Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
File: DC18I46J3NUvb7IpbfpHWMYcl74.mft (raw, json)
Hash identifier: qHCjDICbJF5T/JcrCsnJsuNoPQEUSj9UnxUYIsudSlo=
Subject key identifier: 1E:51:B3:73:7A:DE:5C:FF:89:77:46:AB:18:A7:E9:59:97:D1:D0:4A
Authority key identifier: 0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE
Certificate issuer: /CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be
Certificate serial: 019E1D91158C0CB21116287275778CCA46F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
Manifest number: 1904
Signing time: Tue 12 May 2026 19:01:47 +0000
Manifest this update: Tue 12 May 2026 19:01:47 +0000
Manifest next update: Wed 13 May 2026 19:01:47 +0000
Files and hashes: 1: DC18I46J3NUvb7IpbfpHWMYcl74.crl (hash: 7aURMPoQ6b7I+2fKETE5zJlhWXWKl/ykI6o4P/V1ZJE=)
2: bml28OP4KoXNao7A2GMBGmYqamQ.roa (hash: 0pR6vIDA6MRs37zqStEVFf7/l/MWTnFFDP3/gQtqi2o=)
3: ycbQTRWdjL9Qvr33IrnbqXH0Bqs.roa (hash: nglQg5MmKlEjssrWx8wngl2AAIBCB6KoQKV4TEUoUr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:91:15:8c:0c:b2:11:16:28:72:75:77:8c:ca:46:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be
Validity
Not Before: May 12 19:01:47 2026 GMT
Not After : May 13 19:01:47 2026 GMT
Subject: CN=1e51b3737ade5cff897746ab18a7e95997d1d04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:43:59:11:97:e2:f2:53:9b:e4:e7:fc:25:87:
78:d7:de:a2:aa:bc:cc:9b:c2:88:53:c8:2d:cf:cb:
3d:8f:27:34:43:36:f1:ac:00:e6:7a:93:6c:ba:ac:
30:53:b7:34:c6:51:36:e1:9f:f3:9f:8a:47:35:e3:
d2:fb:00:d1:f0:ce:de:a7:f1:25:35:dd:98:20:92:
51:47:c8:4c:99:d5:4d:b9:51:66:ab:45:58:63:28:
fe:9d:5a:b8:e9:db:dd:c9:1b:a6:9d:fb:1c:b8:09:
49:c2:62:49:7a:f0:5a:11:87:ad:ff:d7:9f:08:85:
3d:8e:20:90:eb:89:9b:0c:46:9d:2b:d9:ad:ee:b5:
06:e6:30:06:36:4f:62:ed:eb:b8:f1:ba:5e:1a:ce:
41:9b:1e:95:97:fb:5e:40:f2:30:c2:7b:8f:f9:69:
48:95:03:f1:55:b2:84:96:88:fb:18:ff:d9:a2:9a:
39:54:a3:12:67:b5:fc:f9:2d:42:53:6d:4e:18:78:
c2:4f:aa:5a:21:2e:d4:fc:0e:cc:dd:06:2b:fc:a3:
9a:99:ea:d5:17:01:73:89:2c:90:c4:04:73:82:77:
3f:35:01:67:7f:91:c2:3a:bb:b6:4f:a0:65:54:37:
c9:1d:2e:b9:c3:ae:ac:f8:14:5f:5b:53:a2:18:33:
3d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:51:B3:73:7A:DE:5C:FF:89:77:46:AB:18:A7:E9:59:97:D1:D0:4A
X509v3 Authority Key Identifier:
keyid:0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:d0:06:04:42:16:e7:24:64:81:4a:05:4d:1e:8a:e2:50:e3:
df:3b:01:2e:f5:fa:89:42:01:fe:3a:f6:65:d3:2a:a5:0b:fb:
bd:c2:83:c4:fb:3f:ce:20:33:f9:6c:0a:9e:42:31:fd:03:b0:
cf:55:8a:96:f4:af:9e:eb:19:c3:7f:16:a8:ac:fb:54:e8:ee:
6a:cb:29:8d:4e:4c:fb:e3:20:3b:ea:16:17:78:7a:8f:ac:42:
05:2e:fa:7b:bd:7d:68:34:cf:6c:48:02:1b:b9:a7:dd:d2:de:
ef:45:96:fc:59:70:32:dd:08:92:d6:47:b0:45:5a:36:39:7c:
ad:57:22:d2:9b:3e:f9:c4:30:28:5a:e1:ee:c0:1f:36:5d:4a:
43:dc:5c:45:02:87:5d:29:18:09:dc:af:38:bd:c2:3e:67:97:
a1:a0:fa:8d:20:8a:93:48:0f:eb:68:0b:f4:54:1c:73:86:cd:
ca:b8:92:86:b9:7d:b4:10:aa:8d:3c:d3:74:f2:e3:f1:5f:96:
98:aa:b4:fe:95:53:37:c0:50:2d:2e:86:82:a7:e2:5e:be:d8:
d1:73:70:9b:a8:2b:b2:18:22:a3:54:28:0e:b0:55:ee:bb:5f:
d0:97:89:9d:3e:62:5c:ca:18:4f:d2:28:2f:2b:c4:35:44:e2:
55:2b:1f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:28 2026 by rpki-client