Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
File: 0mHPvAfsMGN33LFql6EWDHptgsw.mft (raw, json)
Hash identifier: KXVNoD8QiTuc9766yBp8Z0DTfAp8LA7gcdsQVHQbQ/0=
Subject key identifier: 48:1C:B2:02:7B:C0:3C:23:F1:D7:88:F5:6A:B6:B8:FB:F3:E1:FE:EC
Authority key identifier: D2:61:CF:BC:07:EC:30:63:77:DC:B1:6A:97:A1:16:0C:7A:6D:82:CC
Certificate issuer: /CN=d261cfbc07ec306377dcb16a97a1160c7a6d82cc
Certificate serial: 019D99CFED5501DCD808E06794E6742FD00C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
Manifest number: 0503
Signing time: Fri 17 Apr 2026 05:00:33 +0000
Manifest this update: Fri 17 Apr 2026 05:00:33 +0000
Manifest next update: Sat 18 Apr 2026 05:00:33 +0000
Files and hashes: 1: 0mHPvAfsMGN33LFql6EWDHptgsw.crl (hash: COTj3DVzcNHy97RU4wo+6jbCDgTMqs1PZf4GKQPszws=)
2: p0fL_-s25OijH9UglPLyGf3hQ3k.roa (hash: sp4Y+8h1IocJtG1a3SfrXHCpPOK9+n80lPdEb2+Nl4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:ed:55:01:dc:d8:08:e0:67:94:e6:74:2f:d0:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d261cfbc07ec306377dcb16a97a1160c7a6d82cc
Validity
Not Before: Apr 17 05:00:33 2026 GMT
Not After : Apr 18 05:00:33 2026 GMT
Subject: CN=481cb2027bc03c23f1d788f56ab6b8fbf3e1feec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:03:65:4d:25:a2:18:57:d8:cf:3d:30:18:ca:
8c:98:6d:0b:b8:13:18:db:17:6c:50:65:b3:79:a1:
fa:45:54:50:c3:a8:ee:b4:3b:be:b9:48:a9:da:38:
24:a8:89:94:68:1b:56:d8:2b:42:97:34:cd:d0:b1:
4d:e3:7f:3d:e3:02:f3:c1:b3:b6:8d:2f:8d:c5:4a:
fe:22:e3:c3:32:7a:e7:cf:76:2d:3b:8c:91:c6:86:
67:89:75:ec:8d:e4:41:44:73:1a:94:64:5a:42:c4:
50:e7:ac:ee:77:73:6a:2b:e5:1a:7e:04:e0:6e:80:
e1:1a:a0:a2:8d:6d:81:ff:eb:17:91:a4:d9:3f:61:
89:49:c2:ce:64:44:76:c6:2d:f0:ff:13:2e:24:8b:
43:2e:ba:e8:db:40:68:fb:77:fe:15:1c:24:01:02:
84:8e:fb:f7:6a:cc:5d:12:0e:7b:e3:d4:b8:f8:62:
0e:d8:bf:1b:ff:4b:14:87:e2:96:af:8c:3f:31:1c:
31:14:36:78:02:5f:c4:6b:cf:a1:c8:8b:2c:0e:52:
74:f2:d0:16:e0:ff:f0:d3:f2:c4:cc:57:79:f4:ea:
ca:76:92:29:c1:e4:e9:15:19:7f:c2:97:3a:80:ca:
91:bb:19:8d:4f:63:9b:61:0c:f6:d6:24:fd:7d:b1:
bf:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:1C:B2:02:7B:C0:3C:23:F1:D7:88:F5:6A:B6:B8:FB:F3:E1:FE:EC
X509v3 Authority Key Identifier:
keyid:D2:61:CF:BC:07:EC:30:63:77:DC:B1:6A:97:A1:16:0C:7A:6D:82:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:8d:48:53:eb:43:25:42:d4:3e:1b:44:d6:43:28:75:eb:cb:
f7:0e:28:60:b8:68:f3:65:8b:4c:03:2c:51:cd:fd:a7:2f:c3:
e0:63:86:a6:dc:11:d1:be:2f:99:39:42:dd:04:77:e9:87:3f:
1f:57:0b:4b:94:a3:2e:71:28:dc:6a:84:f9:ed:e1:24:c9:27:
4a:54:8a:9e:2f:50:db:74:30:13:74:65:4f:8b:3b:7e:86:55:
75:7a:70:63:11:c5:36:61:af:2d:60:e1:8f:a7:a0:cc:c2:c5:
4f:fa:7f:57:9b:50:02:50:3f:21:cb:e5:3f:df:29:90:c8:63:
0a:16:de:c1:b2:c7:fd:94:48:e4:ff:14:22:81:69:9c:4b:e0:
87:fc:ac:16:1b:cd:59:24:05:ba:3c:22:30:44:81:20:67:d5:
a3:2c:4b:3d:68:3e:2c:76:24:30:90:2d:d6:1e:26:86:b9:b2:
ee:a4:ea:ec:9c:97:14:d9:2f:7f:7f:ba:7a:e4:57:ea:14:dd:
d1:63:2c:f7:ee:66:eb:10:21:d3:a4:19:21:55:d2:2c:bc:7a:
8a:23:f1:f5:95:02:37:bd:54:75:69:a3:f9:16:37:6f:6b:29:
42:cc:5c:4b:30:82:de:76:7d:98:4b:cd:0a:ac:a6:8d:4c:af:
65:9b:bb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:54:08 2026 by rpki-client