Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
File: 0KHbRmz4CCBik9B-ZfISH-tJoz4.mft (raw, json)
Hash identifier: B6IeEOb8rDF/dBMq8AYTCvITY+HKYSItIxCIbmrpfO4=
Subject key identifier: CD:36:ED:C0:E0:A9:55:6A:25:E0:89:C5:13:E5:51:89:F0:69:30:9F
Authority key identifier: D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E
Certificate issuer: /CN=d0a1db466cf808206293d07e65f2121feb49a33e
Certificate serial: 019D9AABB866A42DB97522084A29A739C84C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
Manifest number: 16B1
Signing time: Fri 17 Apr 2026 09:00:37 +0000
Manifest this update: Fri 17 Apr 2026 09:00:37 +0000
Manifest next update: Sat 18 Apr 2026 09:00:37 +0000
Files and hashes: 1: 0KHbRmz4CCBik9B-ZfISH-tJoz4.crl (hash: 8z8Wc5o/S5/G50wd7OpeP44rBXvKe+1f03t0x6yj0RM=)
2: DhRuJkYL3BPnAOF_5KLHFOS7fEU.asa (hash: sQIfeWLpZ4jVR+U6OfuhrXRMEOMO8X/NhFz0LDGhKGs=)
3: yq5Siwl4i3jmM8YcRC0pxHMIUlk.roa (hash: nGkz7j5CjWTfBWr6c+S9Cs2//HPjWw5q8jEucRFb/jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:b8:66:a4:2d:b9:75:22:08:4a:29:a7:39:c8:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a1db466cf808206293d07e65f2121feb49a33e
Validity
Not Before: Apr 17 09:00:37 2026 GMT
Not After : Apr 18 09:00:37 2026 GMT
Subject: CN=cd36edc0e0a9556a25e089c513e55189f069309f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:47:18:3a:77:47:ad:d3:57:16:da:71:ca:bc:
ae:0b:3c:5e:ff:92:4e:c5:4f:de:14:12:15:00:67:
dc:03:7b:6a:0c:61:6a:d4:df:59:3a:b3:92:ae:4e:
87:d7:03:5a:70:d4:a4:97:6d:78:66:9b:a9:41:20:
66:ae:73:48:09:f2:c3:d1:84:b1:d6:2e:1e:25:e6:
d4:a2:1c:13:09:54:f3:43:3a:28:83:dc:a5:1a:50:
c6:79:e9:b4:3f:6b:ec:e0:1b:96:83:e0:94:f7:0b:
64:b2:31:d0:34:a7:56:0c:b1:54:ce:f2:ac:54:8b:
23:42:d3:1c:7f:04:05:31:32:07:3c:d2:8e:51:e9:
c8:1f:70:0c:7f:73:90:a2:d2:a6:70:3e:cc:84:fc:
5b:f7:bd:62:1f:35:a0:6b:20:e5:fb:f6:9e:f3:23:
e8:72:9d:19:a7:04:35:2b:78:10:89:cd:ab:29:64:
6f:ec:56:39:d8:1d:8f:42:51:cb:0f:34:dd:1b:16:
72:d3:21:24:d2:99:54:e7:ed:1a:cf:cd:fa:38:75:
ac:c1:fd:79:09:63:07:99:28:a2:b9:ec:38:c1:82:
1a:25:48:9e:f5:e0:fe:42:19:0e:45:eb:66:38:f8:
68:df:85:83:26:44:7c:9f:56:4a:dc:68:90:cd:ba:
95:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:36:ED:C0:E0:A9:55:6A:25:E0:89:C5:13:E5:51:89:F0:69:30:9F
X509v3 Authority Key Identifier:
keyid:D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ac:68:8c:53:1d:be:88:d5:8b:98:df:44:88:b8:1f:33:a0:
6d:8b:07:4b:26:19:42:f8:d4:ae:de:31:50:0f:e8:6b:f2:57:
a6:db:a7:2c:31:2a:8c:76:cd:36:f0:36:d9:41:cf:4e:d6:9c:
0f:ea:a3:32:05:06:99:1c:cd:54:a6:c8:b9:3b:4a:54:85:21:
30:d8:72:ac:d1:25:bd:d0:3a:4b:a2:62:4a:d8:1f:cf:24:8e:
6f:b2:9c:52:d0:21:eb:73:5c:ec:3b:80:18:70:d5:ff:54:1c:
c5:71:dc:8d:50:fb:41:77:e0:6c:dc:1f:ae:4f:9c:14:ac:1f:
59:8c:67:13:e5:a8:bb:08:19:ac:c0:d0:ba:5e:2f:56:44:4e:
14:82:d2:af:91:28:fb:5e:2f:fb:73:96:b2:80:b6:ce:14:d2:
58:2a:36:92:53:98:11:c6:5e:63:76:38:f1:a3:59:83:8b:01:
58:01:44:af:36:21:76:a9:62:01:c2:9e:ed:3c:2e:e8:a3:22:
6e:0a:73:9f:f2:88:3e:1b:a8:8c:74:d4:c6:43:9b:f8:c6:fd:
a5:b6:58:91:e6:d4:b1:20:bf:35:d4:31:4d:f2:fe:79:e6:54:
92:31:a8:94:03:9e:79:ce:2c:d4:f7:9a:ca:d9:24:1a:35:e1:
96:5d:a1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:52:10 2026 by rpki-client