Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
File: 0lgUed7jtZlPEcnZVkYxv1pATAc.mft (raw, json)
Hash identifier: mqRoe0tfzu9XrEiiR+jaqeFZrdITjunsswizBQxDFDU=
Subject key identifier: 7E:4A:78:9D:FD:29:BB:DE:AE:79:E4:F2:D9:85:EC:CB:0A:6C:23:01
Authority key identifier: D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
Certificate issuer: /CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Certificate serial: 019D9C2C46EF4D7E93D191CDC09775B3364A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
Manifest number: 09D0
Signing time: Fri 17 Apr 2026 16:00:40 +0000
Manifest this update: Fri 17 Apr 2026 16:00:40 +0000
Manifest next update: Sat 18 Apr 2026 16:00:40 +0000
Files and hashes: 1: 0lgUed7jtZlPEcnZVkYxv1pATAc.crl (hash: ui0G6oNlCMtnMV7ay6UO9CcOqMCKdERuzIKT5SgOnic=)
2: _anBuNNw0qAbfJJyR7NUzCXshEI.roa (hash: u/OzH4PvqgIz0IcQamVppLorgGwznO76WkLllc9zkBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:46:ef:4d:7e:93:d1:91:cd:c0:97:75:b3:36:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Validity
Not Before: Apr 17 16:00:40 2026 GMT
Not After : Apr 18 16:00:40 2026 GMT
Subject: CN=7e4a789dfd29bbdeae79e4f2d985eccb0a6c2301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ee:98:fa:38:42:15:20:10:f8:b1:0c:7b:02:
92:c9:56:59:b9:07:4e:5b:cb:8d:7d:28:2d:38:fc:
26:ef:83:11:dc:18:d6:b9:6c:66:db:66:8a:b4:04:
67:a5:3b:fd:d2:8f:46:f4:a2:5b:a1:8a:2b:35:25:
50:02:21:13:b4:b3:d6:d4:72:6f:21:11:10:34:87:
51:b2:40:7c:69:92:4e:2c:03:c8:1d:90:7d:01:71:
d2:a5:dc:9c:85:93:21:a5:04:a5:de:20:a2:96:d9:
e2:b9:f0:44:c0:8a:d2:c0:e2:65:51:ba:12:33:99:
57:85:f8:cf:9c:a2:ef:02:59:65:da:a6:61:84:56:
81:e0:00:3d:1c:7c:dc:18:97:0b:cb:72:c5:1d:7d:
77:d7:6e:2a:3c:fa:79:31:c7:9e:30:50:97:cc:16:
27:42:b5:e5:ce:5c:dc:f4:91:94:d7:c1:1b:89:cc:
49:07:43:55:35:62:eb:86:5e:52:4a:61:c5:e4:f5:
7a:b1:aa:64:54:44:7f:5d:ca:d0:e9:bf:dd:92:cb:
db:bb:11:22:36:f7:a9:90:cf:cb:b2:16:75:8a:30:
c3:21:49:79:31:c2:1b:f8:af:32:9d:fd:4e:bc:2a:
dd:d5:a8:cc:61:2c:01:03:62:76:e1:6a:21:19:64:
59:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4A:78:9D:FD:29:BB:DE:AE:79:E4:F2:D9:85:EC:CB:0A:6C:23:01
X509v3 Authority Key Identifier:
keyid:D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e2:21:a4:dc:d7:6a:ce:04:67:df:00:6b:ff:ea:7d:05:11:
ae:77:d8:34:44:d7:36:0f:f7:f4:ff:e6:71:1c:19:8a:40:f0:
82:bc:09:94:8f:b1:cf:50:ed:be:51:a5:4c:81:9b:04:f8:e0:
80:e7:2e:06:0e:9d:16:ca:fd:56:01:b1:46:f4:8d:07:90:b3:
ea:1a:ac:37:40:82:28:3d:37:ea:75:90:b2:a2:cb:50:5d:b3:
9c:44:f8:b4:ad:e9:82:bb:d4:c1:ec:4c:c9:6e:53:99:18:44:
a0:93:d0:06:43:ba:eb:e1:46:46:9e:1d:10:4f:ab:e6:f8:ed:
59:ac:0b:6b:58:9a:42:cf:cc:1a:03:2e:a2:44:21:92:81:7f:
3c:e3:5e:23:68:91:c1:cb:30:81:aa:eb:3b:ee:af:f0:3a:85:
c5:59:df:26:bd:40:cf:2d:47:7b:6a:68:ed:c4:96:4b:03:bb:
07:e0:57:4a:6b:20:b1:9c:79:54:ca:d1:7b:6f:6d:4f:01:40:
a5:76:ee:4f:8d:d1:04:ad:b9:36:53:16:c9:b4:18:8e:5d:36:
3c:57:c7:48:26:4c:64:5d:3a:ae:71:68:75:0e:55:44:73:25:
87:bc:14:eb:f0:01:e1:7b:df:41:3b:cc:2b:a4:d4:1b:34:aa:
dd:81:8f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:14:44 2026 by rpki-client