Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.mft
File: 0LYdHx2czatrbY4UUMLJNtOX5nA.mft (raw, json)
Hash identifier: 3bqFbIQYLj4eOS7FvPrTpOVj2v2d9qnPp44B0URwRpI=
Subject key identifier: 87:01:0E:C0:AD:DC:D4:95:AB:8C:73:48:BA:F9:64:CB:B6:D4:C4:76
Authority key identifier: D0:B6:1D:1F:1D:9C:CD:AB:6B:6D:8E:14:50:C2:C9:36:D3:97:E6:70
Certificate issuer: /CN=d0b61d1f1d9ccdab6b6d8e1450c2c936d397e670
Certificate serial: 019D99994D05FD217050819113EF8D7739F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LYdHx2czatrbY4UUMLJNtOX5nA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.mft
Manifest number: 05B0
Signing time: Fri 17 Apr 2026 04:00:53 +0000
Manifest this update: Fri 17 Apr 2026 04:00:53 +0000
Manifest next update: Sat 18 Apr 2026 04:00:53 +0000
Files and hashes: 1: 0LYdHx2czatrbY4UUMLJNtOX5nA.crl (hash: zIA8Si2sH7xyaRPeqKd2WwWc0aHQUva5641XED8B2B0=)
2: MwoTILakEYa2BuMjXVwdC4zocZo.roa (hash: 41M8lh+OaO+v/5Scy6+EfiQpM2rt/vSaSWrsasCd01A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LYdHx2czatrbY4UUMLJNtOX5nA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:4d:05:fd:21:70:50:81:91:13:ef:8d:77:39:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b61d1f1d9ccdab6b6d8e1450c2c936d397e670
Validity
Not Before: Apr 17 04:00:53 2026 GMT
Not After : Apr 18 04:00:53 2026 GMT
Subject: CN=87010ec0addcd495ab8c7348baf964cbb6d4c476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b8:81:e5:e1:95:cb:42:39:71:5d:ca:0f:30:
91:21:c1:33:34:cd:07:d3:fb:a7:75:fb:8a:a7:b3:
a8:74:22:75:54:87:d2:be:b3:53:46:0a:5c:25:d6:
6d:25:61:81:06:09:83:67:92:76:e3:5b:2d:ad:61:
9f:ed:78:60:39:65:5c:58:32:62:ed:44:12:09:fe:
48:db:8b:21:ec:ea:9f:cd:73:ba:c5:15:66:3b:8a:
09:f0:e1:8e:39:d1:4b:32:aa:8d:40:42:f1:7b:3c:
e9:b3:b7:18:34:1c:d0:a2:85:dc:ce:44:6c:99:23:
2c:e7:33:4b:2e:d7:e0:e2:fc:a1:11:a8:2a:9d:2c:
00:78:e8:1f:b0:39:52:04:34:9a:2b:a8:c6:85:f4:
24:51:68:46:a9:7d:b2:f3:24:0f:89:76:e4:02:16:
9f:b3:2c:8d:86:c1:0e:66:fa:e7:2c:3a:ef:79:e1:
0d:f6:1c:26:41:c4:51:37:52:74:13:b7:bb:9e:5f:
d4:f4:18:9e:b0:59:62:0a:95:36:b3:a5:1d:56:ea:
ce:75:60:35:69:c4:4a:20:3d:54:f1:57:0a:a6:b7:
9b:57:e0:52:92:d8:59:1a:df:2e:ed:76:0b:88:36:
01:af:f9:08:ce:cd:f9:cf:be:a7:49:a1:e4:bf:31:
89:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:01:0E:C0:AD:DC:D4:95:AB:8C:73:48:BA:F9:64:CB:B6:D4:C4:76
X509v3 Authority Key Identifier:
keyid:D0:B6:1D:1F:1D:9C:CD:AB:6B:6D:8E:14:50:C2:C9:36:D3:97:E6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LYdHx2czatrbY4UUMLJNtOX5nA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:46:2c:55:1e:64:aa:a1:55:d9:9b:85:b1:88:4c:bf:24:aa:
c5:2e:3e:50:e8:ce:9b:62:3d:16:86:a3:d1:f5:a5:e6:86:11:
3c:e9:d7:b6:87:30:f8:63:7f:6e:8f:12:38:d4:0b:0b:47:7f:
18:95:51:35:f0:59:20:32:a6:c0:55:f3:d7:a7:82:e0:63:7f:
ad:12:3b:3a:a2:38:bd:0f:6c:f1:11:90:7b:59:c3:c7:cb:7d:
67:9a:01:ab:26:df:6d:e0:bd:01:0d:52:43:ac:27:b7:12:cc:
72:05:ef:44:0f:f9:1a:59:38:7b:74:a8:28:23:9c:39:96:fd:
b1:c4:d5:6b:9f:8e:9a:50:c9:86:d2:8f:00:40:3a:ee:7a:89:
12:b7:6b:fe:c4:bd:a7:0e:f4:59:64:29:b6:66:96:df:51:ee:
16:27:6d:8b:a3:18:ad:21:22:f1:79:e6:ca:52:ea:cf:b5:26:
0a:7f:0e:56:5a:8d:35:23:f1:20:3a:17:d3:4b:84:f1:d6:4b:
76:ec:99:40:c8:61:9a:dd:9f:bf:94:6a:b5:cd:52:f4:91:7a:
d8:54:a2:0c:42:e6:01:fd:11:63:7f:50:ab:88:a1:67:d6:37:
f1:c9:75:fc:ab:c7:ea:04:90:f9:eb:30:51:4a:48:95:67:b6:
5f:be:5e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:48:26 2026 by rpki-client