Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
File: 0RaDXQN3hmIKnp96DjYEmLtlQSc.mft (raw, json)
Hash identifier: 9MDyVXw/jDWz+OGYwmDMpfA/H7nM/VL4EpnY5/GDqao=
Subject key identifier: 7A:26:6E:5B:8D:04:46:34:E3:D3:AC:49:AE:C2:13:67:CC:2F:59:2D
Authority key identifier: D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
Certificate issuer: /CN=d116835d037786620a9e9f7a0e360498bb654127
Certificate serial: 019D97E23365F6859FE1259A61AD2251A8C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
Manifest number: 0CD8
Signing time: Thu 16 Apr 2026 20:01:17 +0000
Manifest this update: Thu 16 Apr 2026 20:01:17 +0000
Manifest next update: Fri 17 Apr 2026 20:01:17 +0000
Files and hashes: 1: 0RaDXQN3hmIKnp96DjYEmLtlQSc.crl (hash: o9+okMDWJrXDfHdZn+QfONJ2a33VdaZp0vXvABMsKCY=)
2: GxXxtmytTeePZFqMmjKewv0phDk.roa (hash: DQNMt4Qmq5pWK/m+65wngsoZgA7+I6etgVuEFLBf9P8=)
3: hrfVvtnK2yUD8q8kqhgwgxBrIWA.roa (hash: knPxWaldCF2NZQN6BPLTcSuiJLTa63/Ehra1OYIbZUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:33:65:f6:85:9f:e1:25:9a:61:ad:22:51:a8:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d116835d037786620a9e9f7a0e360498bb654127
Validity
Not Before: Apr 16 20:01:17 2026 GMT
Not After : Apr 17 20:01:17 2026 GMT
Subject: CN=7a266e5b8d044634e3d3ac49aec21367cc2f592d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cf:7e:54:36:32:e8:5c:db:70:df:cf:9f:81:
97:d3:7f:67:d4:da:34:25:13:b9:0c:d1:b9:ef:53:
26:55:f9:10:01:8f:17:3f:b3:f5:23:84:92:f6:b6:
73:5c:d6:80:1a:07:55:2d:1f:71:c8:2e:fe:6f:c1:
90:2b:82:4c:a0:b5:eb:22:fa:ba:e8:2f:65:03:90:
51:a5:eb:87:b6:11:10:09:8c:d9:da:72:6c:6a:af:
89:aa:9b:62:4b:5c:3d:98:2b:51:5f:5b:70:7d:ad:
b6:4d:9c:e2:f7:df:69:ac:ee:bd:67:19:a0:85:64:
68:36:c3:d9:08:a8:4a:61:48:43:9f:4f:32:ae:fe:
a3:d8:be:a4:72:c3:87:62:48:b6:6b:ad:24:20:b3:
d8:d8:fa:21:8d:3c:b8:01:24:e0:ff:8e:14:1a:39:
cc:0a:5b:9c:ed:4c:d0:20:fb:86:a3:a4:2b:c7:17:
9d:b8:80:71:80:d9:02:70:40:c1:78:61:d1:1e:e8:
6a:44:1b:ad:58:84:9f:14:39:46:06:e5:41:c9:98:
0c:c1:6c:e3:67:be:b0:a3:6a:4f:87:1e:20:15:05:
08:4d:4d:67:2a:95:3d:c4:07:f7:4b:50:f3:8b:10:
7a:55:86:9a:32:29:7b:bf:bf:bb:f7:e1:bb:ac:e9:
3e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:26:6E:5B:8D:04:46:34:E3:D3:AC:49:AE:C2:13:67:CC:2F:59:2D
X509v3 Authority Key Identifier:
keyid:D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:74:f0:c8:21:1d:45:88:0b:0f:20:d4:01:18:4e:7b:45:23:
0f:eb:65:63:10:15:7d:35:5f:e0:d2:a5:b0:5c:98:ed:7f:3f:
8e:2f:b0:40:1e:72:9d:43:60:a2:a0:1a:ed:9a:e4:1c:a7:f2:
a5:79:23:6b:65:46:83:63:ea:88:66:d2:5f:0d:5b:80:49:14:
36:67:34:d4:dc:d3:86:8b:54:8c:de:9f:79:87:4f:87:22:fb:
45:12:1e:e4:30:af:b6:f0:8e:a5:1d:8d:6c:9d:78:cb:cf:15:
6a:15:6e:96:64:a5:1a:47:c7:ba:ad:b7:01:d3:ea:96:a8:fa:
04:39:29:31:b3:83:e8:2a:cb:91:6e:01:c5:7d:56:de:8e:0e:
0c:89:f3:20:10:71:76:29:08:49:72:3a:28:2c:44:ed:65:88:
43:bc:3f:39:6e:1a:ed:05:14:c3:5d:23:fe:76:d4:ac:c3:8f:
f0:63:fe:51:64:e8:f7:31:13:e6:0d:ae:44:e6:af:39:c3:7a:
46:70:33:2f:f9:ee:d1:2e:ad:e1:39:d3:0a:d3:1d:5e:dc:55:
8f:b0:56:cd:e4:77:67:75:0e:5c:c6:58:39:1e:7e:7d:7e:c6:
dd:f2:c2:4e:65:13:64:a4:83:99:b7:3d:93:d0:c0:2b:7f:5f:
a8:52:1a:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2X4jNl9oWf4SWaYa0iUajIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMTY4MzVkMDM3Nzg2NjIwYTllOWY3YTBlMzYwNDk4YmI2
NTQxMjcwHhcNMjYwNDE2MjAwMTE3WhcNMjYwNDE3MjAwMTE3WjAzMTEwLwYDVQQD
Eyg3YTI2NmU1YjhkMDQ0NjM0ZTNkM2FjNDlhZWMyMTM2N2NjMmY1OTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1s9+VDYy6FzbcN/Pn4GX039n1No0
JRO5DNG571MmVfkQAY8XP7P1I4SS9rZzXNaAGgdVLR9xyC7+b8GQK4JMoLXrIvq6
6C9lA5BRpeuHthEQCYzZ2nJsaq+JqptiS1w9mCtRX1twfa22TZzi999prO69Zxmg
hWRoNsPZCKhKYUhDn08yrv6j2L6kcsOHYki2a60kILPY2PohjTy4ASTg/44UGjnM
Cluc7UzQIPuGo6QrxxeduIBxgNkCcEDBeGHRHuhqRButWISfFDlGBuVByZgMwWzj
Z76wo2pPhx4gFQUITU1nKpU9xAf3S1DzixB6VYaaMil7v7+79+G7rOk+5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHombluNBEY049OsSa7CE2fML1ktMB8GA1UdIwQY
MBaAFNEWg10Dd4ZiCp6feg42BJi7ZUEnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFJhRFhRTjNobUlLbnA5NkRqWUVtTHRsUVNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9mNTA3Y2ItNzM3MS00YWQxLWI3ZTMt
MTZhN2Q2MGQ1YmVhLzEvMFJhRFhRTjNobUlLbnA5NkRqWUVtTHRsUVNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9mNTA3Y2ItNzM3MS00YWQxLWI3ZTMtMTZhN2Q2MGQ1YmVh
LzEvMFJhRFhRTjNobUlLbnA5NkRqWUVtTHRsUVNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARnTwyCEd
RYgLDyDUARhOe0UjD+tlYxAVfTVf4NKlsFyY7X8/ji+wQB5ynUNgoqAa7ZrkHKfy
pXkja2VGg2PqiGbSXw1bgEkUNmc01NzThotUjN6feYdPhyL7RRIe5DCvtvCOpR2N
bJ14y88VahVulmSlGkfHuq23AdPqlqj6BDkpMbOD6CrLkW4BxX1W3o4ODInzIBBx
dikISXI6KCxE7WWIQ7w/OW4a7QUUw10j/nbUrMOP8GP+UWTo9zET5g2uROavOcN6
RnAzL/nu0S6t4TnTCtMdXtxVj7BWzeR3Z3UOXMZYOR5+fX7G3fLCTmUTZKSDmbc9
k9DAK39fqFIa0g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:01:26 2026 by rpki-client