Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
File: 0z4TEAje9wWkF_DUDRSKNvJaGjk.mft (raw, json)
Hash identifier: fQqfMLNueg81sioacNcjbyp6bv9vz84lqI33zn33qXk=
Subject key identifier: 56:77:F5:B4:C1:F9:31:BE:86:E1:F6:0D:2C:BD:6B:7C:F2:11:A2:97
Authority key identifier: D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39
Certificate issuer: /CN=d33e131008def705a417f0d40d148a36f25a1a39
Certificate serial: 019D9A74ED52031D8806E4E527FE0AC929DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
Manifest number: 12BD
Signing time: Fri 17 Apr 2026 08:00:47 +0000
Manifest this update: Fri 17 Apr 2026 08:00:47 +0000
Manifest next update: Sat 18 Apr 2026 08:00:47 +0000
Files and hashes: 1: 0z4TEAje9wWkF_DUDRSKNvJaGjk.crl (hash: J4TT3Ne1Ydehwpv76D1jiInbHsrlgfPciISu1HhldVY=)
2: q5b2DuF1EAMOC22AlAeZQWFkxpU.roa (hash: 6KXA/tbOOb8+a5Q0zFi+dIBOh0aAYoOzdzGbwggmS5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:ed:52:03:1d:88:06:e4:e5:27:fe:0a:c9:29:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33e131008def705a417f0d40d148a36f25a1a39
Validity
Not Before: Apr 17 08:00:47 2026 GMT
Not After : Apr 18 08:00:47 2026 GMT
Subject: CN=5677f5b4c1f931be86e1f60d2cbd6b7cf211a297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:50:bc:9d:45:76:d1:99:6a:0c:e1:65:73:94:
d3:2e:e1:8c:ee:66:29:e6:2f:59:ca:a6:f9:60:af:
fc:32:7e:b9:13:88:2b:7a:27:b8:03:52:98:0f:39:
4a:d7:a1:54:90:80:bb:1e:9a:32:f9:39:c1:36:77:
60:38:4f:54:74:cb:a9:28:51:0e:c7:13:8a:43:62:
de:31:82:05:69:50:c9:d4:e9:c9:f5:80:05:97:ba:
06:44:ad:9a:26:fb:53:3e:3c:c8:93:ed:53:4a:28:
50:4d:6f:47:cf:8b:8e:b1:14:bd:19:ef:7b:5d:d3:
ed:7f:d6:5b:a7:6b:99:26:ff:1c:18:77:df:62:f1:
5f:83:5b:2a:5f:a9:8d:23:cb:79:2e:28:cb:23:02:
a5:28:57:2e:fa:a7:ea:3d:ff:80:5f:50:04:9a:d3:
90:96:0d:80:42:d5:3b:24:20:6c:cf:6a:d0:ba:ba:
e7:36:69:b3:b4:1d:e4:d7:03:a7:e3:37:1f:c4:6b:
6d:73:9a:60:5b:3f:8f:dd:9f:d5:27:69:33:fe:86:
95:dd:28:7b:f1:ed:e6:e7:48:ea:8b:63:05:ff:95:
cf:cd:96:de:60:48:12:d8:ec:7c:ce:67:60:b8:f5:
19:9c:48:14:f3:6d:9f:96:4b:1b:28:75:cc:c6:a3:
cb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:77:F5:B4:C1:F9:31:BE:86:E1:F6:0D:2C:BD:6B:7C:F2:11:A2:97
X509v3 Authority Key Identifier:
keyid:D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e3:c9:4a:5c:da:6d:69:0a:98:a4:c7:a5:e0:cd:c0:39:d1:
ab:67:6c:11:23:69:ef:30:48:84:27:ef:dd:b7:e1:a5:20:2f:
49:16:7b:61:86:72:14:67:60:34:e3:81:f9:b3:4d:a5:9f:28:
7d:1f:83:77:59:2a:48:94:56:6f:d4:93:36:dc:14:2b:0d:77:
91:26:5e:4d:24:bd:f7:fb:82:47:a8:ff:95:5b:e6:e4:df:43:
5d:0d:90:6d:5b:dc:fe:fc:88:fc:5e:54:fd:76:60:12:7b:6c:
51:5a:18:38:7a:13:05:9e:26:4d:53:5c:ec:48:69:4d:bd:8a:
fb:16:f8:ff:a6:d2:29:62:12:05:1e:7e:3d:a4:ef:f2:ec:3a:
e7:01:dc:64:f3:d0:16:e0:fd:0e:04:34:da:14:4c:21:43:e0:
4f:68:12:74:85:fd:09:7d:1c:4b:44:65:e4:0e:94:74:ce:b2:
a3:6f:b3:5b:f7:3f:4f:a3:18:a1:51:4d:26:56:cf:69:0d:d0:
a2:41:de:84:cf:3a:0e:c9:ba:6d:b6:9c:22:77:c5:7a:6b:87:
57:f5:7e:74:5e:ad:60:e8:b9:10:5c:3e:c9:b9:ca:c8:67:ab:
8b:6f:02:61:34:bb:fe:4f:5d:31:76:92:e8:a6:f2:e5:e4:90:
54:14:c7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:28:24 2026 by rpki-client