm9g.asa (hash: sICMwCqCa7TLjDMZRJ5VqSQf7cfIQN96H4gFU0ZqRjs=)
2: a3t44Injkb3R_GXSuc0dS5CiLrY.roa (hash: zbUvHz7MU2Z+aJkIb7Yi+6/dp3AtOWPuD0S1MFlgedM=)
3: dE4TPKDK2fH9FhWAWQspbbIjCM4.crl (hash: FFHS/4/eBXSGFrf7URE0OZrWGe+lygAi2bPxJPKNJ3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:b3:0f:f3:30:68:78:fd:d4:e7:7b:75:ca:79:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744e133ca0cad9f1fd161580590b296db22308ce
Validity
Not Before: Apr 19 00:01:20 2026 GMT
Not After : Apr 20 00:01:20 2026 GMT
Subject: CN=5cfd5469cc590c771a6c61b0d09fd50ff64535b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d2:14:4e:7d:e1:74:ce:3d:b5:0e:67:98:33:
b1:c5:bc:a7:9c:b4:83:b2:f9:39:30:20:ed:b2:da:
7c:91:e2:2c:42:29:9d:92:a5:1c:1d:67:1b:a7:13:
f3:d5:63:d4:ed:37:15:1d:69:5e:47:8e:cc:6b:6c:
a2:9e:2c:a1:ab:96:9e:91:cc:7a:c3:6e:40:f7:54:
db:c6:7a:ef:e5:0d:53:3c:64:81:23:c7:1d:18:b4:
77:de:8f:56:66:f2:41:6f:90:ac:a6:44:ac:c2:02:
9c:da:71:bd:2d:d6:ca:18:23:f7:31:51:18:0d:14:
94:33:1c:0e:d6:29:25:4e:ac:07:7b:f2:50:95:3d:
34:55:8d:5d:32:69:01:94:a8:6c:04:8e:5d:7f:4b:
3d:72:9a:5f:43:43:aa:4a:fd:9c:df:e8:a7:f0:e8:
06:27:80:22:c4:88:c7:59:48:b3:08:5c:9b:30:1a:
0f:94:0e:c9:19:03:fa:74:e5:59:51:fd:1b:54:1a:
cc:a6:19:40:02:e1:43:3f:03:f1:91:29:8e:cb:20:
e5:ed:b7:fe:7b:77:a3:1c:0b:2a:79:b2:ab:18:15:
59:eb:44:e6:5b:e7:b9:b4:96:39:2e:ae:aa:32:11:
26:60:c5:25:57:e2:6e:e6:82:00:0d:56:46:de:ed:
06:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FD:54:69:CC:59:0C:77:1A:6C:61:B0:D0:9F:D5:0F:F6:45:35:B7
X509v3 Authority Key Identifier:
keyid:74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a0:b8:09:62:61:37:c4:16:c1:53:07:6b:57:85:ee:ba:a2:
48:6d:3b:d0:e7:c2:fb:24:6f:18:1a:1e:e2:cf:3e:05:fc:63:
ca:45:60:7d:b1:56:ba:b9:2c:ca:f2:b8:f0:56:91:87:9e:19:
03:7a:ba:0d:9d:00:48:ed:dc:84:90:ad:63:52:0e:df:fb:57:
b8:81:a7:3e:11:49:87:d8:6a:7a:a3:73:8e:8f:0e:3a:34:eb:
0b:3f:82:52:cc:01:80:3f:3a:bd:3a:f2:9d:9b:b7:17:db:4c:
4b:44:f3:d6:62:3b:c1:8b:fb:ea:cd:73:3a:70:e9:3a:21:dc:
36:c4:be:2e:2d:b4:8b:28:f7:43:3c:22:db:95:26:b7:05:b6:
e5:ff:c4:e9:7a:db:85:9e:bf:37:4c:a9:e7:02:04:51:9c:ff:
c8:47:d7:f1:74:e0:c5:26:79:20:44:46:62:c4:b4:e3:9d:9e:
46:78:8b:a3:e8:75:8c:61:30:0b:72:0e:68:0d:57:e5:84:23:
bf:d8:6b:ed:d2:5b:f9:ae:40:91:30:03:4d:7b:c4:80:95:fa:
c6:71:4c:8d:e8:f8:02:24:19:5a:73:72:7f:f2:9f:1f:7b:c8:
98:fc:b2:45:6f:10:02:01:2b:9d:e0:c0:0d:52:86:cf:20:6f:
cb:5b:9c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:42:43 2026 by rpki-client