Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
File: 0d4HoaH2W9EW4R-fEQhgS26VzP0.mft (raw, json)
Hash identifier: eAJhh+wRjcgMg0+UuWH8QKzmqb8vLWcIjWHYC3dENmM=
Subject key identifier: 91:07:DA:AB:A4:8E:85:BF:74:DE:50:C1:CF:CD:3D:2D:55:B0:04:9D
Authority key identifier: D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
Certificate issuer: /CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Certificate serial: 019D9AAC098F417CC49B8935F516A1A87744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
Manifest number: 1458
Signing time: Fri 17 Apr 2026 09:00:58 +0000
Manifest this update: Fri 17 Apr 2026 09:00:58 +0000
Manifest next update: Sat 18 Apr 2026 09:00:58 +0000
Files and hashes: 1: 0d4HoaH2W9EW4R-fEQhgS26VzP0.crl (hash: s9kaQknhCkXsMjPm6FLV/N4I7VO07ii8IKGgLs36A00=)
2: 6AcW6a22cinoLIymW2byGAd7uWo.roa (hash: RoxEP6kBPzD8q8xHwCRknSTvIS7/SOyyVCFWMK8wKF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:09:8f:41:7c:c4:9b:89:35:f5:16:a1:a8:77:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Validity
Not Before: Apr 17 09:00:58 2026 GMT
Not After : Apr 18 09:00:58 2026 GMT
Subject: CN=9107daaba48e85bf74de50c1cfcd3d2d55b0049d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:64:76:09:86:13:1a:ff:0e:a2:4a:ac:44:71:
5f:59:70:1b:22:24:88:04:31:65:10:98:fc:e4:4d:
13:9a:e9:88:03:9f:16:e0:bf:14:05:18:7d:a1:e0:
bf:ac:09:92:e8:55:b7:d6:86:1d:96:b5:39:6c:2f:
b1:46:25:c5:3a:2c:05:4a:5c:d5:7e:8d:1f:5a:c8:
73:b7:8c:d6:74:2e:fb:dc:0c:68:d5:49:89:bc:13:
0b:bb:28:02:ca:a4:e2:3c:bd:5f:80:5e:cf:7f:3c:
56:76:cb:e2:61:d9:fc:d9:65:e5:fd:10:4e:11:1c:
af:5e:4b:47:60:d1:ab:76:dc:97:ae:e6:e1:59:16:
79:5d:cd:a4:4a:ce:39:f6:f0:86:40:0d:90:8e:c5:
30:3b:89:27:7d:29:07:cf:83:70:b9:21:37:74:79:
81:9a:76:7d:06:5d:d7:b9:7e:5f:7e:4a:13:3a:1c:
a5:b7:47:05:d4:88:64:dd:de:5a:77:35:96:ce:99:
a6:bc:cf:b1:66:ef:dc:ad:0b:e7:3e:e2:40:41:47:
4c:c3:5a:30:86:7b:40:6c:5d:eb:7f:04:92:ea:de:
05:ad:90:d7:cd:5f:5e:a6:cb:60:ee:14:69:54:71:
18:2b:6e:f9:5c:96:fe:2e:9f:cf:4f:ff:cd:3c:70:
5b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:07:DA:AB:A4:8E:85:BF:74:DE:50:C1:CF:CD:3D:2D:55:B0:04:9D
X509v3 Authority Key Identifier:
keyid:D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ed:48:7b:53:b3:a7:10:e8:ca:a9:2c:79:0d:06:3a:18:7d:
0f:b7:e2:14:fe:13:a1:e1:8b:49:a1:fe:e7:94:1c:e2:dc:df:
69:e2:f2:20:b6:e1:31:6b:c2:17:2c:a3:c9:cf:4b:a2:92:0a:
ba:dd:30:68:39:ce:81:d1:2c:22:10:3c:12:3d:bf:49:32:64:
85:e7:d7:27:ab:9a:52:f9:5e:65:99:6f:d3:77:c5:ec:1d:82:
fe:0f:4a:6a:93:97:11:94:e7:e0:d7:23:1e:1e:06:0d:90:21:
86:1f:8c:9d:19:a2:34:57:ff:8c:d5:e0:75:9e:dd:e0:04:e6:
56:6e:a6:91:8e:2d:0c:d9:56:e4:1e:98:6f:5a:5f:7f:fb:7d:
7a:59:4b:a2:3f:9f:03:b1:b0:0b:42:a7:64:e0:97:c7:0b:e5:
b8:e0:30:1f:8b:9c:09:26:f9:7f:5e:2d:24:e6:a1:2c:f0:c6:
55:b8:83:ca:05:1b:61:28:88:a4:a5:3f:16:1d:a8:f7:23:31:
c8:93:42:0e:1f:04:7e:5d:6e:34:aa:71:cc:be:49:50:4b:a4:
8c:d7:66:02:4d:68:7e:b6:5d:1d:e3:88:0c:84:70:b8:5f:f8:
ff:05:0d:ba:88:df:18:70:8f:4b:98:47:38:11:dd:47:0a:5d:
51:6d:0c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:10:46 2026 by rpki-client