Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
File: 0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft (raw, json)
Hash identifier: wPOEcVXnswVZ5wI6pNsISq1kW1RbggXbJxqA0QQt2mg=
Subject key identifier: FF:58:3E:CB:C2:DE:8A:C7:79:22:C8:04:AA:21:FA:1D:C4:F4:7A:92
Authority key identifier: D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08
Certificate issuer: /CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
Certificate serial: 019D9962CCB7C812B98F247AF1EE00F8E7E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
Manifest number: 1675
Signing time: Fri 17 Apr 2026 03:01:21 +0000
Manifest this update: Fri 17 Apr 2026 03:01:21 +0000
Manifest next update: Sat 18 Apr 2026 03:01:21 +0000
Files and hashes: 1: 0NhTEIhVVHGuhHppc2WhR24nfps.roa (hash: UAiJiA/nFpUR+80xJrPSC3HfZCrrUkoKtrqsQ8RFQsc=)
2: 0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl (hash: DWioRkd1TmJlNbTQi5DykMSHfylljX/FqRrcrKa1lkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:cc:b7:c8:12:b9:8f:24:7a:f1:ee:00:f8:e7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
Validity
Not Before: Apr 17 03:01:21 2026 GMT
Not After : Apr 18 03:01:21 2026 GMT
Subject: CN=ff583ecbc2de8ac77922c804aa21fa1dc4f47a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d6:23:4c:df:35:28:f8:09:fa:cf:c6:7c:09:
db:29:0e:c9:bc:88:a5:a1:e5:04:3e:3b:89:e0:26:
d8:c6:52:64:d2:c8:22:c0:0f:b5:b4:0b:7d:7f:c5:
d6:c9:a6:14:d5:a6:99:48:48:84:ad:30:bb:82:5b:
8a:d9:06:fe:42:e0:83:53:78:47:d9:4a:8b:ca:51:
d5:e1:80:32:c2:63:3f:9b:6d:f4:91:3b:fe:a4:ae:
e1:98:82:22:a1:90:ef:dc:03:fc:64:c1:54:21:93:
23:dc:82:4c:2c:89:03:96:fa:6e:f7:b7:ad:cb:12:
e3:a1:5b:7d:58:02:9b:a5:3f:d3:66:2e:cd:14:96:
89:83:a4:82:0e:41:57:4e:f9:2a:fc:35:20:55:ed:
7d:89:9c:ac:f4:95:6c:7c:0c:c3:55:53:ac:c0:a5:
db:28:8b:56:e3:96:cc:d0:99:d5:0f:a4:01:42:93:
74:89:9e:1f:4d:5d:3e:b0:be:76:91:3e:4f:42:6d:
9b:f1:60:f6:c1:82:83:8a:ca:b9:ff:76:f7:3f:6b:
e2:ad:aa:52:99:da:72:b1:b9:55:46:85:73:b1:8e:
5b:e4:92:1d:74:a4:3e:db:4e:c5:19:d9:f7:18:ac:
2b:bf:8c:fe:53:22:80:29:fd:89:81:af:95:89:27:
8b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:58:3E:CB:C2:DE:8A:C7:79:22:C8:04:AA:21:FA:1D:C4:F4:7A:92
X509v3 Authority Key Identifier:
keyid:D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a8:5a:08:1b:dd:1a:23:c4:2e:3a:19:13:36:b8:cd:96:41:
c7:ce:87:7e:8f:d8:ed:fd:f2:28:11:4e:e2:74:8c:45:8e:02:
a0:ba:19:07:88:77:1c:0d:37:83:d7:2e:35:5d:58:c1:33:8d:
99:7f:3b:e9:da:61:fa:40:47:d9:16:c7:25:82:02:98:e0:bb:
57:fc:3f:dc:c3:95:70:ee:d2:b2:48:7a:93:72:0f:47:eb:26:
bc:42:2a:eb:e2:49:2a:c6:20:1d:c2:b3:e2:ae:b0:b5:b7:b6:
ae:7b:7c:53:95:88:c8:0a:13:74:f3:71:e8:ce:f6:b9:9b:12:
70:5a:64:ba:82:d9:96:6e:7c:77:85:c0:b9:36:d2:83:7a:c2:
cf:03:98:fc:c5:75:ea:29:f7:a3:17:71:20:9b:80:1d:a9:2e:
99:65:6c:b6:f5:db:7c:89:25:42:bc:47:bf:d6:5b:64:43:c7:
ec:c9:61:2d:1a:4a:d2:b4:9a:6b:7a:e7:c8:cf:9d:a6:22:3d:
59:64:77:7d:3f:f1:24:71:5c:c5:e3:13:0f:57:9f:9b:6d:ff:
91:f5:5e:64:33:5b:73:7a:db:78:4d:32:05:a9:3c:db:f7:2b:
5a:c9:4a:4b:5d:f8:00:08:5a:55:d5:87:81:83:7b:b7:37:5d:
f4:e8:52:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:55:30 2026 by rpki-client