Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
File: 0VK0wfXUhO78KxWX9FUAOrZUsFU.mft (raw, json)
Hash identifier: 6lKl9vnwBwdshYDr1fmQAF05ncA2puKjGoKWito7sfs=
Subject key identifier: 4E:42:A5:CF:B9:B2:EB:F5:9A:B1:4A:2C:79:02:5D:12:32:7E:EA:21
Authority key identifier: D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55
Certificate issuer: /CN=d152b4c1f5d484eefc2b1597f455003ab654b055
Certificate serial: 019D99D06B18982C2C956084BF9BC653D42E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 05:01:06 +0000
Manifest this update: Fri 17 Apr 2026 05:01:06 +0000
Manifest next update: Sat 18 Apr 2026 05:01:06 +0000
Files and hashes: 1: 0VK0wfXUhO78KxWX9FUAOrZUsFU.crl (hash: gUs0ofDKk8dXnJvnO+GdFOQeTJjeYbFHbRur59ouQGY=)
2: NP9SfFGYsYXsch7Dr3qELq74PLU.roa (hash: fuLAQTL3YUInXQtx9TnphHOeZzSHEh2X+xButoDoLCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:6b:18:98:2c:2c:95:60:84:bf:9b:c6:53:d4:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d152b4c1f5d484eefc2b1597f455003ab654b055
Validity
Not Before: Apr 17 05:01:06 2026 GMT
Not After : Apr 18 05:01:06 2026 GMT
Subject: CN=4e42a5cfb9b2ebf59ab14a2c79025d12327eea21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5b:91:b5:0f:7b:f1:bf:c2:a1:f3:09:86:1f:
ef:6b:d0:71:58:2a:8d:2d:3b:5a:24:fd:be:2c:f3:
8c:2d:bd:9a:49:83:21:56:c4:d5:7f:22:28:30:40:
d3:3d:37:68:1e:83:44:4f:c7:b2:bf:85:b9:53:47:
4f:a4:38:9b:4a:56:58:49:17:39:b6:c9:13:8b:ba:
49:b2:eb:4e:bd:b4:b3:3e:bf:37:f9:6f:99:66:5f:
de:c6:d1:bd:56:64:35:24:cf:84:2d:4a:3f:b1:7b:
b8:28:5c:43:5c:7d:33:4d:ed:07:f5:09:89:61:b7:
4c:79:69:e6:2f:9f:c7:e3:7b:51:f1:7a:23:e1:40:
7c:b2:35:06:b2:43:64:cb:c9:80:90:0f:b9:8c:d7:
5b:57:43:dd:1a:ea:f2:26:34:b0:c4:71:77:89:40:
c5:22:79:ee:2a:07:39:9f:16:ab:59:06:38:b1:2f:
2d:50:ed:66:bc:94:e4:c4:7b:5b:62:29:9a:3d:69:
3c:1a:1b:6b:a0:c0:10:b1:af:5c:ec:37:56:fb:a5:
6f:82:8f:b8:da:55:3d:d5:a1:b9:bd:23:16:ca:3e:
de:e3:c5:ed:52:77:26:39:da:0b:0a:b7:22:cb:a7:
28:1a:2c:da:03:33:73:fe:89:96:78:bb:c3:f3:bd:
4f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:42:A5:CF:B9:B2:EB:F5:9A:B1:4A:2C:79:02:5D:12:32:7E:EA:21
X509v3 Authority Key Identifier:
keyid:D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:07:c2:eb:a9:60:c9:0c:22:76:8c:9b:f2:52:88:2c:42:c9:
54:ca:90:9b:1a:a9:c6:8a:41:1f:c3:6f:d3:2f:ae:9e:16:d8:
2f:96:60:fe:5f:c0:87:44:a3:b8:40:61:f0:42:2a:00:0b:75:
7a:e8:9b:c1:44:93:77:59:ea:84:53:12:c2:33:a7:d5:27:6e:
52:9f:9d:e1:2d:6e:98:a1:af:f8:8b:c1:fb:05:f5:f7:0f:f4:
72:55:68:5d:d2:22:43:be:6f:59:cd:9b:5e:03:cc:a6:57:53:
10:98:e3:a1:52:87:de:d0:a2:4e:3a:30:c8:ef:4e:52:ba:5e:
01:b7:db:d7:59:29:df:cf:3d:f3:b2:5c:c2:a2:b1:d2:a8:3b:
4e:8d:78:3f:bd:f7:82:5c:7e:27:b6:15:38:31:55:b2:73:59:
66:50:3f:b5:d9:61:e7:28:a3:2a:47:d9:51:7f:03:03:6e:41:
02:6e:cb:02:a2:db:5d:22:2a:4e:6c:80:eb:f9:a1:88:64:e6:
b6:40:05:c6:1a:6b:f2:22:eb:a3:a7:15:23:c8:96:6c:41:0d:
b9:38:60:10:7a:fc:7b:63:c3:17:36:ea:a2:bc:23:2e:05:a5:
ea:f3:6a:0b:b4:4f:19:92:b3:16:74:1b:4c:d0:df:a3:2c:42:
37:d2:45:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0GsYmCwslWCEv5vGU9QuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxNTJiNGMxZjVkNDg0ZWVmYzJiMTU5N2Y0NTUwMDNhYjY1
NGIwNTUwHhcNMjYwNDE3MDUwMTA2WhcNMjYwNDE4MDUwMTA2WjAzMTEwLwYDVQQD
Eyg0ZTQyYTVjZmI5YjJlYmY1OWFiMTRhMmM3OTAyNWQxMjMyN2VlYTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1uRtQ978b/CofMJhh/va9BxWCqN
LTtaJP2+LPOMLb2aSYMhVsTVfyIoMEDTPTdoHoNET8eyv4W5U0dPpDibSlZYSRc5
tskTi7pJsutOvbSzPr83+W+ZZl/extG9VmQ1JM+ELUo/sXu4KFxDXH0zTe0H9QmJ
YbdMeWnmL5/H43tR8Xoj4UB8sjUGskNky8mAkA+5jNdbV0PdGuryJjSwxHF3iUDF
InnuKgc5nxarWQY4sS8tUO1mvJTkxHtbYimaPWk8GhtroMAQsa9c7DdW+6Vvgo+4
2lU91aG5vSMWyj7e48XtUncmOdoLCrciy6coGizaAzNz/omWeLvD871PgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5Cpc+5suv1mrFKLHkCXRIyfuohMB8GA1UdIwQY
MBaAFNFStMH11ITu/CsVl/RVADq2VLBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFZLMHdmWFVoTzc4S3hXWDlGVUFPclpVc0ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8zNzllMzItMDJlMC00MzM5LTg4MmIt
MmY3NTE5NTIxNmI5LzEvMFZLMHdmWFVoTzc4S3hXWDlGVUFPclpVc0ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8zNzllMzItMDJlMC00MzM5LTg4MmItMmY3NTE5NTIxNmI5
LzEvMFZLMHdmWFVoTzc4S3hXWDlGVUFPclpVc0ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwAfC66lg
yQwidoyb8lKILELJVMqQmxqpxopBH8Nv0y+unhbYL5Zg/l/Ah0SjuEBh8EIqAAt1
euibwUSTd1nqhFMSwjOn1SduUp+d4S1umKGv+IvB+wX19w/0clVoXdIiQ75vWc2b
XgPMpldTEJjjoVKH3tCiTjowyO9OUrpeAbfb11kp388987JcwqKx0qg7To14P733
glx+J7YVODFVsnNZZlA/tdlh5yijKkfZUX8DA25BAm7LAqLbXSIqTmyA6/mhiGTm
tkAFxhpr8iLro6cVI8iWbEENuThgEHr8e2PDFzbqorwjLgWl6vNqC7RPGZKzFnQb
TNDfoyxCN9JFEw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:42:01 2026 by rpki-client