Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
File: 0mKOBpte2LRVk0O1tn9atPkiUf4.mft (raw, json)
Hash identifier: GTencVvQJ0AQy2LMcSXxYGnk3mBVa7QlCzilD6pAGgw=
Subject key identifier: 2C:7A:A6:D1:22:13:C0:AE:41:A3:93:61:30:7E:3B:99:FF:70:4D:2F
Authority key identifier: D2:62:8E:06:9B:5E:D8:B4:55:93:43:B5:B6:7F:5A:B4:F9:22:51:FE
Certificate issuer: /CN=d2628e069b5ed8b4559343b5b67f5ab4f92251fe
Certificate serial: 019D9D080468C377E7DB38E1E82208373EEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
Manifest number: 040F
Signing time: Fri 17 Apr 2026 20:00:41 +0000
Manifest this update: Fri 17 Apr 2026 20:00:41 +0000
Manifest next update: Sat 18 Apr 2026 20:00:41 +0000
Files and hashes: 1: 0mKOBpte2LRVk0O1tn9atPkiUf4.crl (hash: qmXCl8ArmvKf0E8+I0jdddRukfNLJojXq/kll3aJRiQ=)
2: eypU5gakI37ZRxsTjD1X4DoOVfo.roa (hash: hM1K52QM5/jrbLf53wcNduMHGRDz/fwXSTlOlM9cG8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 20:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:08:04:68:c3:77:e7:db:38:e1:e8:22:08:37:3e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2628e069b5ed8b4559343b5b67f5ab4f92251fe
Validity
Not Before: Apr 17 20:00:41 2026 GMT
Not After : Apr 18 20:00:41 2026 GMT
Subject: CN=2c7aa6d12213c0ae41a39361307e3b99ff704d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c5:1a:ff:c3:67:e8:c9:c4:28:0e:6e:33:c1:
0f:3b:e5:49:b3:51:2a:e0:db:d9:44:91:24:65:10:
26:81:e0:4a:03:d5:2a:42:fa:a2:e6:6e:25:b0:68:
cc:26:8c:3f:43:96:e9:4c:28:35:c0:ec:7a:ff:8c:
e4:5d:61:23:01:4f:01:d6:a0:48:68:ec:75:93:7c:
44:15:b2:f8:48:89:48:b2:cb:d0:07:df:ef:4d:71:
84:62:05:09:2d:91:72:50:fd:0f:00:80:56:93:a7:
b5:24:2a:6c:e0:6c:fc:31:34:f9:f9:ba:85:ca:bd:
3c:f9:1a:f5:a9:1e:90:6c:c1:da:56:e8:a2:25:b8:
4b:82:fa:44:96:b9:44:7b:38:9b:ef:83:ac:86:2e:
c5:ad:39:60:90:30:84:b5:af:84:bc:71:31:aa:03:
14:49:75:0d:d1:19:4c:5b:f3:69:68:f8:e7:b3:72:
ee:9a:15:93:c5:e3:00:aa:e2:49:04:1b:6c:a1:e9:
e3:e5:be:b9:b0:53:1c:3c:2e:d3:0f:12:e5:6c:db:
56:75:a7:34:0b:1a:63:f7:f5:f0:92:cd:3c:5f:03:
72:6f:e1:15:f1:e9:1f:a3:7b:29:5e:cd:ad:7d:da:
ed:03:e6:97:4b:4b:b3:ca:73:b8:1d:17:fc:de:17:
82:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:7A:A6:D1:22:13:C0:AE:41:A3:93:61:30:7E:3B:99:FF:70:4D:2F
X509v3 Authority Key Identifier:
keyid:D2:62:8E:06:9B:5E:D8:B4:55:93:43:B5:B6:7F:5A:B4:F9:22:51:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:24:5d:76:8c:47:8f:9c:2e:71:81:71:b0:3f:e6:43:cb:3e:
43:e7:49:36:fa:59:48:65:20:ee:80:f6:3d:85:22:3b:cf:b7:
06:87:8b:0d:b9:11:57:76:f3:6a:5b:0f:ef:d4:40:b7:28:b5:
ac:da:c0:55:ea:a8:a7:ec:ad:e4:d7:e6:4d:81:46:d0:2f:75:
dc:3b:29:26:04:b5:9e:97:35:00:9a:01:2d:33:dd:c5:50:7b:
5e:aa:b3:d1:d3:99:22:4e:dd:0b:0b:b0:c2:b9:61:8e:01:28:
e7:a7:5f:c1:f2:83:54:c6:50:30:0a:4c:1f:75:b6:57:24:62:
25:0b:99:c6:08:67:bf:fa:99:16:d5:fe:7f:35:a0:18:54:75:
f5:f5:8a:be:0f:c7:4f:e9:0b:84:c5:da:80:c5:f4:9f:fe:d1:
71:a7:91:7c:bf:05:c6:76:dd:6e:6f:c0:3a:17:47:f7:2e:6a:
4f:fa:47:3e:fa:54:4b:71:09:8e:c2:2f:5b:a7:cb:67:84:a0:
55:29:60:bb:21:15:cb:cf:78:43:e4:b6:77:20:fe:7d:54:34:
fc:2d:6f:14:16:a0:dc:37:8b:ae:e1:8f:0b:3f:be:63:3d:4e:
36:46:74:13:ef:38:4f:4d:7f:55:21:de:fa:95:1a:db:33:d2:
34:66:c8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:58:45 2026 by rpki-client