Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
File: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft (raw, json)
Hash identifier: 86rF2khhjY5ZWYHNYjcdC4KUxPibq/nseNu9xMxnLwc=
Subject key identifier: CB:98:00:41:2D:89:8D:3C:B2:FF:31:0D:10:5F:82:F2:2B:9F:91:32
Authority key identifier: D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
Certificate issuer: /CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Certificate serial: 019D985071EFF2ABEA2C2DE8F118CFEB4579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
Manifest number: 15E7
Signing time: Thu 16 Apr 2026 22:01:41 +0000
Manifest this update: Thu 16 Apr 2026 22:01:41 +0000
Manifest next update: Fri 17 Apr 2026 22:01:41 +0000
Files and hashes: 1: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl (hash: 3/7MAeOj0iEIFbrl6t7G5OR+HNlEgjtYZCYauuu2B8M=)
2: 1-fLD9auB23Q-KgYeQIubXO96o4Q.roa (hash: /JJTz3wE1LRLJ7bz0AIRldwzfH3lc1HU/FwtYIJiaSU=)
3: T-8JhhcHQ5cIwEg6IG4tP0d0W4I.roa (hash: 9CdFc+e0Ar1W8fwX0HTyCIb5Mdz7Fe3CEQ/bMI8Efhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:71:ef:f2:ab:ea:2c:2d:e8:f1:18:cf:eb:45:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Validity
Not Before: Apr 16 22:01:41 2026 GMT
Not After : Apr 17 22:01:41 2026 GMT
Subject: CN=cb9800412d898d3cb2ff310d105f82f22b9f9132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5a:0b:5a:0e:44:81:7d:c9:88:26:66:01:28:
62:c6:76:32:b0:16:51:01:b5:fe:0f:11:37:5b:e9:
be:a8:48:b0:4c:f3:cc:d5:dd:11:3f:a6:2d:ab:87:
8e:65:99:82:8f:ee:44:fc:df:ee:09:3c:49:ad:41:
c4:69:08:85:9f:1d:a2:ad:28:0d:2f:80:be:94:ba:
42:47:e8:43:3f:a0:ff:78:27:0b:c4:d1:01:ce:0f:
12:09:e8:b3:7c:51:18:b6:75:b9:8d:c2:76:73:b8:
78:db:be:15:95:e9:fd:86:55:90:17:48:84:d4:89:
ad:c6:92:26:21:c2:cc:93:64:82:90:b0:05:c6:97:
4f:57:06:b0:86:77:1b:56:79:97:91:82:90:19:3d:
d1:27:69:c7:75:79:82:e5:ee:2f:19:76:35:8d:11:
87:25:54:5b:3c:12:e2:3e:ee:8b:57:d8:cd:e1:94:
88:bb:27:df:ea:27:77:d4:54:14:35:c9:a1:e9:15:
5d:3a:db:fe:f4:8e:00:5d:99:8d:48:37:0b:93:24:
c9:86:b1:98:07:a0:44:d8:b1:23:f4:9b:ff:ec:f6:
ce:08:fb:f0:0f:32:04:a7:45:94:e6:37:09:dc:bf:
d0:d8:a5:ea:26:62:3d:2f:c5:34:60:a5:9a:0b:be:
a1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:98:00:41:2D:89:8D:3C:B2:FF:31:0D:10:5F:82:F2:2B:9F:91:32
X509v3 Authority Key Identifier:
keyid:D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:72:0c:a0:44:56:4b:f8:8c:84:a7:2e:c8:96:7b:21:e0:0f:
b4:1d:18:58:4f:ea:94:c8:4b:6c:fe:1f:d2:63:6f:33:9f:e6:
e5:38:29:df:84:dd:66:c5:26:b1:a4:44:1e:f7:3f:15:74:ee:
d6:96:4f:50:81:c7:5d:84:17:a6:ff:1f:d5:33:34:0d:b4:0b:
8d:ed:54:e2:fe:2e:21:27:b3:50:a9:1e:9c:64:b1:9a:a5:52:
b3:da:be:dd:17:da:6c:db:ea:1c:29:f4:2c:bc:d0:ef:16:c8:
e3:3a:62:e9:5b:ce:74:65:c5:c4:50:cc:c7:a3:94:de:b5:ec:
55:0b:3d:b0:39:89:c8:51:4a:ab:4a:9b:37:14:41:fc:d5:bd:
6f:b1:ba:33:81:03:44:58:37:5a:3a:4c:69:98:ed:41:20:d8:
00:6d:23:47:ec:71:79:53:a8:b5:dd:23:2f:16:59:53:40:f5:
f4:8c:c4:9b:7d:f0:70:e0:62:a1:53:e3:49:fd:ed:a1:ff:ce:
a4:f3:bb:2a:49:c8:ff:9c:62:fe:02:5a:b6:42:99:6e:7a:59:
8a:30:56:e4:9b:f6:19:71:d8:88:77:67:b8:c5:d6:26:9c:06:
76:38:e8:72:38:d8:3f:cc:33:69:47:1d:ec:06:c7:16:c4:14:
09:11:8f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:53:36 2026 by rpki-client