Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/be3e00-3c96-4cde-b81a-14c6b954d976/1/aDsz3HIYs_6IPElQUTTLOaZk_Sg.mft
File: aDsz3HIYs_6IPElQUTTLOaZk_Sg.mft (raw, json)
Hash identifier: ddbVY2ppQ0CTBFlruKXG28t2LgNgXkMbGO4ssii0zkk=
Subject key identifier: 41:2D:B1:3A:92:9A:19:27:9B:77:75:0B:C7:FE:91:30:50:2B:AC:9F
Authority key identifier: 68:3B:33:DC:72:18:B3:FE:88:3C:49:50:51:34:CB:39:A6:64:FD:28
Certificate issuer: /CN=683b33dc7218b3fe883c49505134cb39a664fd28
Certificate serial: 019D9B199EDF6CD119FFBB21AEA5827510B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDsz3HIYs_6IPElQUTTLOaZk_Sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/be3e00-3c96-4cde-b81a-14c6b954d976/1/aDsz3HIYs_6IPElQUTTLOaZk_Sg.mft
Manifest number: 0D2C
Signing time: Fri 17 Apr 2026 11:00:40 +0000
Manifest this update: Fri 17 Apr 2026 11:00:40 +0000
Manifest next update: Sat 18 Apr 2026 11:00:40 +0000
Files and hashes: 1: UBtkAIZtogJrMhGvbs0CbonHTS4.roa (hash: jo8TUuFmHzrj5Su3sdBnCB1ATJWy2tfFfxqEhpA5v6A=)
2: aDsz3HIYs_6IPElQUTTLOaZk_Sg.crl (hash: fBAchLpyBIRiHXjPwjhN1dCULY4f3arTboofvryne2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/be3e00-3c96-4cde-b81a-14c6b954d976/1/aDsz3HIYs_6IPElQUTTLOaZk_Sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/be3e00-3c96-4cde-b81a-14c6b954d976/1/aDsz3HIYs_6IPElQUTTLOaZk_Sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aDsz3HIYs_6IPElQUTTLOaZk_Sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:9e:df:6c:d1:19:ff:bb:21:ae:a5:82:75:10:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=683b33dc7218b3fe883c49505134cb39a664fd28
Validity
Not Before: Apr 17 11:00:40 2026 GMT
Not After : Apr 18 11:00:40 2026 GMT
Subject: CN=412db13a929a19279b77750bc7fe9130502bac9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:66:3f:cf:b0:f3:17:26:50:b6:68:5d:b2:41:
ba:fc:51:98:b0:dc:34:27:2b:a3:3e:e4:d2:80:66:
0c:fd:1c:71:d1:cd:d7:dd:a1:02:b9:d2:c5:23:af:
fc:60:80:6f:06:dd:e7:6b:80:63:42:ed:c2:2d:e1:
ac:38:3d:4f:3f:47:14:0e:1c:f0:33:ef:2b:97:ed:
b3:ef:3c:4c:51:0d:1a:b4:e6:b3:60:a7:06:d9:35:
82:a0:f2:e5:ae:8f:36:0b:bd:74:4f:24:bf:37:15:
f2:e2:e7:d1:0a:38:ac:a3:be:4c:67:01:69:22:96:
75:b5:b4:9a:89:53:60:61:cd:90:8d:ba:98:be:94:
ee:18:e8:d4:dd:66:d7:6d:ed:0d:bd:0d:f0:fc:a5:
bc:ef:69:8b:bb:7f:48:24:66:57:52:6d:44:91:07:
fb:8e:1e:53:d9:2c:79:0b:7d:5b:27:ac:99:e2:7d:
28:0e:ec:76:ff:80:72:5c:81:d1:e3:ac:aa:08:7e:
c4:29:4b:83:a9:91:24:c7:8c:8b:a8:d5:71:9b:8f:
0f:f9:79:b8:b4:9d:93:bd:67:53:ef:af:42:82:2b:
4d:b2:f6:67:db:38:2a:79:96:41:4a:d6:cd:b2:88:
b6:70:6a:da:6f:f1:34:bb:1e:7a:3e:81:42:19:6a:
61:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2D:B1:3A:92:9A:19:27:9B:77:75:0B:C7:FE:91:30:50:2B:AC:9F
X509v3 Authority Key Identifier:
keyid:68:3B:33:DC:72:18:B3:FE:88:3C:49:50:51:34:CB:39:A6:64:FD:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDsz3HIYs_6IPElQUTTLOaZk_Sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/be3e00-3c96-4cde-b81a-14c6b954d976/1/aDsz3HIYs_6IPElQUTTLOaZk_Sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/be3e00-3c96-4cde-b81a-14c6b954d976/1/aDsz3HIYs_6IPElQUTTLOaZk_Sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:30:b5:af:9a:08:d7:53:6f:f3:1b:a5:93:aa:a7:28:10:0a:
6a:19:49:b4:ec:13:9e:13:fb:32:aa:01:3e:13:9d:87:2f:d6:
05:2c:d9:54:7f:4b:87:ba:3c:25:5f:bb:fc:4d:aa:40:cf:a6:
d0:63:f1:6f:a3:e0:e5:4d:2f:0c:85:cb:ce:8a:a3:a6:fb:0c:
f4:f3:f9:de:58:61:99:51:b3:b2:de:39:2a:12:41:f3:65:6b:
86:22:4b:d9:cb:6d:e8:db:cd:0b:64:7a:56:0e:35:10:e0:76:
a5:5a:96:5d:96:62:cf:a9:33:a7:06:69:73:82:4c:18:dc:ce:
2b:1b:d8:0f:d1:a7:93:03:1a:74:78:30:5c:5f:8e:3d:c1:6a:
5e:57:3b:04:d1:f8:f6:cb:0d:d8:c3:68:8a:c9:12:10:1c:50:
38:b3:bd:4d:3f:43:01:6d:55:1d:e3:59:5b:d9:05:18:3d:68:
25:4f:5c:79:e8:90:df:75:49:95:36:50:ef:fa:77:ca:8b:d3:
09:aa:58:4f:d8:73:4b:a1:63:46:37:c8:7e:a0:31:53:73:87:
9d:ea:ad:03:bb:4e:3d:ad:09:03:9e:3b:3d:79:3e:ba:80:48:
4c:c8:07:67:7a:30:42:2c:f7:cf:15:7d:b6:00:cb:fc:47:ab:
0c:e9:17:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:57:50 2026 by rpki-client