Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
File: DNpch0NU2Dgm5DwlNbduINW2GwU.mft (raw, json)
Hash identifier: xshvx4XrekTwQhjTVC/SKO+Hj21OeD7LxhL41CjrUXI=
Subject key identifier: EA:AF:5D:6C:FF:21:9D:0A:FA:54:7F:D4:0E:EE:B0:FF:8F:AC:07:F7
Authority key identifier: 0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
Certificate issuer: /CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Certificate serial: 019DD05145547ABAAD812FA781043BD156AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
Manifest number: 18E9
Signing time: Mon 27 Apr 2026 19:01:20 +0000
Manifest this update: Mon 27 Apr 2026 19:01:20 +0000
Manifest next update: Tue 28 Apr 2026 19:01:20 +0000
Files and hashes: 1: DNpch0NU2Dgm5DwlNbduINW2GwU.crl (hash: 52XllzaxMFpxuDfhb7o7TD4mNwYPVjPjsxKzOyJakew=)
2: u5v1NIr7zCznyDKOfZW5zSM1TZI.roa (hash: 0y7T3YJCDc+2Cz1VFqoKYSn2dXOumotGXs+vkOowx74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:51:45:54:7a:ba:ad:81:2f:a7:81:04:3b:d1:56:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Validity
Not Before: Apr 27 19:01:20 2026 GMT
Not After : Apr 28 19:01:20 2026 GMT
Subject: CN=eaaf5d6cff219d0afa547fd40eeeb0ff8fac07f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f5:1d:56:fd:64:b5:59:1a:a2:41:e5:53:40:
07:ec:08:6b:3c:72:c8:13:94:72:76:92:f9:9d:1f:
d5:40:21:f9:d3:26:0b:29:22:af:97:d6:6f:fc:c9:
36:05:09:1f:e3:63:f1:8a:da:be:0d:10:27:aa:95:
63:0a:3e:9b:bc:9d:e6:2f:e2:37:5a:c5:67:d5:64:
0a:a1:c0:18:b4:ed:27:e6:80:d8:90:e4:79:ca:1d:
35:d5:b8:46:6e:aa:5f:72:d2:52:75:17:87:77:8d:
ac:46:a8:be:77:49:a3:d6:9e:c9:1c:d1:71:68:d8:
ae:3a:2f:b4:64:82:8c:33:e0:fa:50:49:56:38:83:
60:f1:b7:c7:71:d7:36:a3:9d:f5:3b:18:c5:51:b6:
57:01:74:94:9f:bb:90:38:98:1a:60:37:14:9b:8c:
fe:f1:f9:d5:68:25:63:9f:48:15:a9:c3:22:d9:55:
56:48:7f:63:ef:d5:2d:30:a3:37:2e:96:32:e7:ee:
98:6b:5b:3e:0a:22:98:37:a8:a9:cf:ff:63:80:3c:
82:30:38:d6:fc:13:4d:55:18:7b:ea:14:81:03:f3:
c6:61:e9:6e:77:d9:39:51:ef:3f:0d:70:c6:3c:f0:
3a:8c:35:a5:c6:90:59:6c:8a:03:8f:b7:ef:37:73:
19:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AF:5D:6C:FF:21:9D:0A:FA:54:7F:D4:0E:EE:B0:FF:8F:AC:07:F7
X509v3 Authority Key Identifier:
keyid:0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:9e:6e:5b:60:cd:a0:66:27:50:f0:b6:75:53:4c:71:01:68:
ee:6d:07:e3:5d:b7:86:e5:35:45:19:b7:e9:2a:90:f9:7e:d2:
61:28:51:2d:73:77:2f:b5:73:a2:8f:68:69:8e:ec:27:72:c0:
95:ec:f9:2c:40:b2:f0:6d:f3:db:d7:30:de:26:84:e8:86:2c:
da:45:43:f0:0a:c6:39:19:c0:39:41:9b:66:1b:58:c1:3f:08:
83:92:8d:2b:96:08:67:76:c9:7e:28:df:8d:ed:f0:db:05:d3:
71:5e:e1:2d:6c:b1:e6:ff:84:6c:e6:6b:c8:b9:86:71:27:37:
77:6c:20:2e:77:f7:23:bb:95:f4:ff:ba:d4:13:19:af:49:7d:
6f:90:ca:cd:d5:aa:d5:c8:af:71:a2:5a:8d:34:00:68:e4:61:
41:ba:dd:be:9f:bf:15:ed:3e:99:96:58:0e:a8:e1:b1:43:6b:
97:81:23:34:3c:cd:12:9e:7e:3b:be:20:11:2d:5d:e7:74:67:
2a:fd:c6:be:1e:a9:fe:29:1c:9c:d1:64:2e:c5:b8:d6:4a:5f:
ca:65:99:89:b7:38:f4:9c:d3:2a:11:81:96:c6:27:5c:f9:05:
2e:62:b6:32:bd:78:da:f8:48:11:79:75:49:4f:f4:c9:b1:fc:
8e:cc:bb:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:43:54 2026 by rpki-client