Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
File: 0cSRMJSiEmjHOmdlOjc41z5cWac.mft (raw, json)
Hash identifier: Zj/0db2L1/kHf8OgC9XQS/0bSJHSafeQf8gH4EVaqXA=
Subject key identifier: 21:8C:52:96:AF:62:37:2C:4C:63:E4:51:4E:E9:49:64:D8:5A:C2:C5
Authority key identifier: D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
Certificate issuer: /CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Certificate serial: 019D992B87554B3E9AE393569741D0AB84DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
Manifest number: 179B
Signing time: Fri 17 Apr 2026 02:00:59 +0000
Manifest this update: Fri 17 Apr 2026 02:00:59 +0000
Manifest next update: Sat 18 Apr 2026 02:00:59 +0000
Files and hashes: 1: 0cSRMJSiEmjHOmdlOjc41z5cWac.crl (hash: 9fV8JOxlAuwv7Rk5kv1aw5+0tu3S13nYQLRcpJBJAZc=)
2: ZjZpopADEszQ-pk8iJcM4buK_Vk.roa (hash: kT/wMhqwMSPuX9SvpMfdYohIGO0Je1OedjWoKvA8CNs=)
3: jyVGCyGgEBWJDHp2JEn0ylLOQpw.roa (hash: Z172Tcqn6RnvzWrlqa5fx4IBPek1nFPjcCRMXGw3qXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:87:55:4b:3e:9a:e3:93:56:97:41:d0:ab:84:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Validity
Not Before: Apr 17 02:00:59 2026 GMT
Not After : Apr 18 02:00:59 2026 GMT
Subject: CN=218c5296af62372c4c63e4514ee94964d85ac2c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a3:7f:ab:c2:b2:14:ec:68:7e:ab:40:23:c2:
78:d9:88:cb:ab:ba:1c:ba:50:9b:3f:f3:e9:10:13:
3e:19:1f:fc:16:6f:5d:fa:dc:da:f5:65:e8:ea:36:
50:39:be:05:40:8d:6e:11:82:74:28:f0:e7:d9:dc:
08:87:21:98:da:19:ad:2e:87:80:c9:f4:de:34:db:
b0:3e:38:a9:a2:3e:78:52:69:31:a4:3d:a4:f8:78:
c0:07:64:17:fb:1c:a8:f7:d7:05:ad:e0:04:1a:95:
97:cf:d6:3b:0d:2f:ea:13:bd:fb:55:2d:84:10:b3:
0e:01:21:82:ab:b8:fb:b8:30:cf:9d:4b:8e:4e:50:
fb:b0:26:99:a3:d9:da:15:48:3a:51:0e:1b:70:20:
31:db:f3:0e:f5:99:94:52:18:09:87:b8:77:b0:52:
48:59:70:e2:4b:82:6d:08:0a:93:0e:28:f9:12:7f:
d4:9f:66:bb:37:37:cf:21:76:03:15:62:8e:8e:5b:
90:82:3f:09:43:0c:b2:e5:c3:ed:15:7b:24:50:b8:
02:f4:46:73:1c:4b:5f:05:10:e6:ca:8e:f9:35:58:
26:d1:d7:fe:73:25:d2:5b:4f:d6:51:d4:9d:84:6b:
be:7a:2f:21:aa:17:51:00:f7:28:75:05:22:71:4d:
22:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8C:52:96:AF:62:37:2C:4C:63:E4:51:4E:E9:49:64:D8:5A:C2:C5
X509v3 Authority Key Identifier:
keyid:D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:6d:07:5c:d7:4c:89:77:4b:6b:20:f6:b3:9c:cf:20:a4:30:
d7:c4:c1:df:d3:61:49:af:b1:17:be:7e:bf:ca:e3:2f:cf:e1:
92:dc:ec:d6:14:62:e9:aa:47:5d:21:58:b4:27:d5:e0:90:6c:
35:e0:64:12:a3:0f:a6:74:0f:90:86:2b:36:e2:3c:78:f5:ca:
5e:52:ce:c2:af:a0:45:b3:64:11:e9:dd:7e:2a:ff:c5:12:b1:
98:48:3e:a0:8b:5e:ea:a8:56:f6:57:52:7e:fe:23:33:5c:3e:
6a:ec:07:0a:e5:4a:e6:7c:48:f4:06:ae:6f:3a:f2:18:e3:34:
92:31:b5:9c:ff:f6:ee:43:1e:0b:10:b0:aa:32:69:b2:e9:6a:
d6:0d:c5:41:b1:03:8e:68:be:86:8d:f3:12:a6:e9:ca:11:1e:
60:f8:aa:37:b5:c6:65:24:18:4b:11:3c:31:19:05:c1:39:e0:
b1:ca:41:d2:26:7c:67:ff:58:b3:33:93:50:a1:3f:26:5a:f3:
f0:7d:93:fd:e7:35:93:85:b9:70:26:dd:2e:18:31:f3:87:49:
14:6c:50:53:fa:be:5a:eb:a8:4c:59:94:d0:e1:96:47:46:5f:
f5:25:07:8f:0e:64:b9:2b:9e:99:4b:31:44:1e:9b:b2:51:e8:
64:d0:65:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:30:25 2026 by rpki-client