Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
File: 0HJnvyOylxpHlag--EeKghuvsds.mft (raw, json)
Hash identifier: UmB9wf2JvnA8zu0NEDCrnM/GaEYKdj9fNjj1bWMOldw=
Subject key identifier: 54:B4:D9:33:86:2F:CE:13:B6:9B:84:D8:0B:A9:0B:F8:E8:CC:44:0A
Authority key identifier: D0:72:67:BF:23:B2:97:1A:47:95:A8:3E:F8:47:8A:82:1B:AF:B1:DB
Certificate issuer: /CN=d07267bf23b2971a4795a83ef8478a821bafb1db
Certificate serial: 019D9B51456B43447337C54ADC49918BBEDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
Manifest number: 18CC
Signing time: Fri 17 Apr 2026 12:01:27 +0000
Manifest this update: Fri 17 Apr 2026 12:01:27 +0000
Manifest next update: Sat 18 Apr 2026 12:01:27 +0000
Files and hashes: 1: 0HJnvyOylxpHlag--EeKghuvsds.crl (hash: JT8JafvQACeKev291MO4bYSkv4sHI8HTo3tHeejhVYw=)
2: fBAOzxis5zFocT70Z97qbse-bDQ.roa (hash: VdDmUIYDxdhSfqEfsTGgmGBNLV3h2tDEtcnlVnKzLfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:45:6b:43:44:73:37:c5:4a:dc:49:91:8b:be:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07267bf23b2971a4795a83ef8478a821bafb1db
Validity
Not Before: Apr 17 12:01:27 2026 GMT
Not After : Apr 18 12:01:27 2026 GMT
Subject: CN=54b4d933862fce13b69b84d80ba90bf8e8cc440a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7d:94:35:ba:ad:4c:e9:cc:70:2c:f6:17:d0:
4d:cb:24:55:b9:4e:4c:50:33:14:f4:c0:d6:82:23:
14:20:93:74:80:7a:c0:00:41:3c:8c:17:df:5c:ef:
ca:e4:fd:1c:1e:c4:61:73:f1:df:96:9e:cc:39:3c:
70:bc:80:31:86:14:33:a3:be:e1:04:15:15:d2:2d:
3d:9d:f8:37:2e:bf:02:05:1e:52:56:36:48:83:17:
0d:dd:68:ce:a3:54:18:5e:eb:de:b7:3d:71:82:81:
74:c9:ae:5f:d4:fd:0d:d4:9a:e4:c2:74:7c:06:f9:
00:f6:ec:f1:40:b2:05:42:2f:df:a7:7a:26:c7:02:
49:ba:0c:e1:23:f6:2a:49:4e:c5:9f:c6:e7:92:10:
58:79:aa:85:c1:0e:c1:30:5b:6f:9e:9a:8b:06:2a:
bd:31:ac:5a:2f:f3:3c:cd:80:d6:9f:25:11:40:fc:
bc:dc:00:c5:fb:81:b9:97:ce:91:f3:95:82:1c:18:
e6:a1:a1:1e:86:32:d4:4e:33:41:30:e9:b6:f7:5d:
c6:cf:96:f0:fe:03:e0:4f:07:67:c4:ad:ef:cb:c9:
db:17:f2:e3:dd:8d:ed:4e:92:a9:b2:7b:8b:8d:ad:
86:3d:dc:d6:24:1f:0c:be:33:e9:18:ed:df:84:24:
f2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B4:D9:33:86:2F:CE:13:B6:9B:84:D8:0B:A9:0B:F8:E8:CC:44:0A
X509v3 Authority Key Identifier:
keyid:D0:72:67:BF:23:B2:97:1A:47:95:A8:3E:F8:47:8A:82:1B:AF:B1:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:fe:cb:05:b5:21:87:16:a1:12:2b:06:12:4b:72:c4:5f:27:
77:f6:c5:7f:42:c1:0c:94:e7:16:cf:3f:50:e7:9d:96:88:1a:
13:09:16:86:f5:ee:ec:82:45:9f:3b:08:f4:fc:23:40:b4:e6:
cc:0e:6d:d9:a6:d1:11:2d:65:65:9c:c3:85:7d:74:fa:0e:e8:
aa:1d:03:42:53:20:99:73:6d:b4:97:f9:43:60:12:1b:e5:00:
2c:21:b3:44:c2:37:37:fe:01:27:c6:ab:c2:75:55:4c:35:da:
e5:20:2f:6d:3e:65:6a:ea:98:39:23:fd:b5:30:30:83:09:64:
dc:e6:0d:58:33:2a:7f:25:5f:80:39:ce:e1:bd:5c:88:94:4d:
4d:57:ad:00:f1:9c:b6:8f:52:fb:1a:4d:87:77:41:ed:29:48:
a9:3b:7f:7b:c7:83:4a:41:14:5f:20:06:71:e2:17:c9:42:2e:
57:38:46:04:03:07:87:77:05:4a:83:26:23:dd:0e:da:3a:9c:
c1:0e:57:24:87:4c:41:d2:98:32:dc:bb:81:95:26:ac:79:da:
b8:a5:36:30:4d:d3:1c:c5:91:7f:55:15:7c:a6:eb:a2:56:6b:
e3:4e:50:fb:1e:01:96:ff:66:e6:34:8e:0f:ca:99:88:e7:d3:
31:60:64:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:30:46 2026 by rpki-client