Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
File: DcnBtxcVahijTZMjtnoKA-2oWsk.mft (raw, json)
Hash identifier: J6wcYLIaGcvpw0Qi8Sex/lduSwO1oR3vKukBKGj2dbo=
Subject key identifier: 74:73:40:E2:4D:47:D0:42:20:37:6E:DA:0C:F9:8D:45:CC:52:1F:3F
Authority key identifier: 0D:C9:C1:B7:17:15:6A:18:A3:4D:93:23:B6:7A:0A:03:ED:A8:5A:C9
Certificate issuer: /CN=0dc9c1b717156a18a34d9323b67a0a03eda85ac9
Certificate serial: 019DD164347BC41396207996603363F6D084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
Manifest number: 18DC
Signing time: Tue 28 Apr 2026 00:01:38 +0000
Manifest this update: Tue 28 Apr 2026 00:01:38 +0000
Manifest next update: Wed 29 Apr 2026 00:01:38 +0000
Files and hashes: 1: DcnBtxcVahijTZMjtnoKA-2oWsk.crl (hash: bNIbOgr9BMIjHXD2JZTHbI8ul3U0ekYnYpU4sentlvk=)
2: oCylTxdWStUJKd43isiQRqgUx2I.roa (hash: BA+lkIFGOjmKiy8Zq7wyWqkb5r7mqiejaQ24ZYtS4FQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:64:34:7b:c4:13:96:20:79:96:60:33:63:f6:d0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc9c1b717156a18a34d9323b67a0a03eda85ac9
Validity
Not Before: Apr 28 00:01:38 2026 GMT
Not After : Apr 29 00:01:38 2026 GMT
Subject: CN=747340e24d47d04220376eda0cf98d45cc521f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:09:6a:d6:af:c8:a9:f1:b4:10:25:a6:b6:f7:
52:19:5d:83:bd:5a:6b:d0:9e:ce:1d:f2:08:f0:b3:
cd:4a:3d:cf:3b:5e:59:6e:8c:48:e8:7b:5b:64:68:
46:50:a1:2a:76:20:0a:03:2c:c2:73:b7:f1:25:43:
d7:74:aa:6a:cc:d6:32:5f:73:c5:9b:6e:19:13:ee:
bd:54:ae:74:f3:35:8a:67:39:25:e4:62:72:f6:b0:
0a:83:25:24:2f:c4:f2:18:f6:23:74:58:81:27:d9:
0c:bc:48:93:f5:31:7d:f2:7e:b2:4b:cc:11:9a:1d:
61:84:fa:11:11:f4:8a:2b:44:df:f8:d1:30:5d:7e:
c4:78:4d:ed:bb:b7:4a:86:e9:26:ed:8e:00:97:18:
02:24:ef:80:8a:2b:38:f5:d5:b7:33:79:66:db:96:
1e:6d:75:a4:cb:96:3b:9a:bb:a7:10:4c:81:92:2b:
63:38:d8:d4:4c:3f:2a:ca:99:7e:a2:84:cb:0b:7c:
4f:8d:ae:af:5c:72:22:5b:5f:c3:d9:5c:e3:17:c3:
68:9f:4e:b4:25:97:f5:93:98:24:90:2d:c2:da:f4:
a0:e1:c5:b7:04:bf:6c:25:42:f6:48:e2:4e:be:c0:
77:d4:c7:a8:a8:85:51:2c:84:bb:37:64:53:75:10:
fc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:73:40:E2:4D:47:D0:42:20:37:6E:DA:0C:F9:8D:45:CC:52:1F:3F
X509v3 Authority Key Identifier:
keyid:0D:C9:C1:B7:17:15:6A:18:A3:4D:93:23:B6:7A:0A:03:ED:A8:5A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:01:2e:85:e4:32:15:15:92:0f:6e:3b:4c:5a:78:7d:6d:62:
c5:29:41:68:0b:24:48:ff:e0:e2:2c:14:ef:b7:67:0b:a4:03:
79:3b:c6:74:9d:19:3c:92:af:f8:38:87:94:d2:ac:5b:bd:11:
7e:0b:45:f6:33:99:bb:b5:e2:c3:2e:5b:fd:8c:2d:7a:27:e0:
d2:e6:a3:69:a1:21:6d:5d:9e:ff:fe:47:ab:ff:25:c8:28:c2:
f4:d8:b8:2a:76:d6:c6:ca:fe:75:a5:5e:ed:9c:7e:38:79:b3:
4f:2f:0f:e0:25:2c:5d:ce:16:08:58:ae:23:60:5e:0e:79:94:
c9:32:76:cf:ca:bf:18:59:2b:ef:c5:43:1a:2b:16:87:63:6c:
5d:44:5d:08:fd:f9:8a:44:dc:dd:ac:bc:ca:e0:f5:7b:b7:80:
cc:a7:51:49:91:b2:3e:ae:71:ef:ba:2e:84:38:b4:fd:3b:0c:
53:5d:6f:17:b3:c2:41:4a:23:1f:80:c6:dc:88:16:56:d1:ab:
c1:52:cd:19:0c:38:b0:3d:48:5a:6d:7c:6e:e6:79:f8:69:c0:
25:82:b2:07:91:37:3b:aa:78:5c:37:44:55:02:11:dd:c5:f7:
3a:50:91:67:83:a9:52:c2:a4:1a:28:4b:9d:88:5a:cd:45:84:
6c:49:7b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 02:10:12 2026 by rpki-client