Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
File: dxBykg2MmitA6zoEXx8qbjNKRJY.mft (raw, json)
Hash identifier: IFTZbinq4ofA7Wb5NdX2wdu+l2543f1iDP3fgO3E3FM=
Subject key identifier: 59:FA:60:36:B9:1E:88:C4:DA:52:6D:40:F3:40:39:1B:F8:26:B4:4F
Authority key identifier: 77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
Certificate issuer: /CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Certificate serial: 019DA29D1E085DA5D8A72BE035F67DABDD16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
Manifest number: 18C9
Signing time: Sat 18 Apr 2026 22:01:38 +0000
Manifest this update: Sat 18 Apr 2026 22:01:38 +0000
Manifest next update: Sun 19 Apr 2026 22:01:38 +0000
Files and hashes: 1: dxBykg2MmitA6zoEXx8qbjNKRJY.crl (hash: NCNyKSSYijTGQmNB1NOwNGV0P8N7INNQl8Yy61V6hIw=)
2: qMa40C2bwbsuAhlKHVj7zBev3Sk.roa (hash: Q1yI4h86YGsQR3DwWZlfSBoYmM0cIR/AXm0wW8+aF5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 17:59:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:9d:1e:08:5d:a5:d8:a7:2b:e0:35:f6:7d:ab:dd:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Validity
Not Before: Apr 18 22:01:38 2026 GMT
Not After : Apr 19 22:01:38 2026 GMT
Subject: CN=59fa6036b91e88c4da526d40f340391bf826b44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ba:c5:60:27:f6:60:e6:46:fa:78:7c:9b:9a:
7b:ad:96:70:04:1a:6d:1f:d0:cb:25:66:21:02:d6:
d5:05:3a:69:ef:03:24:4e:bd:da:8e:91:99:00:dc:
58:80:11:21:5a:d3:89:8c:0e:4a:34:8b:d2:f3:ee:
d0:9b:e1:25:65:c8:06:65:20:50:7a:51:d4:eb:1d:
17:46:52:72:f4:bb:4f:55:54:14:96:a8:5c:4c:43:
32:e4:44:9c:25:e8:4f:e8:f3:da:67:af:72:df:44:
0f:12:0c:0b:99:3f:2b:91:18:d9:a5:a6:96:9f:13:
a6:54:41:33:81:d6:9a:8e:3a:93:f3:5f:be:76:8a:
db:27:fe:3f:cb:5f:e0:95:fd:c8:a4:f7:fb:95:a5:
d9:c7:78:cc:ed:8a:bf:52:df:95:6c:6f:ed:f7:9c:
b1:de:3e:58:6f:ed:a1:07:7a:96:2b:03:d2:25:11:
84:7e:96:7c:65:51:3b:17:72:a1:97:ed:b5:89:d7:
57:6d:c1:12:05:80:ff:e3:21:ab:08:70:4d:38:d9:
71:5f:83:66:ef:b6:62:24:de:94:cf:c9:40:a4:92:
f1:2d:15:fa:6a:a7:eb:1b:1d:68:3a:c4:29:57:d4:
06:0b:32:55:1b:fa:31:ef:06:83:08:54:6f:b8:c8:
99:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FA:60:36:B9:1E:88:C4:DA:52:6D:40:F3:40:39:1B:F8:26:B4:4F
X509v3 Authority Key Identifier:
keyid:77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:db:9d:a3:af:6e:93:15:38:55:fc:e6:b0:da:59:58:ea:33:
eb:d2:c2:c9:d2:a8:57:3c:50:4f:fa:7c:50:da:93:c0:30:bc:
0a:6a:22:14:ea:e5:6b:ee:a2:e5:8e:dc:4d:10:d6:1a:d9:6b:
16:e5:cf:f8:65:56:ac:2f:c0:2f:e2:dc:b9:b7:dd:58:c8:39:
8c:a6:79:3c:f1:db:bc:68:22:33:eb:9d:f3:73:8d:54:d5:45:
64:cf:f4:cd:52:1c:41:06:49:f5:f8:a8:fc:33:04:e2:61:3b:
24:15:89:c6:2a:89:2f:af:8e:d2:50:ee:6a:92:3d:33:42:51:
12:20:82:b1:61:9a:bb:5c:14:6b:2a:80:34:42:f5:0a:26:4c:
21:5f:3b:f6:9a:f5:38:aa:d5:61:7c:3c:0e:68:d7:aa:af:84:
6a:ae:1c:39:6e:5d:35:9c:92:8e:47:ff:ee:72:f7:f0:9d:cf:
cc:26:f5:6b:e2:a0:8a:53:ba:59:3e:a1:d7:be:9e:ce:d7:c4:
75:e1:f9:4c:3c:23:45:93:7f:62:d4:af:1b:54:66:a2:95:b3:
03:a8:13:f6:2d:3d:85:45:b3:c2:78:12:d4:6c:71:1c:d1:f3:
aa:9e:2c:4f:15:27:c5:89:45:1f:52:42:47:f8:49:ae:5b:0d:
02:5f:b2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 00:56:39 2026 by rpki-client