Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
File: 0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft (raw, json)
Hash identifier: 5lQib3z05Gp8QRtezZPzWnxMdUVxsmcdsJ84LJeLZKU=
Subject key identifier: 3D:D1:55:D5:90:36:DD:D8:37:51:5B:8B:37:E7:6B:8B:6E:6B:40:DB
Authority key identifier: D2:DD:4D:DD:53:6F:18:A8:72:CB:AC:15:E5:89:54:2A:ED:CD:07:37
Certificate issuer: /CN=d2dd4ddd536f18a872cbac15e589542aedcd0737
Certificate serial: 019D9B5077F4B0A6772C847F3306996FEE67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
Manifest number: 0AAC
Signing time: Fri 17 Apr 2026 12:00:35 +0000
Manifest this update: Fri 17 Apr 2026 12:00:35 +0000
Manifest next update: Sat 18 Apr 2026 12:00:35 +0000
Files and hashes: 1: 0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl (hash: V8dsTYdJAC9o9hWIIXtf95PUiyWcfkr50WJeX8aufMo=)
2: X_8Np37khTcPCEtRXHbNQfqvQNE.roa (hash: XNLBBBK7IAMNXci8RcPDaNEkuHX48HSzOY+bMxN50u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:77:f4:b0:a6:77:2c:84:7f:33:06:99:6f:ee:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2dd4ddd536f18a872cbac15e589542aedcd0737
Validity
Not Before: Apr 17 12:00:35 2026 GMT
Not After : Apr 18 12:00:35 2026 GMT
Subject: CN=3dd155d59036ddd837515b8b37e76b8b6e6b40db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ac:9e:ca:6e:49:eb:59:92:0c:5f:96:75:28:
b3:92:8e:e0:37:b9:60:31:79:18:f8:04:32:03:5c:
f3:21:6a:60:bb:f6:e5:b4:d9:7f:b4:52:fb:3f:4f:
e4:ab:1a:ef:8e:55:7b:fd:5c:f0:c3:94:67:f5:c5:
c3:04:c0:75:d7:23:89:19:f5:dd:44:de:42:75:3b:
61:cb:8f:15:ff:d2:57:67:25:bd:b2:ce:c6:16:1c:
0e:b3:35:d2:e3:b3:71:d3:82:a4:48:c1:ba:12:c5:
69:e0:9b:d4:f7:1c:50:b9:34:77:0f:2c:90:5f:68:
43:32:53:43:10:8a:18:e1:8a:32:b3:c1:6b:c6:92:
eb:58:f9:7e:b5:88:d6:e0:7a:2c:18:f4:f7:72:99:
d2:6d:5e:45:7f:52:bd:90:55:40:4f:80:53:cd:d1:
c2:b0:fa:55:ef:55:1a:82:0a:f1:cb:cf:3c:13:4a:
f0:24:aa:a1:a7:63:2f:2a:b5:8f:64:fb:f0:68:bb:
6e:cf:b7:67:c5:28:44:07:48:cd:bf:e6:c3:ad:c8:
c8:b4:86:49:13:88:79:3e:bd:22:bc:55:a0:c0:97:
c4:2a:73:eb:f4:3f:77:32:33:58:82:72:d9:19:f9:
db:da:be:9a:33:e0:31:76:0a:56:d6:e4:21:e2:1e:
25:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D1:55:D5:90:36:DD:D8:37:51:5B:8B:37:E7:6B:8B:6E:6B:40:DB
X509v3 Authority Key Identifier:
keyid:D2:DD:4D:DD:53:6F:18:A8:72:CB:AC:15:E5:89:54:2A:ED:CD:07:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:96:5f:04:e8:f3:76:e2:d4:c8:ce:57:b6:5a:ac:d8:74:f4:
80:1d:2d:4f:7d:8f:86:e1:7e:fc:de:32:73:59:2f:03:f1:2d:
b9:f2:98:d7:98:fc:27:66:7d:dc:0c:34:9a:9e:d0:77:71:54:
4e:d9:39:b1:32:e6:27:f8:a2:85:6b:83:b4:28:e2:15:db:4f:
da:01:c5:f7:d6:6a:64:8f:73:01:fa:34:11:ee:2d:5d:41:d3:
e0:ba:3d:3a:63:c9:af:4c:60:fd:95:dc:b0:eb:6f:9a:ee:b0:
39:18:65:63:12:72:22:d8:90:3b:08:42:9a:a4:7c:8e:f8:75:
5e:a8:7f:4f:63:6e:f7:36:34:6f:d7:3f:65:a3:32:d4:2a:ea:
c2:ae:12:4d:85:7f:c7:21:53:55:52:e4:dd:0c:3f:ca:a9:aa:
72:36:75:8b:6e:5f:d2:93:b2:c0:2e:56:a5:42:08:bf:ad:44:
ae:11:fa:7f:d3:d6:a7:ff:24:c0:49:91:88:ab:53:0e:30:c1:
89:4c:7e:90:98:26:7e:e3:36:cc:fc:29:da:e8:d7:6e:8f:fb:
d5:76:2b:9a:26:01:b7:d9:b3:98:51:e4:40:c4:e5:5d:fa:f1:
42:31:2e:a1:7c:0c:95:fd:ca:4c:6c:3d:15:3f:38:50:87:ba:
32:73:50:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUHf0sKZ3LIR/MwaZb+5nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZGQ0ZGRkNTM2ZjE4YTg3MmNiYWMxNWU1ODk1NDJhZWRj
ZDA3MzcwHhcNMjYwNDE3MTIwMDM1WhcNMjYwNDE4MTIwMDM1WjAzMTEwLwYDVQQD
EygzZGQxNTVkNTkwMzZkZGQ4Mzc1MTViOGIzN2U3NmI4YjZlNmI0MGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqyeym5J61mSDF+WdSizko7gN7lg
MXkY+AQyA1zzIWpgu/bltNl/tFL7P0/kqxrvjlV7/Vzww5Rn9cXDBMB11yOJGfXd
RN5CdTthy48V/9JXZyW9ss7GFhwOszXS47Nx04KkSMG6EsVp4JvU9xxQuTR3DyyQ
X2hDMlNDEIoY4Yoys8FrxpLrWPl+tYjW4HosGPT3cpnSbV5Ff1K9kFVAT4BTzdHC
sPpV71Uaggrxy888E0rwJKqhp2MvKrWPZPvwaLtuz7dnxShEB0jNv+bDrcjItIZJ
E4h5Pr0ivFWgwJfEKnPr9D93MjNYgnLZGfnb2r6aM+AxdgpW1uQh4h4lawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3RVdWQNt3YN1Fbizfna4tua0DbMB8GA1UdIwQY
MBaAFNLdTd1TbxiocsusFeWJVCrtzQc3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHQxTjNWTnZHS2h5eTZ3VjVZbFVLdTNOQnpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9lY2EwMWMtNTIzMi00N2M1LWIwMTQt
NWIxMzJmN2QzYjQ5LzEvMHQxTjNWTnZHS2h5eTZ3VjVZbFVLdTNOQnpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9lY2EwMWMtNTIzMi00N2M1LWIwMTQtNWIxMzJmN2QzYjQ5
LzEvMHQxTjNWTnZHS2h5eTZ3VjVZbFVLdTNOQnpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgpZfBOjz
duLUyM5Xtlqs2HT0gB0tT32PhuF+/N4yc1kvA/EtufKY15j8J2Z93Aw0mp7Qd3FU
Ttk5sTLmJ/iihWuDtCjiFdtP2gHF99ZqZI9zAfo0Ee4tXUHT4Lo9OmPJr0xg/ZXc
sOtvmu6wORhlYxJyItiQOwhCmqR8jvh1Xqh/T2Nu9zY0b9c/ZaMy1Crqwq4STYV/
xyFTVVLk3Qw/yqmqcjZ1i25f0pOywC5WpUIIv61ErhH6f9PWp/8kwEmRiKtTDjDB
iUx+kJgmfuM2zPwp2ujXbo/71XYrmiYBt9mzmFHkQMTlXfrxQjEuoXwMlf3KTGw9
FT84UIe6MnNQiw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:35:05 2026 by rpki-client