Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
File: dX-f3qNQp2a7mMYE07nCeRZzIgk.mft (raw, json)
Hash identifier: O0o1tdo7eTMd7TdnfGROWO1KX3orskr5sMRLaYuvZ2o=
Subject key identifier: B4:EC:7D:23:3D:95:88:69:7F:56:8B:E5:1C:AD:19:D1:9D:68:96:9D
Authority key identifier: 75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
Certificate issuer: /CN=757f9fdea350a766bb98c604d3b9c27916732209
Certificate serial: 019DB1D897AC0AF23CC78B0CFCEFC6746487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
Manifest number: 18D1
Signing time: Tue 21 Apr 2026 21:00:54 +0000
Manifest this update: Tue 21 Apr 2026 21:00:54 +0000
Manifest next update: Wed 22 Apr 2026 21:00:54 +0000
Files and hashes: 1: dX-f3qNQp2a7mMYE07nCeRZzIgk.crl (hash: hInvVJGqIKFtHjRLWQYuOo3fJHrrdxCe3tcVun2wkXQ=)
2: wBzUUS1esVzgp7-S8WP1zjKAIpw.roa (hash: UgXBz+OKL1MAmpi06fp5fY0KFQ1LRcUZSGp9CfyxDlU=)
3: wjNWOCuY2E1_FvlqggQMJz_Utqw.roa (hash: BberhHSGLHh2AX9W6raGWWWl/q21AJDPsEIrCo+NFbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 14:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:d8:97:ac:0a:f2:3c:c7:8b:0c:fc:ef:c6:74:64:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757f9fdea350a766bb98c604d3b9c27916732209
Validity
Not Before: Apr 21 21:00:54 2026 GMT
Not After : Apr 22 21:00:54 2026 GMT
Subject: CN=b4ec7d233d9588697f568be51cad19d19d68969d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1d:f0:52:b3:be:99:85:ac:bf:f7:a7:44:b5:
f9:0f:28:57:65:a6:0c:37:e1:6e:a9:59:87:3d:53:
6c:2d:67:ae:3a:76:c6:04:8f:02:05:29:85:a5:a3:
73:92:06:cc:2a:3c:76:c7:fa:89:ea:08:42:a3:24:
63:36:80:24:ab:15:7e:19:b0:f8:87:6b:48:51:dd:
0d:8f:7d:8c:57:a9:ca:70:6c:53:d9:09:36:98:5e:
d7:3a:1a:51:5a:67:80:0f:bc:2a:e2:ed:18:22:80:
89:21:28:94:32:7a:18:79:b9:7c:25:ae:87:bb:d4:
ca:fe:79:84:3f:19:55:ac:08:a3:dc:98:3e:51:7c:
d3:1b:2f:2a:82:e5:96:8d:31:e8:e8:ef:5e:08:43:
e7:35:f9:10:1b:5e:d7:f6:91:8f:fd:fa:23:9e:ab:
3b:cd:6a:d1:d1:eb:d8:ea:5b:bb:dd:9b:e3:16:8e:
55:3f:4f:36:df:61:97:96:31:27:b3:b5:ee:cf:14:
47:10:c6:56:f5:3d:19:b3:c0:5c:af:bb:59:d3:8e:
81:94:a7:ed:ed:08:34:70:c4:9b:7c:4d:0f:af:3c:
bb:79:cd:f4:1f:fa:70:f0:c5:ca:e9:be:1e:35:a6:
f7:6b:db:12:92:95:34:2e:f6:d1:6c:7d:f8:39:22:
52:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:EC:7D:23:3D:95:88:69:7F:56:8B:E5:1C:AD:19:D1:9D:68:96:9D
X509v3 Authority Key Identifier:
keyid:75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:38:a7:ea:de:35:b6:c1:fa:9c:6e:0b:a7:d1:0a:3e:36:c3:
6f:3f:ae:ea:93:86:c0:77:f4:94:2c:4f:49:c2:b1:9f:4b:43:
d0:28:cd:55:a9:a2:c0:0c:67:8f:1a:35:e2:59:0f:7c:4f:3f:
e1:d2:bb:b4:95:7f:36:a9:e6:82:ba:81:b4:14:a0:37:52:3f:
aa:75:e4:0a:ff:9f:bd:8b:f3:10:f6:30:bc:16:b2:a8:41:37:
e9:93:f9:a5:8f:e0:5f:6e:a4:e2:9c:60:1c:64:98:41:2d:02:
9b:cb:a5:88:45:09:d9:fc:0c:a0:94:46:22:cc:ee:58:b1:1e:
b4:ef:c0:e4:af:53:46:3f:10:f2:ec:a1:37:e9:e4:f9:a9:03:
0f:f4:1b:33:30:02:d4:fb:57:60:5e:6f:0a:95:6f:a5:bd:b4:
84:ee:a9:36:2f:51:ef:17:ba:46:8a:d0:c4:d5:cb:71:5b:64:
f4:bf:11:08:83:36:96:6c:33:63:ed:a5:b3:50:99:54:58:5a:
71:1b:bf:d6:70:d6:69:86:9b:b9:f1:0d:31:6e:ca:da:2b:25:
e6:f0:2b:b0:10:d4:b8:e7:62:19:2b:b0:1e:e9:19:f1:ff:bc:
82:4f:15:04:b5:b9:83:6d:b9:35:09:3c:9d:c7:cc:c0:28:56:
be:39:d6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 00:19:16 2026 by rpki-client