Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
File: 0PT6gHWHU7JDohZe3ep12-7oJsQ.mft (raw, json)
Hash identifier: GsvGpK4tVKxT1qUyQx8M1sVtTK8T6UibVW1mgT7t+f4=
Subject key identifier: CC:B4:77:F8:B8:50:83:74:8F:89:FE:E7:A2:30:DD:A3:D2:D7:86:9C
Authority key identifier: D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4
Certificate issuer: /CN=d0f4fa80758753b243a2165eddea75dbeee826c4
Certificate serial: 019D98F48C4E0FED5B5B0669B522CAAEE8FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
Manifest number: 13AD
Signing time: Fri 17 Apr 2026 01:00:56 +0000
Manifest this update: Fri 17 Apr 2026 01:00:56 +0000
Manifest next update: Sat 18 Apr 2026 01:00:56 +0000
Files and hashes: 1: 0PT6gHWHU7JDohZe3ep12-7oJsQ.crl (hash: 4Ghn9CZyCp35zm+ZGTf5NQ+QBkKeh0ZoRlRBJfl0Qp8=)
2: pLi1qq2wcSmdgCiUnjjCoQErQdA.roa (hash: 7prO26MADaOtqZ/YBeNHajM4pUEvbdbYtkMA592/T+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:8c:4e:0f:ed:5b:5b:06:69:b5:22:ca:ae:e8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f4fa80758753b243a2165eddea75dbeee826c4
Validity
Not Before: Apr 17 01:00:56 2026 GMT
Not After : Apr 18 01:00:56 2026 GMT
Subject: CN=ccb477f8b85083748f89fee7a230dda3d2d7869c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:07:a4:f1:87:18:67:c7:66:88:30:4a:b1:21:
72:5c:69:97:e2:83:e0:98:ca:5b:bd:04:3e:a9:da:
22:4f:f0:ed:c2:53:5f:76:3e:70:4b:1b:76:5e:ff:
73:44:13:c7:92:72:20:00:8f:98:7b:33:da:98:e0:
69:c8:26:16:71:82:2d:2c:e1:24:b7:52:cd:0d:51:
6d:55:f1:1d:8f:f0:e0:63:75:73:80:7e:1c:58:97:
60:4b:71:96:4d:6a:dc:a9:9c:6a:19:b7:3d:83:56:
5d:a6:d6:07:a2:09:63:1f:41:e1:d2:2a:09:41:d9:
c0:04:5e:45:c2:97:96:96:66:ae:05:8d:85:60:6b:
60:c8:ab:8a:f9:af:8f:29:26:70:2b:51:1a:79:de:
3e:c6:23:f3:9c:3f:95:c0:37:4a:a0:46:cb:f4:e1:
38:c6:c8:fd:56:3a:09:47:c7:18:4e:95:80:4c:59:
c4:b2:a8:7a:65:8f:21:a9:54:c4:f4:fc:0f:07:36:
95:0f:c9:fb:22:91:7d:52:42:99:db:63:59:8f:04:
06:2b:68:28:a5:77:85:13:90:e3:bf:bd:2f:b4:bb:
82:ca:fe:4c:e0:7f:b6:00:f6:2f:b8:60:47:f8:3b:
e8:d2:92:b6:55:81:15:25:02:9f:48:95:01:00:07:
b0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B4:77:F8:B8:50:83:74:8F:89:FE:E7:A2:30:DD:A3:D2:D7:86:9C
X509v3 Authority Key Identifier:
keyid:D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:69:fa:4b:0e:e7:76:7c:b3:5b:4e:bd:1a:a0:eb:1e:9d:f4:
54:ff:ed:2d:13:12:06:5f:92:c3:96:dd:9d:6d:7c:4e:68:ab:
96:19:c1:c4:09:d0:af:b4:74:fe:55:e7:66:50:16:90:e7:88:
92:8e:da:f2:08:48:05:93:6d:43:2e:71:86:a2:00:d8:5c:df:
ee:e1:bc:c5:3f:e7:f9:42:f4:50:47:6e:00:73:de:62:13:2f:
8a:ab:48:5a:1b:a1:2c:66:39:ff:e4:34:ac:c7:3d:d0:a9:b4:
6a:19:9f:2a:b1:65:43:e3:8e:bd:cd:69:71:56:72:e4:a3:83:
b6:e4:ff:86:18:32:1f:96:30:08:ae:81:2c:dd:80:a9:55:56:
47:eb:33:8c:1b:84:94:e1:88:5f:57:89:49:d6:aa:27:f3:5e:
1a:4c:c7:24:83:6d:9e:5e:75:a5:a4:7d:1b:1e:a3:17:6a:04:
c2:1d:62:c9:d5:e3:b9:ca:0b:b1:fd:ec:c3:b6:90:fd:65:ec:
7d:32:4d:40:fa:fc:2f:4d:85:ea:d0:a9:22:db:33:41:6f:ae:
08:f2:c9:a5:7a:70:51:c3:b1:57:0e:d3:96:cb:0e:dc:bc:c9:
72:a9:2d:4b:33:e8:da:4e:07:ae:3f:d1:f7:a4:73:09:1e:a1:
ee:6d:56:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:31:49 2026 by rpki-client