Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
File: 0L-t8pI57Yzz9saT2L23n0IACrw.mft (raw, json)
Hash identifier: qEGXsNkubz9EnBYhN6WeiZV/7dLTP8hweOjTRebcixg=
Subject key identifier: 19:39:E5:C9:6A:CC:89:C6:25:E5:57:F3:E5:10:72:05:58:0A:74:92
Authority key identifier: D0:BF:AD:F2:92:39:ED:8C:F3:F6:C6:93:D8:BD:B7:9F:42:00:0A:BC
Certificate issuer: /CN=d0bfadf29239ed8cf3f6c693d8bdb79f42000abc
Certificate serial: 019D98F45942A8128DE26E6D0B870E9E15F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
Manifest number: 1073
Signing time: Fri 17 Apr 2026 01:00:43 +0000
Manifest this update: Fri 17 Apr 2026 01:00:43 +0000
Manifest next update: Sat 18 Apr 2026 01:00:43 +0000
Files and hashes: 1: 0L-t8pI57Yzz9saT2L23n0IACrw.crl (hash: ymSuQDRC1JALOMMj20vv73VPgx8cJakKHmhWGi1ekBc=)
2: 2JYWg4gqZMghUwSsH_cELClo_DE.roa (hash: XmfRPL/CjIz58Jli7M5Cw1QTYVH2xAtyBdeQbzz9+4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:59:42:a8:12:8d:e2:6e:6d:0b:87:0e:9e:15:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bfadf29239ed8cf3f6c693d8bdb79f42000abc
Validity
Not Before: Apr 17 01:00:43 2026 GMT
Not After : Apr 18 01:00:43 2026 GMT
Subject: CN=1939e5c96acc89c625e557f3e5107205580a7492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:74:8d:b1:42:40:72:3f:13:c4:01:26:dd:de:
0e:80:cb:ea:56:ab:2a:22:a3:7f:2a:b9:33:b7:28:
ab:c3:0b:03:d0:23:ee:1c:aa:7f:86:e3:5c:ba:2f:
cf:71:23:a1:f8:bc:1e:16:77:81:9d:f4:d2:9d:57:
29:81:62:80:52:b8:a3:05:08:98:86:ed:fd:3e:6e:
ed:84:6a:2e:4f:a7:5a:94:47:bb:70:ab:e0:49:6c:
61:d3:65:7f:14:87:c8:3d:55:43:64:5b:8e:63:af:
5a:b5:24:3d:86:60:32:9f:95:f9:23:02:c3:91:96:
90:0e:67:03:54:ed:3c:6c:65:79:b9:53:6c:fc:62:
06:bc:0f:6c:2f:72:a9:26:9e:f5:d5:1a:70:f0:3e:
7e:28:0c:f6:97:cd:72:30:9d:61:19:3b:d0:aa:6f:
a4:eb:fe:c3:7f:29:fc:48:62:65:f1:f0:2a:ea:d6:
be:61:09:d7:d6:35:59:6a:51:ba:03:8d:25:40:64:
81:35:ac:88:7c:db:e6:39:0f:0d:7e:c5:1d:8f:53:
89:c5:66:a5:df:f0:a9:f5:dd:b2:96:8c:b1:35:87:
54:21:14:a3:35:50:36:92:e4:d9:a1:07:93:d3:50:
5c:2c:d2:67:e9:37:49:70:25:8e:5a:ae:54:b0:24:
de:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:39:E5:C9:6A:CC:89:C6:25:E5:57:F3:E5:10:72:05:58:0A:74:92
X509v3 Authority Key Identifier:
keyid:D0:BF:AD:F2:92:39:ED:8C:F3:F6:C6:93:D8:BD:B7:9F:42:00:0A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ca:18:05:9d:51:0e:7d:df:0f:5e:26:69:62:2c:21:72:4b:
80:bd:7f:24:6c:9c:4d:5d:ac:26:41:18:e0:c4:b4:d2:58:50:
6f:40:32:6d:33:63:d0:69:96:57:cb:44:c2:d8:a8:e6:5d:98:
ed:8a:a3:cc:05:57:03:5b:c8:80:96:20:19:dd:c8:d5:44:35:
02:9e:48:5f:9e:13:05:6f:f7:3c:d8:4c:be:ca:49:79:4b:2d:
8a:95:8a:07:a7:78:2e:48:94:c3:c8:e2:74:06:5e:04:1c:05:
09:27:fc:2a:eb:05:93:65:f4:03:5b:47:e0:d1:2a:65:ec:94:
9a:05:e6:87:41:c9:3d:cd:37:99:3b:d5:5b:70:3c:c6:68:55:
3f:33:a2:09:cd:4f:ae:07:a7:df:b4:43:26:4e:4a:cc:81:9f:
84:77:89:4b:db:75:25:68:e4:4e:d6:0d:5c:48:70:a1:e4:45:
59:9a:d7:cc:27:72:6f:3d:43:d0:b2:d4:e5:08:98:4d:9c:66:
f7:f4:d1:97:09:17:d1:e1:8d:1e:40:1d:ef:62:ce:28:4c:bc:
53:08:d7:d4:66:9f:a6:22:bd:40:19:51:f0:e7:59:38:03:ac:
20:0c:68:af:1c:e4:38:c0:a0:ee:d6:92:62:c2:bc:e9:08:da:
2f:3e:39:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:14 2026 by rpki-client