Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft
File: RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft (raw, json)
Hash identifier: UFcskmTH7eEd6OLoPkjBhtPPFb8WHVK13wpaLA9/CS8=
Subject key identifier: 73:99:E4:F1:5E:64:A2:7D:CA:B8:FD:6B:6C:F8:BE:12:EE:C5:02:AE
Authority key identifier: 46:84:65:57:B9:E4:29:55:16:3E:51:6B:02:DC:8E:3E:E3:82:81:14
Certificate issuer: /CN=46846557b9e42955163e516b02dc8e3ee3828114
Certificate serial: 019D9A06EC1406085669187DBF296F6C1476
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft
Manifest number: 0C0E
Signing time: Fri 17 Apr 2026 06:00:38 +0000
Manifest this update: Fri 17 Apr 2026 06:00:38 +0000
Manifest next update: Sat 18 Apr 2026 06:00:38 +0000
Files and hashes: 1: RoRlV7nkKVUWPlFrAtyOPuOCgRQ.crl (hash: QDrGr5aAB/kPcnLDMkdDruppgLhd9EobmpSqrPSAvUs=)
2: ZRtJ06zDF-x6e7hZrwH9g5MJ3wY.roa (hash: WcjDPDlk98u+n1T1FkRZjQvHjiER+xJZpFWL/kzuHtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:ec:14:06:08:56:69:18:7d:bf:29:6f:6c:14:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46846557b9e42955163e516b02dc8e3ee3828114
Validity
Not Before: Apr 17 06:00:38 2026 GMT
Not After : Apr 18 06:00:38 2026 GMT
Subject: CN=7399e4f15e64a27dcab8fd6b6cf8be12eec502ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7a:85:bc:38:e6:0b:7c:0b:43:5c:a8:8d:7c:
ea:ed:1f:eb:b0:fc:e8:49:a9:11:92:b1:1f:7a:04:
7f:76:c8:7d:f2:6a:fa:22:79:ed:55:95:d9:d5:a5:
83:33:4e:73:ae:fa:43:f6:0e:f0:51:be:d0:ba:42:
09:d4:c9:a4:10:ac:7d:1a:b1:b9:74:d5:77:56:4b:
c8:c9:96:a4:ab:7e:4e:be:8b:cb:d6:69:7b:5a:ab:
2d:2d:f5:3a:5a:18:5b:06:b4:68:18:4f:b5:c7:7f:
89:24:2d:21:df:59:be:12:96:c9:2c:d5:c6:ff:3c:
b2:3f:02:f1:50:7f:4f:2e:73:6d:52:5f:1e:7d:93:
de:4a:99:80:64:3a:35:16:d5:e1:39:61:43:6d:54:
9f:b9:c0:d3:29:80:e8:e5:12:3a:b9:c2:bd:c5:6b:
c4:69:24:f3:9a:21:45:37:bf:74:30:2c:8e:b1:a5:
fe:9b:d0:a4:42:d9:95:d8:62:aa:eb:c7:70:5f:fc:
26:be:b4:81:81:e1:a3:06:03:71:be:06:65:0c:bc:
a5:2a:17:5f:06:dc:3a:8d:5d:c8:52:8c:06:76:51:
ea:e5:37:30:ca:3a:d5:d2:45:b8:cc:78:16:ba:c8:
ad:34:c6:68:ec:99:b0:f2:d6:bc:be:9f:4f:05:50:
61:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:99:E4:F1:5E:64:A2:7D:CA:B8:FD:6B:6C:F8:BE:12:EE:C5:02:AE
X509v3 Authority Key Identifier:
keyid:46:84:65:57:B9:E4:29:55:16:3E:51:6B:02:DC:8E:3E:E3:82:81:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:78:81:7f:9f:a0:02:2f:bd:9f:ab:0c:fc:89:4e:e5:0c:5d:
53:a9:04:d8:e6:1a:ca:3a:3a:34:65:83:91:0e:15:b7:65:e6:
c8:54:ed:20:2a:ab:73:45:e1:28:10:c2:b1:86:87:c0:69:3a:
03:b1:27:bd:86:bf:00:0d:5b:68:00:ba:a2:ca:37:86:f2:f4:
59:db:31:b1:4e:99:6e:83:1c:40:6c:4c:0a:37:27:72:a9:1e:
2d:dd:1f:51:1c:e6:93:f9:21:df:93:c5:d4:05:a3:bd:63:77:
f7:64:90:f2:94:1f:57:8d:e8:1c:5f:ce:c2:c8:9f:a9:dc:94:
84:a6:af:88:c7:24:3c:b0:a3:87:11:89:fb:ea:0f:d6:69:f1:
fc:59:0e:7a:99:db:8b:f8:ae:9a:d1:12:c7:27:96:88:fd:d6:
ba:87:83:ca:cf:53:d0:af:a7:ab:ef:21:f0:b0:51:59:d9:5c:
95:64:ce:0d:0c:58:fa:29:f2:23:f6:ed:5b:e9:14:85:07:28:
aa:fb:b1:9a:0b:ab:a4:3e:d1:27:c3:10:f8:be:2f:59:3a:f1:
23:9b:e4:cd:f6:44:c2:c3:1c:aa:d7:de:d9:36:ef:0e:48:54:
4f:94:d2:7b:50:7c:08:2e:89:26:40:2e:0f:8a:28:b9:b8:8c:
a5:9b:2b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:37:53 2026 by rpki-client