Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft
File: 0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft (raw, json)
Hash identifier: xed8H48bBqm5oPoUq4dK4gL5M7dm/xFxpcLiWdWaBZ8=
Subject key identifier: 99:9C:79:38:99:6B:CB:EE:44:A9:39:62:0A:8F:F7:14:EE:0F:DD:F4
Authority key identifier: D2:B3:6A:D2:8E:52:1E:DA:B4:B4:DE:A3:49:A2:77:72:D4:B2:A7:BE
Certificate issuer: /CN=d2b36ad28e521edab4b4dea349a27772d4b2a7be
Certificate serial: 019D9B51320766A3F502945810DCDEB3B20B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rNq0o5SHtq0tN6jSaJ3ctSyp74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft
Manifest number: 1607
Signing time: Fri 17 Apr 2026 12:01:22 +0000
Manifest this update: Fri 17 Apr 2026 12:01:22 +0000
Manifest next update: Sat 18 Apr 2026 12:01:22 +0000
Files and hashes: 1: 0rNq0o5SHtq0tN6jSaJ3ctSyp74.crl (hash: g/92RXdY0nQ6chIJe0thQ2m+Skxtd813mWqSiqSOeYo=)
2: t0X5t_3y1eMrgSVfnROrir2IJb4.roa (hash: BPcyM2IeAIooAh+FVKFVf4qaLxjgFOkdsiFt2kQ2Eag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rNq0o5SHtq0tN6jSaJ3ctSyp74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:32:07:66:a3:f5:02:94:58:10:dc:de:b3:b2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2b36ad28e521edab4b4dea349a27772d4b2a7be
Validity
Not Before: Apr 17 12:01:22 2026 GMT
Not After : Apr 18 12:01:22 2026 GMT
Subject: CN=999c7938996bcbee44a939620a8ff714ee0fddf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:68:30:39:4c:42:b1:c0:f9:bf:db:66:f6:73:
c6:86:75:37:26:f3:5f:ed:84:6c:fe:df:a4:fb:73:
82:13:7f:3f:db:c5:5c:85:e4:1a:94:a9:10:6a:79:
14:1b:b3:b6:39:5b:1f:7c:75:41:c5:79:e4:a3:0b:
24:86:9d:f8:2b:b1:72:b8:60:1b:63:f9:30:7c:e9:
6d:01:de:0a:31:e8:8b:4e:62:c1:4e:b9:e1:2f:d0:
e2:ce:c7:c1:f6:01:93:e4:3c:c9:b8:4c:a6:84:80:
e0:11:6b:a7:32:77:39:77:78:46:cb:5e:1a:70:7b:
9b:c3:e3:69:ec:90:c7:53:dc:20:3e:95:e9:ed:3b:
8b:a9:af:22:91:c6:50:05:ab:4c:cf:ab:47:29:ca:
92:0a:e1:c2:7a:fb:d4:f6:4b:8a:c6:95:60:38:0d:
34:a9:d8:72:a2:5d:56:12:35:fa:2f:02:5b:42:17:
c0:82:24:c6:1e:6c:e8:07:db:d7:b8:3a:6c:38:e3:
0f:23:89:61:a5:27:e6:fa:66:9b:0f:63:01:c1:66:
eb:5b:35:aa:bc:35:4f:a3:53:3d:1b:74:67:64:57:
98:7e:75:89:d8:26:2a:38:89:5e:d3:b1:47:33:81:
61:fe:7e:0a:af:48:72:a2:f1:76:9b:35:8c:53:a4:
3e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9C:79:38:99:6B:CB:EE:44:A9:39:62:0A:8F:F7:14:EE:0F:DD:F4
X509v3 Authority Key Identifier:
keyid:D2:B3:6A:D2:8E:52:1E:DA:B4:B4:DE:A3:49:A2:77:72:D4:B2:A7:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rNq0o5SHtq0tN6jSaJ3ctSyp74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:61:82:f0:c4:d6:66:8d:3d:18:4d:35:92:b4:31:9e:37:66:
05:95:26:da:f7:a2:65:68:0a:25:a5:79:56:10:02:f7:b8:06:
3d:58:34:58:a1:0b:3a:47:4e:a1:30:68:74:28:3b:5c:5b:d0:
e4:05:33:a9:ab:13:49:d5:02:8c:ef:1f:5f:4b:94:8b:2f:7d:
73:bb:41:97:aa:67:db:f9:6b:18:3e:92:62:eb:9f:89:3d:01:
4e:ab:0d:e9:fc:70:e0:b4:e2:01:fa:c7:bc:2d:7e:ac:b8:67:
02:d7:54:49:ce:bf:7f:70:5e:84:20:87:78:37:24:fb:4f:32:
00:36:1e:03:e3:af:4e:c9:70:9e:09:63:ae:22:69:dc:3c:45:
2a:ab:f7:91:dc:27:e5:6c:f3:86:55:54:6e:e6:7a:37:83:74:
0f:c8:02:b0:41:1e:cc:ff:60:fd:08:9f:01:f5:c6:2b:bc:06:
64:49:00:3e:b7:cc:4e:8f:db:82:d5:7e:31:5d:dd:e4:eb:7d:
49:21:5d:b5:31:df:69:89:c2:4f:f3:75:66:4f:dd:1e:6a:ac:
e6:8e:33:e7:35:51:16:cf:32:8f:ad:48:c9:64:6f:7f:05:34:
58:ab:a2:4b:42:8c:c8:a5:aa:44:26:a8:66:9e:6d:5a:dd:62:
ed:23:d6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:58:40 2026 by rpki-client