Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.mft
File: 0PFLigjLX4BX1IsD5T9Fi44f7tY.mft (raw, json)
Hash identifier: 0yHCqKsmzvgiJI75BJ4ofa9Tm/FygNOGWIwEvO0DShI=
Subject key identifier: 19:13:7A:5C:74:57:AB:B6:5D:5E:10:E2:8D:98:B6:26:FA:94:2A:EC
Authority key identifier: D0:F1:4B:8A:08:CB:5F:80:57:D4:8B:03:E5:3F:45:8B:8E:1F:EE:D6
Certificate issuer: /CN=d0f14b8a08cb5f8057d48b03e53f458b8e1feed6
Certificate serial: 019D9D75F57E33B6004FF8601588EEA90F65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PFLigjLX4BX1IsD5T9Fi44f7tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.mft
Manifest number: 0512
Signing time: Fri 17 Apr 2026 22:00:46 +0000
Manifest this update: Fri 17 Apr 2026 22:00:46 +0000
Manifest next update: Sat 18 Apr 2026 22:00:46 +0000
Files and hashes: 1: 0PFLigjLX4BX1IsD5T9Fi44f7tY.crl (hash: H4puAjxkBLw+45ilhGblHxIIavIyZmpYoQs7/tbCqH8=)
2: Yp5EzvNAptv0FF3dq0dG-qbNXDE.roa (hash: rEVjSa04WTwHqfNGkpfReSocSUSeb47hyl6D9pld43I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PFLigjLX4BX1IsD5T9Fi44f7tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:75:f5:7e:33:b6:00:4f:f8:60:15:88:ee:a9:0f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f14b8a08cb5f8057d48b03e53f458b8e1feed6
Validity
Not Before: Apr 17 22:00:46 2026 GMT
Not After : Apr 18 22:00:46 2026 GMT
Subject: CN=19137a5c7457abb65d5e10e28d98b626fa942aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:39:3d:94:87:e7:cb:8e:3c:28:98:01:e3:c9:
31:80:23:93:57:a8:4c:66:bd:f4:63:3d:d1:3e:8b:
ce:b6:b7:ea:c7:e2:a8:90:27:3a:d0:5f:57:e3:2d:
0b:10:c0:5b:8e:9e:d7:e2:52:5a:03:94:b4:cc:14:
cb:9b:b1:68:53:d1:90:b1:10:03:f7:16:92:48:29:
3e:20:cd:51:29:87:50:da:26:19:90:65:d0:04:e1:
8a:ef:4b:ea:19:7e:36:eb:33:ca:21:7f:46:10:c1:
e1:cc:7e:98:60:5e:dc:e2:87:9f:12:9d:25:8c:be:
bb:bf:65:50:26:12:0c:1a:2f:2c:1d:d2:d3:9c:b2:
8f:a4:18:28:ab:bd:7d:b8:4b:7d:7b:d7:63:43:d0:
5b:96:32:55:f1:4c:52:20:1c:74:90:be:40:11:c8:
33:d8:e9:fc:67:e7:c2:94:1c:86:cc:c5:68:cf:85:
b7:44:52:7e:cd:aa:cd:3f:7a:dd:6a:7f:07:d6:6e:
39:d5:8f:0e:a8:ca:36:3c:52:2c:0a:26:b7:a1:20:
6e:2a:fa:53:59:b3:b0:66:09:9b:ad:72:a7:ee:d2:
68:b5:a9:ab:06:87:1e:be:a8:46:30:70:d2:ea:0d:
10:22:57:97:99:c0:d4:30:fc:5a:44:a2:ce:a5:d8:
f9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:13:7A:5C:74:57:AB:B6:5D:5E:10:E2:8D:98:B6:26:FA:94:2A:EC
X509v3 Authority Key Identifier:
keyid:D0:F1:4B:8A:08:CB:5F:80:57:D4:8B:03:E5:3F:45:8B:8E:1F:EE:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PFLigjLX4BX1IsD5T9Fi44f7tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ec:ca:ae:dd:67:97:bd:c4:e1:2f:1c:e7:d0:ed:3b:32:1f:
86:bb:6b:b3:d4:44:bb:19:ab:df:83:a1:aa:be:cd:ea:4a:98:
b6:fd:34:81:c2:6c:11:2d:e2:ab:e2:5d:22:ab:b7:23:50:4f:
e3:9f:2a:6c:12:73:0e:3b:91:54:fa:68:08:89:bb:b4:c0:3b:
3d:4b:e4:7f:50:7f:3b:f8:6d:ce:d4:bc:01:8f:ad:89:e4:ea:
4a:1e:98:0c:21:0d:04:b3:5a:d9:7c:3c:4a:bb:7e:6d:a5:65:
c8:b7:07:b9:ff:29:aa:20:c8:d0:d3:94:10:74:54:88:1b:2a:
bd:d8:61:86:f7:1d:16:9e:6e:41:92:17:2f:30:16:8a:a3:e5:
6b:30:d8:0e:d0:db:2d:fb:f2:f3:18:be:4f:40:60:e3:f3:7e:
c5:5c:82:92:67:b5:d7:af:c3:63:e4:70:f7:a9:ca:c0:41:c1:
ce:09:93:03:10:d7:a5:7f:20:51:4f:e9:26:06:29:a0:da:e6:
38:f8:23:ec:fd:03:9f:45:98:07:4d:b3:27:bf:1f:13:f4:6a:
28:60:dc:ad:d5:88:27:6b:cb:59:ed:11:22:0e:d8:b1:ac:d8:
77:36:33:e0:c9:fd:5d:c7:71:1d:f2:68:a8:3a:46:ab:f5:59:
97:e5:d9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:15:59 2026 by rpki-client