Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
File: 0ccPHzPFgdt4oUm8htc5zcfOJqc.mft (raw, json)
Hash identifier: FvGnKDKXE8GUYpPyFqPYyDA7Stl3B401KMCOnZHawGg=
Subject key identifier: 6A:EF:F6:2F:17:97:6A:A0:96:3B:93:98:38:39:88:14:94:3C:6E:86
Authority key identifier: D1:C7:0F:1F:33:C5:81:DB:78:A1:49:BC:86:D7:39:CD:C7:CE:26:A7
Certificate issuer: /CN=d1c70f1f33c581db78a149bc86d739cdc7ce26a7
Certificate serial: 019D996312EB26F26D6F3C681AC6D87E28F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
Manifest number: 0758
Signing time: Fri 17 Apr 2026 03:01:40 +0000
Manifest this update: Fri 17 Apr 2026 03:01:40 +0000
Manifest next update: Sat 18 Apr 2026 03:01:40 +0000
Files and hashes: 1: 0ccPHzPFgdt4oUm8htc5zcfOJqc.crl (hash: 0LPRvyfJwcJ7r/HL56jIawzVwGgCYopE9MVFEUZmf2A=)
2: 6-x6MjhIWmKkKN8PSvag3_NMayM.roa (hash: DJxqLKJWXBtl7f6AjOofGTskuyYrFGFq1UI9pHAp0p0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:63:12:eb:26:f2:6d:6f:3c:68:1a:c6:d8:7e:28:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c70f1f33c581db78a149bc86d739cdc7ce26a7
Validity
Not Before: Apr 17 03:01:40 2026 GMT
Not After : Apr 18 03:01:40 2026 GMT
Subject: CN=6aeff62f17976aa0963b939838398814943c6e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0a:25:73:7d:75:43:3b:9d:ca:83:9e:61:ff:
38:46:3c:19:94:e6:31:77:0f:9d:a8:c9:b7:6f:0b:
ad:ee:da:6a:e8:19:ee:86:5d:2e:31:81:69:97:5c:
43:15:e6:5c:55:e1:73:83:b4:08:eb:ad:09:de:57:
75:d9:2e:c4:29:a6:6d:09:63:85:c6:41:b3:13:7f:
7d:eb:3c:05:a5:39:0f:6d:21:84:95:cc:9c:21:50:
2b:38:d2:6c:2e:a6:96:ec:00:e2:b8:5e:23:98:3e:
ab:c2:70:b3:11:cf:3a:5e:ac:71:de:a9:2e:c6:53:
5d:0a:b6:5e:5d:dd:12:e4:f3:c1:04:51:54:05:73:
87:73:03:69:3d:24:64:13:b2:24:83:63:6c:14:53:
0c:77:3c:14:33:43:21:eb:3a:26:21:f7:8d:26:26:
e4:9e:95:fb:2e:50:09:ff:eb:ce:31:6e:e6:04:db:
ba:75:c1:64:9b:76:5a:c8:85:36:39:ea:04:2b:7a:
07:a7:5e:f7:a6:4d:ed:02:3c:d0:9d:d1:0e:16:5b:
3b:4b:39:0c:af:e3:8c:cf:d1:e4:02:a4:9d:cf:56:
b3:1b:77:01:c8:c5:60:52:b3:dc:e5:02:af:c4:f7:
31:8a:08:34:7e:c4:a2:9f:72:b3:d2:ea:1a:b5:66:
5b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EF:F6:2F:17:97:6A:A0:96:3B:93:98:38:39:88:14:94:3C:6E:86
X509v3 Authority Key Identifier:
keyid:D1:C7:0F:1F:33:C5:81:DB:78:A1:49:BC:86:D7:39:CD:C7:CE:26:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:15:4c:e6:44:37:4d:b8:3d:8f:e4:5a:6d:cf:8e:80:00:85:
44:e8:05:8d:94:5c:cb:f7:11:80:ee:35:00:e5:06:bd:ef:ee:
af:23:a7:6c:b1:f5:a8:9e:cf:e1:4c:3a:88:2e:4e:c7:03:f2:
f2:9a:26:2f:3d:53:a2:76:21:5d:bd:50:19:a6:54:1b:49:d9:
0c:60:55:f1:5a:d2:8e:bc:98:98:27:d0:98:a9:31:0e:7e:9d:
e9:58:e0:27:d8:12:d4:f8:51:77:3e:0e:d8:41:df:b3:93:b6:
fa:70:dc:38:ae:0d:8d:ce:7a:de:3c:70:57:14:f1:8c:37:ae:
ce:03:6c:2c:50:ab:3b:36:15:d8:83:46:3e:96:50:b8:4c:14:
c1:32:21:67:ad:7d:22:55:33:a6:d3:65:82:83:e5:b6:26:26:
ee:7d:96:9e:61:37:72:a0:9c:00:ef:20:9e:b9:5b:83:b0:aa:
22:da:cb:63:25:f0:83:e2:13:ba:da:15:7d:ae:33:62:09:d5:
dc:7b:56:d8:c4:97:f9:45:aa:44:ee:7a:db:54:be:9c:c2:f1:
90:c6:30:84:4b:25:8a:86:51:27:aa:74:9d:c8:c3:9c:4d:f1:
21:88:6f:91:d1:b3:8c:24:64:7d:24:b4:8f:43:0e:b6:ea:88:
14:3a:0e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:26:24 2026 by rpki-client