Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
File: 0mpECeqR9QbWM4ccbDVUDUYDN9E.mft (raw, json)
Hash identifier: /tOU9u98r2iWAzS+FO7Cu7wnywYyF2axD59AQ1+itJE=
Subject key identifier: 79:3A:48:26:A6:CC:61:D4:1D:DD:58:35:CB:13:A8:23:42:20:DD:2A
Authority key identifier: D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1
Certificate issuer: /CN=d26a4409ea91f506d633871c6c35540d460337d1
Certificate serial: 019DA3781AC7C3519087DF4C9E1116D6E7F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
Manifest number: 10A8
Signing time: Sun 19 Apr 2026 02:00:50 +0000
Manifest this update: Sun 19 Apr 2026 02:00:50 +0000
Manifest next update: Mon 20 Apr 2026 02:00:50 +0000
Files and hashes: 1: 0mpECeqR9QbWM4ccbDVUDUYDN9E.crl (hash: KRDFopRayhfYZY3zzCtYcZSMJ/s/pDJmuC9Fwn+D3Pk=)
2: AcTeoEML1ryHQtehrMdoz9pSMNk.roa (hash: 58HREcExgCm4jYk7OfR+la9NkSYLp6wFVz1Zv1g3G6w=)
3: wzoQWaU78B1JYcVEw1aU_m666Qg.roa (hash: YXxlzjY6ITzVnS2guD8G2HgvMXrNu1UDUO++sIfSdhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:1a:c7:c3:51:90:87:df:4c:9e:11:16:d6:e7:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d26a4409ea91f506d633871c6c35540d460337d1
Validity
Not Before: Apr 19 02:00:50 2026 GMT
Not After : Apr 20 02:00:50 2026 GMT
Subject: CN=793a4826a6cc61d41ddd5835cb13a8234220dd2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bc:0b:c0:af:15:16:f6:7b:da:d1:71:ff:cd:
8a:63:67:06:45:71:0e:a8:35:cc:fa:af:74:bb:b7:
43:be:84:b0:93:7b:74:83:0c:98:8d:f1:3b:4d:a9:
8c:25:91:e5:b1:dc:13:19:d6:c2:81:00:bd:0b:61:
c8:97:d2:b2:d9:bf:13:29:80:3a:9e:21:41:47:cc:
59:33:09:91:c3:9f:d4:2b:a0:b5:de:d6:b4:d5:74:
d1:64:51:f6:79:5a:46:3d:35:86:97:d4:0c:30:80:
48:1c:79:bf:05:e6:df:40:50:fc:6b:71:9b:22:d9:
10:1e:00:4b:58:6b:25:89:84:d0:0f:a1:14:c3:b8:
b8:40:a7:bf:ee:58:6d:26:55:6d:3d:0c:2f:56:47:
46:5b:9c:9a:92:25:d5:c5:4b:34:1e:12:19:99:1f:
21:2d:c3:eb:00:c8:f3:76:38:d3:a0:46:07:86:18:
17:af:f6:60:5c:19:d9:d1:59:c3:f5:59:b8:42:fa:
c9:f2:19:07:10:e6:b9:61:67:64:26:cc:fb:45:1e:
55:84:0b:12:f6:31:7d:b7:fd:48:a5:2f:67:b0:ad:
c3:c4:4d:70:b3:f9:ba:1a:e1:06:b5:08:0d:31:3e:
72:23:f0:cb:8b:77:c8:11:cb:9a:77:85:fd:42:bf:
da:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3A:48:26:A6:CC:61:D4:1D:DD:58:35:CB:13:A8:23:42:20:DD:2A
X509v3 Authority Key Identifier:
keyid:D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:02:0a:94:87:52:2e:c2:d3:0e:55:67:8d:6d:f6:9b:7a:9e:
67:d9:c6:d9:65:14:9e:63:1b:25:8d:ec:0f:55:44:0c:29:77:
6d:49:be:08:9d:53:9f:67:90:5f:a8:69:34:22:b2:96:b9:f0:
dd:53:27:db:77:79:5f:96:71:6e:cd:70:4d:fb:9c:04:dd:13:
55:70:cc:2c:d3:e8:2c:47:6a:6e:5c:46:2f:9f:3a:56:15:9d:
cb:02:98:62:b9:db:b6:96:98:78:77:4d:eb:af:ec:a1:10:56:
3f:cb:2c:5e:03:7a:20:95:1d:69:9a:06:16:97:00:03:24:8f:
93:e3:93:4b:c8:40:33:61:06:6c:78:63:22:3d:54:14:3a:b8:
07:08:7c:f9:8a:c4:ce:69:52:c4:8b:dd:2a:23:3d:6d:8e:7d:
bf:5c:63:53:34:d6:33:d6:52:ed:c3:a9:95:ba:b0:84:e8:54:
ec:c1:fe:54:d9:f9:9a:a0:84:14:c1:b2:46:c7:9b:71:81:b3:
97:c8:db:d1:31:b0:7c:59:1a:33:8a:a0:0a:ce:fd:7b:b6:72:
fe:6b:fa:c3:d5:50:52:56:a6:0f:ed:a3:a5:6b:2c:ad:8f:81:
a7:7e:ab:fd:9f:cb:b4:79:eb:8c:9a:b1:b9:fe:0d:96:4d:26:
7e:a1:72:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:21:07 2026 by rpki-client