Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
File: RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft (raw, json)
Hash identifier: pFrpw7BTSHB3Nj32+NvdINk4aFedf/cFfDveuDmDdCE=
Subject key identifier: 20:9E:CE:61:36:26:96:A0:94:E9:A2:63:75:30:66:EC:3C:B7:68:C2
Authority key identifier: 45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D
Certificate issuer: /CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
Certificate serial: 019DD019CD96C9D235ED4CA4AED0D98F6911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
Manifest number: 18DD
Signing time: Mon 27 Apr 2026 18:00:45 +0000
Manifest this update: Mon 27 Apr 2026 18:00:45 +0000
Manifest next update: Tue 28 Apr 2026 18:00:45 +0000
Files and hashes: 1: RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl (hash: B9e+8C9arNkO6osjU1UQySlwcDIAkjjGJjp10dSMoZw=)
2: _UE15j8dt-0E4MNHI1SJ6VAbDdo.roa (hash: RpMmPkih2MaIwwmI1CZ2YI65k33Pkn9LWYdRz9m4yPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:19:cd:96:c9:d2:35:ed:4c:a4:ae:d0:d9:8f:69:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
Validity
Not Before: Apr 27 18:00:45 2026 GMT
Not After : Apr 28 18:00:45 2026 GMT
Subject: CN=209ece61362696a094e9a263753066ec3cb768c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9c:81:5a:a3:6c:57:47:e3:9e:9f:02:fc:b0:
7d:5a:84:82:5c:30:92:9d:a8:c4:46:23:45:8b:7d:
92:51:a3:20:83:3d:94:a6:3c:b5:cb:b7:95:8d:1e:
f9:0a:df:9b:e4:62:3f:e0:fb:51:31:ae:53:b4:de:
c6:b9:96:b5:7f:2c:f9:1c:37:74:58:30:23:48:46:
11:f1:82:db:2b:a1:3f:14:64:bd:7b:83:45:75:70:
77:7d:37:35:36:7c:97:0e:9d:76:28:4d:f8:76:82:
01:01:75:33:a4:55:5d:1e:17:1c:33:f1:b5:0a:b5:
5c:86:f5:6b:42:d2:c7:d3:69:fc:fc:00:7a:34:9f:
f8:97:f7:68:e0:e1:e0:1e:87:b8:56:6e:b9:d2:41:
dc:2a:eb:96:2e:6d:ed:f5:88:b7:be:ae:cb:de:b6:
fa:4d:41:47:d3:d2:62:78:ae:68:18:1d:81:8c:ef:
e0:c0:88:46:4a:95:0b:97:e6:c5:69:99:9f:ea:a2:
a8:af:91:3d:cb:7a:a9:53:40:b0:2f:c2:0b:91:0a:
12:44:94:46:02:a0:27:eb:54:f5:70:40:98:15:df:
7a:ef:7d:9d:2b:73:e8:63:0c:42:42:3b:a9:78:a2:
b8:e3:8f:5e:bc:79:7d:27:79:50:3e:82:0e:ce:54:
fa:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9E:CE:61:36:26:96:A0:94:E9:A2:63:75:30:66:EC:3C:B7:68:C2
X509v3 Authority Key Identifier:
keyid:45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d4:ef:d8:a0:15:80:af:54:bc:89:d8:f5:25:d9:1b:04:ff:
56:45:a9:6d:1d:af:82:81:42:d0:0b:e5:e9:06:d9:7c:08:89:
60:0f:82:b7:a6:d9:e8:e5:ce:c5:d7:0f:e6:d6:fb:df:e8:49:
c4:6b:ef:7c:61:41:72:94:8a:da:c8:75:95:60:ac:0a:f1:64:
4e:2d:33:bf:d6:e6:f7:c5:88:6c:4b:c0:a4:ac:3a:b5:5d:d1:
b6:ce:61:f9:1f:df:12:71:fe:4d:0f:0c:b2:f8:06:3e:9a:89:
be:9b:1f:2b:05:fc:d9:6d:c6:f1:ec:51:96:83:cd:a0:32:3d:
a0:04:ff:f2:a3:58:c1:12:3f:f2:be:d5:ec:b6:ab:89:94:ad:
d5:d8:9c:72:64:8f:cf:f7:63:0c:c3:4b:8a:7e:0f:1b:b5:7e:
ee:de:58:9b:a3:44:80:31:d3:01:93:64:9e:97:a1:fe:b4:89:
46:1b:83:84:c5:4f:4b:47:c9:c0:14:f8:3b:cb:c3:81:9f:1c:
48:84:e7:8b:16:10:8e:d8:8f:38:9d:46:d3:91:a3:10:aa:d4:
d1:5f:5b:38:ce:e9:1e:ff:25:66:92:27:16:3f:2e:db:9a:53:
27:72:92:d6:27:23:f4:71:f0:64:6d:84:33:25:72:bc:ef:dc:
51:ae:4b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:23:07 2026 by rpki-client