Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
File: DC18I46J3NUvb7IpbfpHWMYcl74.mft (raw, json)
Hash identifier: wbg7EXv/i9tp7vyI8pLg9Fb4jCpCVQTxrhhZgvBNvH8=
Subject key identifier: 7D:71:A9:46:E9:E2:AF:99:38:AD:D5:79:52:D7:4B:90:F4:E2:DE:B6
Authority key identifier: 0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE
Certificate issuer: /CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be
Certificate serial: 019D284E4D04A874F76E974811A728D16686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 04:01:53 +0000
Manifest this update: Thu 26 Mar 2026 04:01:53 +0000
Manifest next update: Fri 27 Mar 2026 04:01:53 +0000
Files and hashes: 1: DC18I46J3NUvb7IpbfpHWMYcl74.crl (hash: o7uPCOfzCmkEhhVjUAsWbdZnigsRBLSbQCBOyjXadVo=)
2: bml28OP4KoXNao7A2GMBGmYqamQ.roa (hash: 0pR6vIDA6MRs37zqStEVFf7/l/MWTnFFDP3/gQtqi2o=)
3: ycbQTRWdjL9Qvr33IrnbqXH0Bqs.roa (hash: nglQg5MmKlEjssrWx8wngl2AAIBCB6KoQKV4TEUoUr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:4d:04:a8:74:f7:6e:97:48:11:a7:28:d1:66:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be
Validity
Not Before: Mar 26 04:01:53 2026 GMT
Not After : Mar 27 04:01:53 2026 GMT
Subject: CN=7d71a946e9e2af9938add57952d74b90f4e2deb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5a:41:09:28:f4:51:93:44:8b:b4:8d:5e:dc:
01:7b:06:c6:97:92:68:e0:69:85:ef:28:65:78:12:
81:61:89:8c:3a:75:b9:ea:5e:d4:03:52:53:f4:99:
26:d6:15:be:44:82:38:df:76:7e:f8:b8:8d:31:53:
3a:f7:09:1d:31:ef:24:8a:bd:1b:75:36:ee:4f:fb:
6e:66:23:b2:ab:94:79:12:f6:f0:5b:51:4a:8e:12:
5d:5c:be:68:85:68:44:16:85:5b:62:b8:7f:ba:c3:
3b:4b:bb:b2:83:46:57:85:04:d7:bc:40:29:80:c3:
bc:8c:25:ad:d6:13:c1:48:61:59:8d:d6:d8:97:75:
a1:e7:68:b1:a3:8b:f7:3f:1b:2e:c8:83:9a:f3:72:
3f:03:8e:54:c3:5c:be:e4:c0:59:8b:64:83:75:ba:
77:85:97:a6:06:1d:c6:72:55:8f:96:a1:99:b4:87:
b1:9c:8c:42:55:d9:11:b6:70:82:33:47:6a:58:bf:
f4:65:cd:96:5b:8a:6b:18:1b:47:6d:63:78:85:a8:
3e:38:dd:a0:fb:af:06:f1:53:08:49:7b:6f:89:10:
f3:05:3d:67:4a:17:3e:78:7a:ae:fb:a9:52:a9:65:
55:04:df:13:0c:63:14:64:7c:37:34:d3:8d:cc:79:
dd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:71:A9:46:E9:E2:AF:99:38:AD:D5:79:52:D7:4B:90:F4:E2:DE:B6
X509v3 Authority Key Identifier:
keyid:0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:5b:f4:41:3f:38:4f:8e:d5:3f:62:20:4a:34:56:d0:f6:15:
ed:6a:3f:94:57:b5:8c:e6:1b:50:31:ee:61:74:53:cd:1c:ab:
cd:75:76:79:35:29:44:12:f8:cd:f4:7f:68:d0:df:eb:0e:81:
fd:20:45:98:7f:b6:66:42:5e:d9:2a:86:3e:7d:b6:83:b3:04:
cf:64:81:ae:cf:13:a3:51:85:5b:96:28:ae:cf:91:9f:e1:2b:
37:93:06:4b:2f:f0:9a:9f:05:19:e1:25:56:23:58:6a:5c:1f:
cc:0a:f6:13:a0:ad:c9:1f:1b:8b:c5:df:d0:47:a0:89:5f:25:
c7:22:df:38:63:96:6c:6f:fa:79:85:ae:2b:29:f5:ea:69:e5:
cb:d2:41:4f:6b:d5:08:66:52:35:6b:35:a5:69:74:56:64:14:
29:9d:fd:db:05:60:d3:f9:05:0e:7c:18:a8:30:e7:aa:bf:7c:
86:cf:4e:09:fc:8f:5a:5f:f8:dc:f7:21:49:e2:26:4e:5c:af:
d8:fb:2a:6e:9a:9d:20:f5:f1:f9:d4:a0:f0:85:ab:09:fe:09:
37:58:1e:59:9e:d4:54:fb:1c:cc:05:92:d8:63:2d:dc:f0:08:
d7:45:10:0d:a0:91:8b:96:36:cc:ee:81:c7:a6:e9:15:64:be:
23:b3:41:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:50:05 2026 by rpki-client