Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
File: 0QOvGXZFpJQcbNsIZprwCLeRAr4.mft (raw, json)
Hash identifier: e7ch+b3Q1OB8fe7ocYYaBaVxk8IVb6qz3Wcf7ogIY3I=
Subject key identifier: 4D:60:02:C9:79:07:E1:F6:AD:CC:C9:CE:49:E1:8A:F2:92:FD:95:0E
Authority key identifier: D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
Certificate issuer: /CN=d103af197645a4941c6cdb08669af008b79102be
Certificate serial: 019D97E1C72ECDF54B101D675C43FC813B71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
Manifest number: 1232
Signing time: Thu 16 Apr 2026 20:00:49 +0000
Manifest this update: Thu 16 Apr 2026 20:00:49 +0000
Manifest next update: Fri 17 Apr 2026 20:00:49 +0000
Files and hashes: 1: 0QOvGXZFpJQcbNsIZprwCLeRAr4.crl (hash: 0LZlFWp1ZufABdaSq3RlqxItO5P/wnFZrD+cJDLdMIg=)
2: IKgcyvSIA45izSMf7tUqa3g6d94.roa (hash: bRbSeQALCJ6vQauwQMiodJiLk0I/cBj0aUju5c7LVIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:c7:2e:cd:f5:4b:10:1d:67:5c:43:fc:81:3b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d103af197645a4941c6cdb08669af008b79102be
Validity
Not Before: Apr 16 20:00:49 2026 GMT
Not After : Apr 17 20:00:49 2026 GMT
Subject: CN=4d6002c97907e1f6adccc9ce49e18af292fd950e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2c:6f:cb:4f:c8:c6:59:48:a2:77:f0:a2:cd:
a0:78:a8:29:53:33:ad:27:14:57:72:d8:6b:0b:90:
16:4e:28:99:53:03:27:25:ee:d7:d7:b0:f3:0e:e1:
c9:c2:35:91:3d:6f:63:98:13:42:7d:8d:cd:aa:04:
b2:f2:9a:bd:9f:46:5d:38:b5:1b:3f:ed:ba:57:25:
2e:da:90:a3:46:aa:66:dd:fb:ce:9f:e9:80:05:37:
27:58:a1:b5:2d:d7:50:ed:6a:d6:53:b9:ae:54:9b:
1b:51:fa:79:7a:2d:a7:ac:62:e7:71:b2:fa:79:f4:
ae:8b:36:d3:9c:ec:4b:4d:44:ba:5b:27:cd:aa:50:
9e:42:b8:e3:9b:b7:1a:fd:2f:da:7f:d8:c7:b7:6d:
5d:26:fc:96:01:32:a7:9c:73:18:48:44:e6:3c:8f:
b0:3a:2e:8a:5b:1a:0f:f4:54:89:c8:2e:4e:87:cd:
57:8e:9a:4a:f5:2a:b2:a0:e6:17:c8:8d:3e:19:a0:
f9:12:41:94:f2:0c:a3:ae:7c:cb:9e:7c:39:26:94:
71:a6:b1:e8:c0:f4:f0:44:a4:0a:dc:77:6f:6b:6e:
16:0c:e9:ea:3c:61:88:2c:10:27:d3:c7:5f:8f:07:
29:25:4b:fe:fd:9d:3d:5c:4d:10:72:27:82:3a:ce:
41:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:60:02:C9:79:07:E1:F6:AD:CC:C9:CE:49:E1:8A:F2:92:FD:95:0E
X509v3 Authority Key Identifier:
keyid:D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:8e:1f:10:ca:08:13:65:17:73:0e:54:80:ee:b4:13:d3:33:
38:01:e6:0a:e3:98:f4:c6:59:c7:e0:a9:cf:3a:a3:f9:7f:86:
25:97:27:9b:2a:87:b3:e4:58:db:a7:6e:f7:28:7d:21:7d:ad:
ae:6a:5c:62:c4:78:35:a8:be:d4:41:3a:7f:fe:be:2b:59:3b:
aa:28:87:45:ec:d6:b1:b4:4d:3a:59:65:5a:06:6e:1c:a5:8d:
b0:26:73:9e:ce:19:8e:ec:d3:87:fb:f3:1b:96:7e:01:6a:aa:
9d:ff:05:07:77:b4:d7:c1:1e:01:35:02:48:0c:f0:a0:d0:80:
dd:5c:52:6f:7e:fb:21:05:06:db:97:75:04:32:7f:7b:38:aa:
86:55:ef:05:c5:5d:e6:5a:fd:57:39:63:73:a7:f6:21:03:cf:
27:31:5c:fe:59:24:1a:1d:3d:64:16:16:3a:da:57:4e:71:c4:
d5:9c:14:f4:ea:28:99:83:d6:ad:20:15:98:d5:ee:c3:59:60:
cb:39:c0:e4:62:88:4b:c4:9c:00:6f:23:c7:e4:86:79:02:e8:
e2:48:ad:92:32:0b:12:ee:af:64:46:00:6e:03:70:29:b9:25:
61:83:e2:8a:0c:73:10:5e:74:6e:56:bf:20:63:fe:1d:1f:fc:
31:4f:34:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:47:37 2026 by rpki-client