Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.mft
File: DhcO6FnpH0lz3kpXKxutLzpdGCU.mft (raw, json)
Hash identifier: KrHcy/Ki10YObfZCJMbyZK2A7jcdCbnWb4nSY8F5lvQ=
Subject key identifier: F5:BA:0B:05:A3:EF:F5:86:3C:0A:7D:8D:49:06:14:C6:47:A0:FE:BE
Authority key identifier: 0E:17:0E:E8:59:E9:1F:49:73:DE:4A:57:2B:1B:AD:2F:3A:5D:18:25
Certificate issuer: /CN=0e170ee859e91f4973de4a572b1bad2f3a5d1825
Certificate serial: 019DCE62DB8F4F596F3EC2B8BC23B16DC365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DhcO6FnpH0lz3kpXKxutLzpdGCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.mft
Manifest number: 18DD
Signing time: Mon 27 Apr 2026 10:01:18 +0000
Manifest this update: Mon 27 Apr 2026 10:01:18 +0000
Manifest next update: Tue 28 Apr 2026 10:01:18 +0000
Files and hashes: 1: DhcO6FnpH0lz3kpXKxutLzpdGCU.crl (hash: q4Nyiz9oGG7QViHh0EziZ4KvazhjKHG1j1o8nJXYAXI=)
2: dI860G5CcZzWUW-QRPRmqWGb4fY.roa (hash: xn3G/ZcwlpPlA7T3BoJ7J8XVqbOCLHLfQJh83fXIfa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DhcO6FnpH0lz3kpXKxutLzpdGCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:62:db:8f:4f:59:6f:3e:c2:b8:bc:23:b1:6d:c3:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e170ee859e91f4973de4a572b1bad2f3a5d1825
Validity
Not Before: Apr 27 10:01:18 2026 GMT
Not After : Apr 28 10:01:18 2026 GMT
Subject: CN=f5ba0b05a3eff5863c0a7d8d490614c647a0febe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a1:67:bf:54:51:3f:dd:34:1d:f9:1f:e7:50:
03:cc:2c:3f:42:6c:26:ca:17:fa:9d:5f:4d:19:25:
27:9a:bf:1b:6c:06:40:4b:a7:b3:b5:fc:ae:77:21:
39:e4:95:93:5e:28:d1:64:35:bb:02:d6:79:ad:3c:
82:11:fc:2e:77:17:ad:cf:4a:2d:26:71:9c:89:9f:
3c:79:f5:4c:af:30:da:93:c1:bf:f2:00:74:00:48:
a3:8a:25:33:4e:d5:b2:8d:c2:52:a9:ee:22:a1:b4:
12:0e:13:25:ea:94:a2:95:2d:89:31:54:c2:2d:14:
d0:f8:4c:52:c5:20:b0:09:64:cc:49:c6:48:bc:f5:
2a:16:4f:52:84:e3:d9:3b:87:5b:4e:0d:8a:d7:6f:
92:a5:a4:4d:d3:07:dc:88:00:fd:c7:63:92:a6:91:
1c:a2:b3:5e:e6:76:b9:9b:ba:22:53:a2:65:d1:50:
59:6e:3a:ce:a2:9c:2e:6d:66:97:6e:60:10:6c:f9:
ce:db:c1:09:fb:4f:23:a7:f2:1e:59:ca:b2:ee:3e:
25:ab:aa:c8:99:10:3a:22:df:72:35:c4:bd:79:de:
60:67:e5:dc:88:37:30:25:6c:a6:f5:1d:75:d1:63:
ae:3a:cb:4f:6c:3a:26:32:50:27:81:8d:23:f5:af:
6e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BA:0B:05:A3:EF:F5:86:3C:0A:7D:8D:49:06:14:C6:47:A0:FE:BE
X509v3 Authority Key Identifier:
keyid:0E:17:0E:E8:59:E9:1F:49:73:DE:4A:57:2B:1B:AD:2F:3A:5D:18:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DhcO6FnpH0lz3kpXKxutLzpdGCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:4b:9b:af:13:7f:8f:05:53:a7:5c:58:8d:ea:b5:91:c9:f0:
fd:5d:ae:a4:c7:19:58:2e:cb:5c:f8:30:6a:63:c8:f0:76:90:
27:e7:d4:de:67:8d:47:be:f0:c5:77:ad:43:cd:08:77:58:c9:
24:32:91:a3:81:9e:2d:b0:55:16:ee:22:d6:82:37:1b:96:78:
8b:39:82:ab:60:60:0e:c7:da:68:fc:7e:dc:48:35:09:c0:0d:
67:58:c0:ca:91:56:b8:e9:0e:47:cd:cd:87:12:fd:1a:42:4f:
3e:46:5e:33:5c:e2:f2:c3:74:4c:fd:53:82:2d:8e:77:d6:3f:
1f:30:96:57:0c:4b:71:16:f4:58:4c:58:52:a1:42:fb:ac:7f:
9e:17:10:aa:a8:19:ab:88:b5:75:b7:3d:c2:72:85:c1:05:b1:
46:9b:6a:3b:79:f0:81:8a:de:dd:92:24:53:29:8a:29:09:6f:
f8:2f:2c:54:cb:0f:18:92:a4:6b:1c:94:f7:3b:cc:1c:81:17:
76:57:34:0b:ad:99:e9:f9:f6:1e:4e:d7:d1:aa:f5:90:a3:a0:
fd:71:90:78:df:e6:7e:d6:0a:0e:85:32:28:ff:06:3e:cd:74:
a5:e6:80:ba:91:5e:1b:f0:fe:b6:c4:ce:e5:6a:b0:f0:a9:21:
85:8e:2d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:43:53 2026 by rpki-client