
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft
File: D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft (raw, json)
Hash identifier: PYkNc+j5GnS3Gge1EhMjd4cyd4snSX4f5rZDukkybjw=
Subject key identifier: 12:CB:49:FF:B6:B7:4A:B4:A8:FE:6A:E7:33:32:84:7A:19:CB:5A:DB
Authority key identifier: 0F:65:70:93:F3:26:54:7B:F2:5A:99:85:C8:1C:F1:40:31:40:A3:A8
Certificate issuer: /CN=0f657093f326547bf25a9985c81cf1403140a3a8
Certificate serial: 019DCFE3E74FEFB335927F935B1AEEA0B5AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft
Manifest number: 18E2
Signing time: Mon 27 Apr 2026 17:01:52 +0000
Manifest this update: Mon 27 Apr 2026 17:01:52 +0000
Manifest next update: Tue 28 Apr 2026 17:01:52 +0000
Files and hashes: 1: D2Vwk_MmVHvyWpmFyBzxQDFAo6g.crl (hash: Ht+cIk/EZ2Jl4aUCE1EkHNDhF7MpDwnyDMm3uUx9cKk=)
2: zWv6lPCafLJnQppl_Q2Krp9R-ts.roa (hash: PnRp68chs8F3bed1Cp1lvtVxJK9TEVJMwXnA7+PU/D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:e7:4f:ef:b3:35:92:7f:93:5b:1a:ee:a0:b5:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f657093f326547bf25a9985c81cf1403140a3a8
Validity
Not Before: Apr 27 17:01:52 2026 GMT
Not After : Apr 28 17:01:52 2026 GMT
Subject: CN=12cb49ffb6b74ab4a8fe6ae73332847a19cb5adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:87:f3:a9:6e:e5:c6:da:55:5f:41:7a:80:6a:
52:9b:0d:a7:07:81:e1:e7:cf:0c:71:18:77:d0:fc:
b6:53:d0:e1:e4:ef:45:6f:55:41:6e:79:10:01:78:
1c:bb:99:33:5e:90:b3:1b:0c:bb:6a:f9:d9:ae:9b:
16:a5:eb:76:8a:59:1d:d6:0d:c0:30:6a:89:a0:ab:
8b:72:7f:9f:b8:21:c1:25:e9:e6:1a:ed:56:df:6d:
ec:3c:c6:6b:9a:74:78:88:71:a7:4b:4e:0f:25:b9:
d4:3f:fa:8a:47:15:b6:fd:96:84:3a:da:53:cc:8a:
1c:88:f5:fb:d0:41:54:59:31:44:c8:45:c6:d1:b5:
4e:be:c6:44:8f:ab:d6:ba:1f:b6:3e:eb:df:b4:0a:
68:6d:0d:7a:93:04:c9:91:2e:2d:dd:b6:9e:29:23:
5f:e5:8a:18:42:eb:9e:07:24:bf:a0:d4:a7:99:64:
9c:de:f6:35:d5:12:f3:8e:5f:0a:92:ac:fe:bd:d9:
b0:98:9f:74:54:4c:86:db:f1:ed:01:cf:3e:dd:cc:
39:d2:51:e9:d2:62:a5:3b:74:8f:17:5c:7a:7a:85:
80:bc:09:62:5a:80:90:48:61:96:a2:7e:0a:5b:3c:
9f:41:44:f7:da:2c:b5:bd:29:a0:ac:f8:70:d0:ac:
f9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:CB:49:FF:B6:B7:4A:B4:A8:FE:6A:E7:33:32:84:7A:19:CB:5A:DB
X509v3 Authority Key Identifier:
keyid:0F:65:70:93:F3:26:54:7B:F2:5A:99:85:C8:1C:F1:40:31:40:A3:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f7:c8:81:08:44:35:d9:de:c7:65:65:f4:6a:9f:66:64:96:
b8:c0:d1:f5:2c:27:a0:a0:0d:98:55:f9:c9:7f:01:2b:88:00:
df:41:0c:89:6e:b9:ff:2a:90:b2:7d:0c:44:a8:47:ac:9b:55:
00:6a:da:9c:95:1f:47:d4:a0:92:71:5f:97:90:8d:99:5d:8b:
8f:98:46:cf:5b:dd:cb:86:e9:ba:60:58:3d:9b:d7:08:9d:61:
9e:23:8b:ef:92:1c:a7:d3:ab:6e:0d:7d:e2:61:46:38:79:64:
0e:b7:08:ea:a7:6a:5c:ac:c5:bb:dd:47:49:fe:7c:eb:33:c1:
53:04:1b:89:33:c6:00:c7:27:e2:ea:7f:05:69:a7:b7:4b:8b:
d9:e4:eb:9c:fe:ce:2e:60:dd:5e:78:73:ef:e6:70:ee:74:70:
7a:61:0a:98:f2:a6:db:08:e4:d2:b0:69:d4:fb:cd:72:a6:68:
9a:d5:45:28:6c:90:9c:e3:f2:3f:d3:31:dc:9e:72:16:64:1b:
f0:ef:52:ae:c1:69:d1:5b:2f:66:00:05:17:bb:1c:92:1b:12:
19:00:a8:06:22:98:7d:9f:c7:20:44:51:fc:fd:77:c8:4b:95:
29:bf:1a:27:e7:b9:04:f3:37:27:1f:d2:6e:85:da:7c:d6:e5:
21:6d:0f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:24:48 2026 by rpki-client