Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
File: 0u0bbMpTCR9vkNGllQzrbVOwOq0.mft (raw, json)
Hash identifier: oUwQWwKbq95mL2BbZN4/7RbSI/DPWkkcdNnnRrDsWVo=
Subject key identifier: 69:AF:61:9A:1F:AD:F8:22:B6:A9:3E:B5:FD:7D:72:D9:A6:4F:D7:45
Authority key identifier: D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD
Certificate issuer: /CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
Certificate serial: 019DA29CD7FC4AC06520CA7ACE2F69A3B392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
Manifest number: 0CD2
Signing time: Sat 18 Apr 2026 22:01:21 +0000
Manifest this update: Sat 18 Apr 2026 22:01:21 +0000
Manifest next update: Sun 19 Apr 2026 22:01:21 +0000
Files and hashes: 1: 0u0bbMpTCR9vkNGllQzrbVOwOq0.crl (hash: eYtPkDrBPMtAYyw5ckrOV6Pkp2R474HnNRPQxiavB58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 22:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:9c:d7:fc:4a:c0:65:20:ca:7a:ce:2f:69:a3:b3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
Validity
Not Before: Apr 18 22:01:21 2026 GMT
Not After : Apr 19 22:01:21 2026 GMT
Subject: CN=69af619a1fadf822b6a93eb5fd7d72d9a64fd745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:4d:4a:3d:ee:2a:2c:5c:d6:d4:ad:15:9a:4f:
97:f1:3e:74:69:7b:af:2e:fc:f5:c7:a0:cc:89:8e:
0e:7a:c9:4d:d7:94:42:18:c3:4a:91:a7:eb:f5:f6:
dd:77:f3:b5:2b:aa:68:6f:88:40:ad:ef:36:ac:81:
1d:23:9d:ec:d5:a7:79:63:ef:d1:8f:01:ea:3e:b1:
38:25:f4:1c:4b:b9:97:41:79:fc:ab:4b:71:24:64:
61:d7:1b:e2:c2:9c:57:b7:4b:ab:20:24:9d:b7:c4:
8d:39:fb:fd:f0:50:44:6d:ec:cf:2b:1d:6f:f1:b9:
f7:bd:6b:4b:22:d1:77:63:5c:5d:8b:d5:40:2c:13:
9a:31:4d:5f:22:3b:a8:8a:72:23:81:0a:09:1e:79:
c6:67:df:ad:3f:15:7b:dd:c4:a5:3f:b5:2a:e3:8f:
53:15:bd:74:16:f0:04:4a:4d:53:e2:ff:de:27:c9:
67:aa:92:9d:d0:d1:3a:fd:28:34:6f:2a:fc:82:9d:
cf:86:92:d1:9b:e0:68:4b:1e:f0:34:5c:8b:5e:0a:
51:a1:b5:16:5e:60:dd:cd:d4:28:1d:4d:45:d0:ad:
f3:be:e1:6a:e6:7f:b8:f4:2f:65:ad:3a:3a:7c:ce:
0d:83:9f:95:7b:6e:2b:34:46:0d:13:f1:3d:8c:05:
59:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AF:61:9A:1F:AD:F8:22:B6:A9:3E:B5:FD:7D:72:D9:A6:4F:D7:45
X509v3 Authority Key Identifier:
keyid:D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:85:98:5d:c2:da:79:d4:d0:26:4b:ed:d4:c4:74:1c:59:c2:
31:80:bf:90:b9:37:09:9c:11:e3:ad:a4:aa:06:13:19:4a:68:
0d:1f:b8:2d:68:52:8b:0e:59:44:e0:60:e8:52:7e:72:ef:06:
b7:36:d4:d2:a4:13:13:65:2c:f2:71:7e:ed:1e:58:87:01:fb:
98:e1:0a:63:35:14:35:c2:52:3d:be:49:9e:ea:13:14:3b:f5:
10:08:5b:3c:35:ee:8e:31:87:1b:38:28:9a:60:48:85:8a:93:
8e:95:45:8d:b8:f4:72:ae:8f:b1:f2:e9:d5:5e:ff:ef:1b:b7:
b6:c2:37:22:ba:ad:a1:ea:43:0f:12:f4:8b:5d:72:5c:e7:06:
6d:9c:0d:0e:30:64:47:2f:91:0d:9d:c0:d3:c9:17:bb:08:40:
c3:d3:bb:11:54:a1:3c:b0:64:83:47:50:6d:62:43:e7:02:60:
bb:c4:3d:e5:3d:a0:be:08:d1:92:01:b2:10:37:46:88:e7:15:
83:cc:2f:ad:d4:3d:e2:2c:97:a3:5f:60:0e:cf:3d:cb:f9:b3:
30:7e:ab:5a:32:85:28:71:7b:6c:d9:3a:4a:ad:5e:f1:d9:f3:
45:51:fb:78:fb:7b:3d:f6:6c:7d:fa:9d:e4:28:a4:06:f3:ea:
e7:18:54:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:22:31 2026 by rpki-client