Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft
File: 0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft (raw, json)
Hash identifier: xlCKMplQNOgsfO7xeV21iVDxHCDoQ361lLHmY9V8sBc=
Subject key identifier: F8:E6:4E:7A:77:73:91:4D:10:08:FA:5E:5E:91:4C:AC:6B:C1:5B:50
Authority key identifier: D2:2E:1F:58:1C:D1:1E:1D:0A:2B:69:3A:53:D3:A5:B6:FD:ED:4D:FA
Certificate issuer: /CN=d22e1f581cd11e1d0a2b693a53d3a5b6fded4dfa
Certificate serial: 019DA4536BAE51F1D93418BAA30911FB5C14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i4fWBzRHh0KK2k6U9Oltv3tTfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft
Manifest number: 45
Signing time: Sun 19 Apr 2026 06:00:23 +0000
Manifest this update: Sun 19 Apr 2026 06:00:23 +0000
Manifest next update: Mon 20 Apr 2026 06:00:23 +0000
Files and hashes: 1: 0i4fWBzRHh0KK2k6U9Oltv3tTfo.crl (hash: 9pVkiKB9Fv4Eszg9lO2o3S0pm33dXkN4iwzh/WRpQQQ=)
2: z5djvf3-CKw5x5kwKKqaRZmCe2I.asa (hash: ZvW8uuufeamy31o99OQxuIpFF7lTKfAP5mzTU9+Pnks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0i4fWBzRHh0KK2k6U9Oltv3tTfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:6b:ae:51:f1:d9:34:18:ba:a3:09:11:fb:5c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d22e1f581cd11e1d0a2b693a53d3a5b6fded4dfa
Validity
Not Before: Apr 19 06:00:23 2026 GMT
Not After : Apr 20 06:00:23 2026 GMT
Subject: CN=f8e64e7a7773914d1008fa5e5e914cac6bc15b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d8:13:dc:82:ab:ab:a7:33:e1:2a:05:9d:c6:
95:3e:1b:07:d2:d4:6a:d6:b3:d1:a2:aa:e2:3c:9e:
0e:10:58:a8:0b:e1:a4:c4:66:b0:cb:76:5c:bd:db:
98:b7:38:ef:8b:04:17:d6:ed:e5:94:36:01:39:86:
fa:ca:01:a0:c6:a4:0e:41:eb:e2:45:1c:82:58:f0:
5c:fc:74:a5:a7:dd:fe:15:e3:41:a7:0b:b4:8f:a8:
48:51:84:29:93:62:04:be:be:d1:74:79:6d:11:0e:
f9:6c:ec:52:5e:60:3c:80:b4:0c:43:50:54:df:46:
5e:46:6e:b0:a0:1f:39:36:ad:a7:6a:41:45:8f:47:
b6:92:c0:0d:da:97:40:15:28:1b:8a:fb:8e:d5:ef:
28:0c:0b:c3:26:0d:a5:84:1a:f8:97:65:3a:fe:bd:
7e:f6:a6:c0:bb:ec:2c:81:c4:c8:5f:01:cc:64:c7:
94:30:c7:93:b4:fa:d7:33:07:0d:ff:7d:e9:b7:37:
18:e9:e5:32:61:f3:7d:b1:80:ac:da:84:4f:30:f6:
16:c7:b0:f0:88:65:16:45:c4:93:05:d8:0f:80:6e:
1f:e8:a9:06:71:a0:5c:3e:2f:22:bb:99:b9:0e:53:
d5:33:5c:e7:96:cb:7c:2d:52:76:99:86:dc:37:fc:
55:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E6:4E:7A:77:73:91:4D:10:08:FA:5E:5E:91:4C:AC:6B:C1:5B:50
X509v3 Authority Key Identifier:
keyid:D2:2E:1F:58:1C:D1:1E:1D:0A:2B:69:3A:53:D3:A5:B6:FD:ED:4D:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i4fWBzRHh0KK2k6U9Oltv3tTfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:38:5a:7f:25:81:da:c7:a2:b7:0c:3f:52:b2:bc:74:01:19:
86:b1:60:64:8f:d8:40:d0:fb:37:1f:85:3b:3c:7d:2a:a4:a7:
d6:50:b9:80:d2:87:eb:a7:34:e1:89:2a:a3:46:7b:25:b1:44:
d1:4e:91:f5:dd:88:40:34:b1:59:66:5f:d4:41:9f:9a:6e:11:
f5:30:e7:c1:4c:c6:cf:5e:65:db:ef:80:69:1a:91:0b:a8:15:
b3:f2:5e:9d:1f:76:36:51:c6:fa:52:6b:63:34:f3:db:af:fd:
1c:cf:24:e9:56:7a:e0:86:93:d1:d5:fc:25:53:bb:e0:34:eb:
b2:54:d3:82:49:c8:0f:41:22:12:b8:80:fb:aa:cb:2d:c8:99:
e0:61:cd:89:3d:b9:fc:73:53:f5:33:76:1e:d1:77:03:f5:20:
e3:c0:6d:b2:db:a9:a7:0c:33:d6:31:be:1f:a1:fd:59:64:e0:
85:b8:ca:b2:77:c3:bf:bc:18:1e:1b:be:e6:69:22:d5:75:1b:
11:03:e7:5c:6f:fe:23:43:a4:04:90:eb:0f:a5:75:93:5d:be:
cc:09:81:72:04:9f:f0:06:42:19:b9:ee:26:96:fc:89:5c:f9:
78:ce:7f:6e:5a:c9:26:2a:b7:e8:59:8d:a9:f3:8a:f7:9d:ef:
26:36:2b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:41:03 2026 by rpki-client