Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
File: 0vONSutNAojbuFTR6uC9itP4Qfo.mft (raw, json)
Hash identifier: FNRf6Im2Wp0SLMqzv7rKMn2WOlkj3Rqzdb+xuxKEPds=
Subject key identifier: 99:77:52:A9:08:BF:B9:DB:23:3D:16:41:F1:63:16:A1:10:8D:6B:3F
Authority key identifier: D2:F3:8D:4A:EB:4D:02:88:DB:B8:54:D1:EA:E0:BD:8A:D3:F8:41:FA
Certificate issuer: /CN=d2f38d4aeb4d0288dbb854d1eae0bd8ad3f841fa
Certificate serial: 019D98187E4733E7A2E323EED0EF9FF7437C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 21:00:35 +0000
Manifest this update: Thu 16 Apr 2026 21:00:35 +0000
Manifest next update: Fri 17 Apr 2026 21:00:35 +0000
Files and hashes: 1: 0vONSutNAojbuFTR6uC9itP4Qfo.crl (hash: GqB8Ft9YtFg2plkNq4q4DuEzEweiv7CAGlD3/GuZ7Dk=)
2: tquIiBHdfRgZoSkv66J5g5_rmsI.roa (hash: ewRKCXj1KUDIVFZwB0RpxCjNpMk+Zl5DzmkGO5LloCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:7e:47:33:e7:a2:e3:23:ee:d0:ef:9f:f7:43:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f38d4aeb4d0288dbb854d1eae0bd8ad3f841fa
Validity
Not Before: Apr 16 21:00:35 2026 GMT
Not After : Apr 17 21:00:35 2026 GMT
Subject: CN=997752a908bfb9db233d1641f16316a1108d6b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:63:cc:8d:2e:8b:00:df:db:a7:b0:84:d6:e3:
ea:bd:41:5c:04:bc:b1:cd:91:4d:c4:62:f3:dd:95:
f4:5d:f4:59:b7:ad:f7:ab:34:2c:b5:1d:27:03:47:
1f:75:ca:08:a8:63:98:5e:1b:ce:07:76:62:e9:7a:
26:d5:68:00:9e:47:cd:2f:83:00:94:81:c2:91:44:
3d:d4:c6:e8:08:d3:4a:7e:71:d3:f3:9e:8a:4a:d7:
93:49:fc:8e:6a:6a:78:e8:fa:eb:dd:09:b6:c2:fb:
c6:5c:38:ac:52:9e:8e:9c:d0:08:82:64:8a:9e:18:
53:c3:a4:11:b2:b8:1f:ab:ed:bf:78:53:f8:ad:08:
84:84:45:df:33:a2:04:5d:bf:5a:cf:a5:19:30:c6:
ae:6b:78:43:12:28:31:27:40:d0:d6:5d:9e:ad:fa:
cc:fe:99:39:65:f2:9a:27:2a:f7:30:79:b2:20:ff:
12:62:cf:d1:9a:33:ad:3e:96:57:5d:99:ec:ad:ef:
16:c4:26:0c:95:bd:2b:10:f7:f0:06:c1:50:19:1f:
71:e7:ab:1f:f2:dc:8c:19:39:45:40:d6:24:bd:5d:
a7:c6:ea:73:88:52:04:f1:b0:79:f6:7b:1a:0b:e0:
ff:19:c0:15:4f:d9:dc:be:ea:bf:bf:9d:69:7d:31:
50:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:77:52:A9:08:BF:B9:DB:23:3D:16:41:F1:63:16:A1:10:8D:6B:3F
X509v3 Authority Key Identifier:
keyid:D2:F3:8D:4A:EB:4D:02:88:DB:B8:54:D1:EA:E0:BD:8A:D3:F8:41:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:3f:ef:2d:24:d1:f5:05:5b:1c:95:0a:4d:42:fc:56:d0:cf:
e5:06:e2:6a:30:8e:2c:20:6c:11:89:0e:4f:af:a0:f5:d1:e6:
cc:fa:01:9a:2f:3d:a8:a8:ec:46:96:99:8f:4f:f2:36:d5:5f:
32:77:2a:c9:cd:af:3e:2c:0f:d0:9f:54:fa:63:d9:32:d0:e5:
2c:cd:b0:ac:d7:79:ac:eb:38:f0:aa:a9:19:a5:74:33:9b:92:
02:90:c9:9f:19:3c:a7:6b:c4:2c:e5:aa:61:93:a0:35:72:56:
cc:7d:89:40:dc:5f:13:56:70:25:38:d9:82:04:dc:d5:af:22:
37:d0:fa:3e:f3:30:6e:28:26:76:a4:17:aa:1a:81:4e:3e:e4:
d3:82:6a:96:15:ae:2b:bb:bc:08:ad:a6:3d:fd:1a:af:8c:56:
08:ab:d3:08:dc:8f:99:0e:21:ab:20:37:63:6f:9d:8f:26:70:
53:64:ba:8c:94:97:58:cb:c3:ac:82:61:4c:00:a5:d3:16:d8:
97:3c:a4:83:08:67:99:f6:10:16:38:3f:90:37:4e:64:31:1b:
f0:fb:e6:2f:1a:10:8d:08:49:dd:04:d8:ac:0a:1a:e1:77:94:
f8:3a:dd:7a:7e:73:9a:db:0b:e0:7f:ed:38:d2:93:16:6b:49:
a1:09:64:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:57:18 2026 by rpki-client