Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
File: 0vHIhC58-JGyNNOh4OLg73PoQqo.mft (raw, json)
Hash identifier: fWe9+muN0jU/75B+nihdZNaBDmPCOWCKrvqYr5oyLIk=
Subject key identifier: 9C:AC:0D:2A:97:E7:FE:96:53:C2:05:B4:FC:73:26:CF:B5:90:8E:00
Authority key identifier: D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
Certificate issuer: /CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Certificate serial: 019D99994934D8CC95DB46E302D44B2BBE36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 04:00:52 +0000
Manifest this update: Fri 17 Apr 2026 04:00:52 +0000
Manifest next update: Sat 18 Apr 2026 04:00:52 +0000
Files and hashes: 1: 0vHIhC58-JGyNNOh4OLg73PoQqo.crl (hash: MbnHqWBAadAysWU2U5YpeOvAW4zQ3bOxweVmnv4NLiM=)
2: l9fT_tPQilc8kDDpXdmC63EbBTU.roa (hash: e0hhcAS9+zmOEL/7aF5yJ1rOw5m87GlUo2fUEzHI/tc=)
3: zZqdbpX91TjBbrVKBU--OsfsNgs.roa (hash: 5bqwY0fuE7qADoXdmI9CeMVMqqLQteAK+rBOtRg2eMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:49:34:d8:cc:95:db:46:e3:02:d4:4b:2b:be:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Validity
Not Before: Apr 17 04:00:52 2026 GMT
Not After : Apr 18 04:00:52 2026 GMT
Subject: CN=9cac0d2a97e7fe9653c205b4fc7326cfb5908e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:12:aa:21:f7:c9:3a:ec:1a:55:63:c7:c7:c8:
9d:2a:e0:a9:ae:21:af:2b:ae:0c:a1:65:d0:90:b5:
f6:55:d5:7d:97:e7:92:45:30:a4:cc:30:c2:60:eb:
03:2e:f2:74:0c:0e:ed:51:1c:35:3b:37:e4:45:75:
fd:ac:d8:21:0b:75:60:fb:d6:07:00:09:51:2d:ee:
ea:8d:ab:bb:75:c9:3f:18:49:17:b8:01:b4:69:f9:
02:a5:42:49:18:3f:3f:86:e0:c5:ef:25:70:68:24:
fe:62:da:27:8e:ac:6b:ba:22:ec:21:76:f8:29:6f:
52:cd:82:9f:1b:ef:1f:87:d0:75:2b:22:0c:74:6e:
3f:10:f3:1f:b5:37:35:e5:fd:33:b7:a6:4c:c0:9e:
4e:4c:dd:95:6c:b4:47:34:ff:31:d6:d0:a4:fa:69:
97:9c:2f:d8:4e:98:2c:bb:3c:c9:b3:9a:cf:7b:e3:
a4:8b:f7:0a:b9:8d:40:83:07:f3:de:51:cd:9b:bf:
80:12:b8:31:93:87:06:26:3e:11:d3:9a:b4:ce:5e:
fd:14:4e:2d:a4:bc:41:71:ad:50:1b:bd:b8:e3:ff:
da:5a:82:20:97:7d:15:4d:ed:27:80:3a:9d:d7:6d:
c0:33:fb:25:b0:68:a1:77:64:f5:91:94:a5:e7:20:
af:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AC:0D:2A:97:E7:FE:96:53:C2:05:B4:FC:73:26:CF:B5:90:8E:00
X509v3 Authority Key Identifier:
keyid:D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e3:e2:19:d2:53:79:29:b5:f2:ce:dd:2c:d9:da:e0:00:96:
7a:22:d5:82:46:e1:05:e3:9f:ab:61:9f:44:fa:77:c4:ac:97:
6a:32:c5:df:38:64:25:6d:f9:97:59:89:ce:69:53:98:38:a9:
6b:24:da:42:07:91:b4:1e:50:a3:48:aa:b6:31:47:3a:34:c6:
15:a3:1c:2b:51:a7:58:52:d3:5d:46:f1:1c:23:39:4c:7b:23:
76:03:60:e8:9a:b9:ed:c6:bb:f9:c6:2d:0b:dc:b9:29:c8:a8:
a3:de:fc:d8:98:5c:cb:bf:90:5c:4e:4c:e3:05:92:1e:50:a0:
41:77:d2:21:e9:19:dd:84:52:98:4e:2f:83:e2:c5:9f:98:aa:
f7:9e:bc:9c:28:69:8a:2a:91:9d:6e:5a:0c:be:69:5a:6a:f2:
57:b2:a8:0d:89:93:8f:92:9b:3e:75:a9:37:84:88:db:bd:b8:
e7:08:41:51:a0:24:05:e5:f4:86:9a:0b:08:e1:8c:b0:fd:34:
63:d9:0f:66:32:5e:d0:1e:f8:ff:f8:eb:d6:07:20:ef:6e:94:
e8:90:9f:ae:91:f6:18:86:a5:5f:a4:9b:d7:47:48:b6:58:65:
16:b7:59:0d:6e:6e:64:79:e1:0b:36:7d:52:50:67:a4:ba:f6:
85:8a:cb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:46:06 2026 by rpki-client