Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
File: 0pigcUzBvyWsfH8c9sKIbIxhkqM.mft (raw, json)
Hash identifier: SpdGHOFXm6AEVvYeBg2REmQA1mwMOCwYH4ThT2UCtPc=
Subject key identifier: 44:4A:61:E7:09:6A:25:65:0A:4E:E9:5D:FE:56:97:6B:A4:3F:C6:5F
Authority key identifier: D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3
Certificate issuer: /CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3
Certificate serial: 019D9A06AF0EC53C7C7D3A66CF08AF7E396D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
Manifest number: 063D
Signing time: Fri 17 Apr 2026 06:00:22 +0000
Manifest this update: Fri 17 Apr 2026 06:00:22 +0000
Manifest next update: Sat 18 Apr 2026 06:00:22 +0000
Files and hashes: 1: 0pigcUzBvyWsfH8c9sKIbIxhkqM.crl (hash: 5M+jB/h3f0kwy6KHdJb8HphZzQ9bsOjNem9cu1dJFDA=)
2: cMXu7WrvsmC-lThLKVR5Js2GYXY.roa (hash: EpVFpanfzZyTV+MCY5Rt4j7mVt0TS3sr2EacwZSVOVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:af:0e:c5:3c:7c:7d:3a:66:cf:08:af:7e:39:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3
Validity
Not Before: Apr 17 06:00:22 2026 GMT
Not After : Apr 18 06:00:22 2026 GMT
Subject: CN=444a61e7096a25650a4ee95dfe56976ba43fc65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:08:b2:df:45:9e:dc:61:fa:1b:89:61:82:fb:
8e:13:31:f6:00:54:c7:48:7f:c1:d9:e6:d5:77:88:
0b:38:d3:9d:dd:c2:77:5e:47:d1:4b:d8:17:36:41:
26:37:3a:d2:27:9e:cb:20:54:02:ea:08:94:b3:68:
a3:84:ca:8c:7e:21:0e:b0:e1:14:16:e7:80:fc:ac:
e3:ee:1b:06:4d:9b:35:2a:d3:f7:e9:c6:fd:7d:51:
b8:89:71:d9:c3:b8:ee:04:59:23:aa:a7:08:35:f5:
3a:84:95:a5:86:b1:e1:79:7e:fa:62:6d:f7:ed:de:
f8:9d:ad:20:45:42:75:de:5a:07:61:93:73:a2:b1:
33:36:03:93:31:d3:96:46:e5:93:9c:15:67:d4:a5:
5a:fc:58:d8:12:b0:d6:76:e3:3d:e2:09:9a:55:75:
97:48:c9:d3:85:a4:21:bd:1e:cc:3b:c0:b4:28:77:
0e:f8:fa:05:50:c3:3a:ed:d4:a9:c2:70:19:e7:3d:
d0:d4:aa:fb:32:e6:f0:a1:b5:89:84:7f:56:d9:24:
5b:20:28:d9:86:ca:ea:fb:6e:6b:9c:4d:0c:ec:ce:
07:2a:5e:30:73:c8:f5:3a:12:f8:b7:ea:3c:e9:88:
55:d8:72:30:dd:60:8f:04:7e:16:3c:fe:bd:89:d9:
71:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:4A:61:E7:09:6A:25:65:0A:4E:E9:5D:FE:56:97:6B:A4:3F:C6:5F
X509v3 Authority Key Identifier:
keyid:D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b7:24:26:67:d7:7e:6d:b9:d5:6a:f0:fe:58:d0:ef:6d:25:
af:60:74:f4:c6:10:ca:64:cf:48:3c:37:13:e7:0f:14:e8:67:
cc:13:c8:8c:b3:57:97:c8:51:f3:cc:2b:63:9a:5d:35:7a:d4:
55:63:58:51:d1:5a:24:8f:47:1a:1a:25:c7:30:44:91:e8:02:
95:c5:48:b1:26:f2:5a:4b:b9:52:9e:84:50:03:6b:2f:09:8c:
72:c2:98:96:92:42:4b:f4:9b:f2:c7:f4:fa:1c:e6:f7:9c:bf:
af:18:db:e4:f5:f0:43:df:45:aa:eb:d9:ae:5d:b7:df:09:51:
e0:af:9c:e9:54:af:dd:8f:ca:96:b3:2b:25:ed:61:82:06:e0:
fb:5c:79:8b:7e:c9:14:56:aa:34:2b:d2:47:b7:1c:f4:c4:73:
5a:48:13:d7:d1:bf:f3:83:75:ec:11:a0:48:18:bb:1c:c4:2e:
ec:85:b4:83:56:65:3f:9c:2c:7f:d0:e8:67:0e:d1:ad:41:33:
09:14:30:82:6d:bc:ab:04:44:f3:20:6f:70:13:61:c1:25:aa:
c5:f7:75:47:08:46:72:b9:ae:78:44:f2:13:7d:0b:ac:8c:da:
ce:fb:2a:cf:7b:2b:ae:b3:b6:66:a4:70:6b:1b:f1:57:f7:66:
70:43:74:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:58:49 2026 by rpki-client