Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
File: dv4wVehykAAOMof3q1iDgCpapto.mft (raw, json)
Hash identifier: vegwdghin1i5mkSm8g4M8fFjLFNbeN/2o0qdFy8bLWk=
Subject key identifier: AB:35:D1:C2:5B:52:E6:C4:7F:41:AB:2F:95:B5:1E:29:43:F2:5E:07
Authority key identifier: 76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA
Certificate issuer: /CN=76fe3055e87290000e3287f7ab5883802a5aa6da
Certificate serial: 019DCDF4DC041B0AD547C4B2CD39130D5FC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
Manifest number: 0C05
Signing time: Mon 27 Apr 2026 08:01:09 +0000
Manifest this update: Mon 27 Apr 2026 08:01:09 +0000
Manifest next update: Tue 28 Apr 2026 08:01:09 +0000
Files and hashes: 1: 0ySGeIDrXtZFxjKASUMVzdc0Dlc.roa (hash: l2+MJdgyr6VqnECFLRIqzXDoWHq/3WTx2ApaEcFXd9c=)
2: 2MIYePrvuVOPunZ0cCU587P-UNo.roa (hash: 87FdzdFETynQoJd/9d3TWFG9LHhJseAqTkXpKmEANyg=)
3: dv4wVehykAAOMof3q1iDgCpapto.crl (hash: dHd15dCYWAjz4ii/cORjacRu9cLsd+XhNm2onhNBNr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:f4:dc:04:1b:0a:d5:47:c4:b2:cd:39:13:0d:5f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76fe3055e87290000e3287f7ab5883802a5aa6da
Validity
Not Before: Apr 27 08:01:09 2026 GMT
Not After : Apr 28 08:01:09 2026 GMT
Subject: CN=ab35d1c25b52e6c47f41ab2f95b51e2943f25e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:70:88:0c:6a:ee:d0:dd:27:4e:2b:88:a9:96:
1d:6b:03:7a:c2:53:3a:f7:45:2f:fc:cc:cb:b0:07:
8f:16:d1:4d:53:68:9d:70:74:b4:c5:e1:af:d2:22:
44:a6:97:e2:7f:c2:9a:6b:1d:3d:47:ec:d0:f6:e6:
cb:d3:2f:01:45:3d:1b:00:c6:69:7b:e0:3a:ce:ec:
c0:0d:1f:ad:88:88:b5:0a:e7:db:29:1a:dd:03:47:
87:dd:2e:6b:0f:08:8e:23:41:00:84:7b:b3:4f:2d:
00:c8:da:5c:73:c4:61:fa:bc:95:ba:e3:05:ac:92:
be:a0:25:6e:5f:5e:7d:91:62:cd:2a:64:53:3e:79:
65:7e:44:00:33:cb:6a:07:35:50:a1:fc:c9:62:bc:
bf:34:6a:2c:f0:5e:d4:c9:ad:7a:b8:ce:95:29:f9:
91:55:1e:a5:27:ab:f4:e8:e7:43:22:10:8a:41:5e:
13:26:48:66:70:5f:de:49:e0:40:da:bd:a3:50:85:
b7:38:74:01:ba:3d:4d:89:03:fd:1d:66:97:4b:cb:
02:55:b5:32:5e:8a:6d:41:d6:60:0a:b8:15:fc:4f:
a1:97:2e:ab:56:50:8a:0b:7d:f6:9c:a1:e2:7d:84:
bf:ab:08:20:9e:bd:cb:05:8c:d2:06:e0:c3:fc:a7:
08:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:35:D1:C2:5B:52:E6:C4:7F:41:AB:2F:95:B5:1E:29:43:F2:5E:07
X509v3 Authority Key Identifier:
keyid:76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:f8:d3:fe:04:1b:8f:44:11:d8:6f:f7:08:bc:1f:47:7e:02:
29:82:3e:e5:5e:1d:94:db:df:7b:0c:16:ca:b8:1f:ba:c1:72:
da:45:de:38:42:27:f0:4d:d1:52:a8:ea:72:f9:7a:b5:b8:e1:
cc:2d:1d:ea:70:c0:a5:eb:32:93:d3:18:b3:c3:6d:bf:3c:84:
0e:2f:69:cc:5b:e9:af:82:dd:77:0d:7a:62:7f:44:54:28:97:
17:8e:21:5e:13:a0:c2:37:4f:c1:70:10:f4:64:80:5a:ac:0a:
f6:3b:63:22:13:ba:9e:1a:e9:b3:e9:a3:c4:53:0c:1c:de:b0:
55:d6:e0:b3:b3:5d:ba:8c:8f:43:cb:1e:95:5c:a8:43:2e:00:
60:c5:28:cb:40:97:21:d8:19:d2:95:b3:ad:95:15:91:61:1f:
de:e2:3b:06:aa:db:7e:7b:21:fe:c9:c6:63:a2:c3:25:69:ea:
78:f0:cc:46:b1:56:72:2d:32:92:bc:d9:61:c0:53:3e:ef:db:
a9:ba:55:8b:ea:aa:9d:5c:13:06:d7:ac:4b:36:ab:80:af:34:
f4:a7:22:46:78:a2:64:1f:6f:b2:8c:0b:13:d1:20:96:26:a7:
58:d0:6e:61:b9:31:72:fd:f9:53:ff:14:67:36:56:d5:99:5a:
5d:e7:ef:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:53:53 2026 by rpki-client