Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
File: A0sO7SxaeHrYf7SfBNP989D0nUw.mft (raw, json)
Hash identifier: caBr1Hd0oOE34BLWfu9PA2XHiq8p8bbXg09+XBDLuw8=
Subject key identifier: 1E:8D:7C:11:7E:8D:E6:FF:B4:2E:97:AE:47:9F:86:4A:99:8E:7C:73
Authority key identifier: 03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
Certificate issuer: /CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Certificate serial: 019DA34157C85F2C54A0F86A3EAA51334068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
Manifest number: 18CB
Signing time: Sun 19 Apr 2026 01:01:01 +0000
Manifest this update: Sun 19 Apr 2026 01:01:01 +0000
Manifest next update: Mon 20 Apr 2026 01:01:01 +0000
Files and hashes: 1: A0sO7SxaeHrYf7SfBNP989D0nUw.crl (hash: eE1ex78jdA4v1Mql7FYX3CktBILPjoyYhlL0/7uUFMI=)
2: AnjhFMrWNEvE6l4HScTxK_j27SU.roa (hash: q/okpxUfXsi/Ghlksygzoe9SFHbeI77lnOKud4Wi2WM=)
3: ZRqL0ZQYom47oCvdLADk1vcBuk4.roa (hash: GIVmQ7w9VSaVEEGnKk80w5fPNmlaYNBnsxkMwqLM9S8=)
4: s-hYEuR7QzCMZYkhMtC8P1oHx24.roa (hash: xVxCRO6iWAgbZPNlY9qjziiMXXmRZfi75ei52vrfj30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:57:c8:5f:2c:54:a0:f8:6a:3e:aa:51:33:40:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Validity
Not Before: Apr 19 01:01:01 2026 GMT
Not After : Apr 20 01:01:01 2026 GMT
Subject: CN=1e8d7c117e8de6ffb42e97ae479f864a998e7c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f6:50:e9:da:a0:72:e1:11:b1:6b:63:1f:d2:
c7:a3:ff:16:c0:2a:7a:e1:a4:b0:41:69:49:be:e0:
f7:a4:ae:5e:06:24:33:1c:e2:b4:da:b6:e3:d3:e2:
7c:f7:bc:50:b3:f7:95:09:75:c1:9c:f7:9e:3e:20:
cf:ef:be:a6:cc:08:f2:fc:1a:b2:c7:db:3e:89:02:
5a:21:c6:44:84:4d:12:36:53:ca:96:f1:6b:96:86:
39:0f:bd:69:a9:20:01:02:e2:28:74:e7:30:e0:7c:
67:b8:3d:84:02:b8:6e:08:2d:12:54:d7:7b:ac:49:
8b:59:a8:69:37:be:91:ef:70:70:ab:83:b3:b0:e3:
86:80:dc:93:dc:2b:0c:bf:2f:1c:4a:fd:99:b1:51:
ec:6e:8b:97:76:ed:e5:83:fa:fd:80:c3:d8:8e:13:
7f:86:28:51:45:be:58:4f:41:f0:43:b5:fa:98:8b:
df:0b:5f:70:b8:bc:c5:73:3e:ff:02:50:b5:11:c0:
ed:ea:a6:8e:1c:39:fa:89:cc:c3:8a:43:f0:51:6f:
fa:25:59:7d:a8:d6:f0:8f:a4:71:2b:2b:6c:10:9a:
4a:65:a0:d8:83:de:2e:2c:00:00:57:59:13:55:fc:
8a:62:31:81:b5:f8:a4:a4:97:fd:d1:4d:94:61:65:
39:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8D:7C:11:7E:8D:E6:FF:B4:2E:97:AE:47:9F:86:4A:99:8E:7C:73
X509v3 Authority Key Identifier:
keyid:03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:49:96:07:b3:fd:ab:cc:8e:1a:b1:dd:36:95:c0:44:4a:42:
76:4c:08:06:5f:b2:ef:5a:c7:b8:13:91:3e:9b:a4:a4:1f:bf:
a8:83:c8:a0:37:be:e0:6b:66:4f:7e:84:08:98:17:3d:09:d1:
5a:cb:00:30:11:f6:a4:85:f7:c4:a0:47:25:5b:89:0f:5d:93:
d9:47:51:fc:25:39:68:23:da:54:77:74:b1:2f:ee:33:11:59:
3a:37:f8:54:b3:86:a1:61:c6:d5:19:d9:9d:ea:ef:5d:2d:3e:
0f:f8:35:6b:74:3e:03:83:68:03:d8:93:69:ba:7c:09:f0:66:
c7:0a:aa:d1:98:c8:db:2e:a1:ac:10:28:58:4b:00:e1:3c:61:
f3:f0:ca:dd:41:17:95:31:48:ff:13:87:88:4f:02:8a:6b:15:
54:a2:ed:5d:dc:a8:60:6a:5d:1b:c2:78:86:6b:f6:c0:f1:36:
6c:b3:c8:e2:4f:1c:34:43:1b:3e:74:df:21:12:76:ff:dd:27:
87:39:0e:d0:29:17:ea:c7:c7:ee:70:f3:01:71:c9:bd:c0:41:
93:af:c4:8d:34:2b:53:6e:c3:3c:b9:2b:b8:21:f2:c0:f0:cf:
4b:6a:6e:da:b0:e7:11:a0:29:eb:d1:df:45:f8:49:99:b5:1c:
c3:d2:d2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:06:07 2026 by rpki-client