Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
File: 0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft (raw, json)
Hash identifier: jApt6bd4w+kHduQ2oF9tGC8a0tzYShwDXWWge1c6VWg=
Subject key identifier: E2:6B:4C:AE:CE:B8:FB:8A:B5:4B:FB:DB:EE:F8:9B:A7:B2:86:D4:B6
Authority key identifier: D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD
Certificate issuer: /CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
Certificate serial: 019D99993624E51F596A1EE196095B4877B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
Manifest number: 0D23
Signing time: Fri 17 Apr 2026 04:00:48 +0000
Manifest this update: Fri 17 Apr 2026 04:00:48 +0000
Manifest next update: Sat 18 Apr 2026 04:00:48 +0000
Files and hashes: 1: 0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl (hash: I2FgLYiHln5P6m6FU6/t4EJvyd3J+nNhYCYOY7uTc2o=)
2: 1-bzA-LC9HAAJGIHNZyWh_5MoU-g.roa (hash: RnN32d6e4MWESaRTbw2K0CLbZb59w+5PKP+DYaK/k9o=)
3: rTSOfv72iKS4Od2LIB0_G10Sm1g.roa (hash: gNhIcqNEFyGD4jxJEKcU893kImcieeuHGUa4eFshagU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:36:24:e5:1f:59:6a:1e:e1:96:09:5b:48:77:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
Validity
Not Before: Apr 17 04:00:48 2026 GMT
Not After : Apr 18 04:00:48 2026 GMT
Subject: CN=e26b4caeceb8fb8ab54bfbdbeef89ba7b286d4b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ff:cd:d1:a5:15:9f:35:02:71:9b:17:b0:ec:
86:11:10:ed:7a:f6:91:18:ce:db:26:0f:73:60:e1:
7f:1c:1d:c3:8c:80:f7:9c:af:5d:e0:74:b5:56:da:
bf:63:e6:1e:c3:e0:45:18:9d:fd:be:11:30:0e:a0:
a2:fa:74:48:9e:0e:ca:38:9e:39:09:98:e5:aa:11:
86:c7:d3:09:54:fd:d4:bd:fa:ae:b0:c9:fa:0a:f1:
29:0c:8e:3a:5f:c1:ad:7e:4c:5e:db:bb:8e:a5:45:
02:05:2f:5d:6b:00:a9:ea:a3:d4:41:6e:1b:86:43:
e8:bf:b2:ce:8a:5b:af:ea:a0:62:c0:6e:16:fe:1d:
bf:a8:f2:26:8a:a3:23:c4:3f:1e:a3:b1:92:5d:a7:
5e:10:df:7d:56:2b:82:9f:16:65:9a:71:cd:fd:7a:
81:32:0f:ab:d9:33:44:0f:7e:5a:d9:34:99:e0:af:
d8:5a:3b:4c:67:49:0f:1a:b1:61:7e:3a:c9:63:98:
83:98:39:51:e6:ce:f0:b1:d0:91:e9:13:71:fa:f9:
00:75:6a:0f:e7:6e:a0:aa:bb:e8:31:bc:09:de:04:
cb:07:ff:ba:27:70:60:7c:34:c9:67:c3:12:0c:8f:
db:b8:3f:84:eb:1f:ba:85:8d:1a:64:6b:a8:88:29:
b5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6B:4C:AE:CE:B8:FB:8A:B5:4B:FB:DB:EE:F8:9B:A7:B2:86:D4:B6
X509v3 Authority Key Identifier:
keyid:D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:1d:9d:46:1e:ca:69:bf:6b:cc:e8:e0:3e:6b:76:b7:43:23:
f6:ef:2e:63:c9:90:28:21:83:b4:40:b3:73:de:e6:c0:87:51:
33:5c:a3:e1:c0:4e:a9:92:9d:07:49:f1:1b:b6:4d:51:8c:85:
05:8b:c7:ae:57:1f:c6:08:18:91:0a:e8:96:8d:54:bb:4c:de:
fd:86:63:6b:1a:77:c6:ab:a1:54:41:29:f0:79:63:88:c4:53:
d5:6f:32:d7:42:ab:10:b6:21:dc:a8:b5:db:3f:45:0f:17:87:
40:fe:ce:44:d4:4b:f9:5c:9f:58:18:aa:d4:5d:cb:b0:a1:29:
01:da:3d:67:b8:38:d5:a8:b0:c4:4b:f4:9d:14:c7:04:ad:08:
c7:f6:a4:3a:e2:10:00:11:21:6f:9e:a9:4e:1b:80:a7:bc:f4:
a6:41:a4:30:5b:63:a0:5b:cd:3d:ef:75:8d:01:9c:eb:ce:b2:
9f:50:70:20:37:7d:52:e1:43:46:32:d5:bf:83:29:58:fa:77:
25:cb:e1:91:b5:fe:f5:73:55:bd:19:52:c1:34:6c:38:cb:99:
80:a4:96:85:e7:3d:90:94:b6:88:37:65:83:7e:16:c3:5f:05:
2f:78:9c:eb:d1:58:29:2a:62:57:8b:86:53:90:52:43:cd:eb:
97:7d:9d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:13:20 2026 by rpki-client