Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
File: rR0qVix9shFRtKCSa41v7qzviFc.mft (raw, json)
Hash identifier: TwrqlX4xso9mKQmtme2gMe8Aahm834OvDyPMI0olK7k=
Subject key identifier: 91:88:CD:F7:88:68:6A:98:28:E5:B7:30:9D:61:BB:EA:C7:72:23:8D
Authority key identifier: AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
Certificate issuer: /CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Certificate serial: 019D9962590D6FAEC949F6F38AF31A6DC3DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
Manifest number: 0DDB
Signing time: Fri 17 Apr 2026 03:00:52 +0000
Manifest this update: Fri 17 Apr 2026 03:00:52 +0000
Manifest next update: Sat 18 Apr 2026 03:00:52 +0000
Files and hashes: 1: SzookzV0kvbV2uV2WuzBzsdzDN0.roa (hash: 305744fYy853yhsc/+Jcw6ozr6ihNDOG9TribOS/z2s=)
2: TWCjy8hYVvxSie77cpH2Pet8J70.roa (hash: UosiAuR+zQzxXxFaYN3sf+bjMmm4ozCxMZtIycUu35w=)
3: rR0qVix9shFRtKCSa41v7qzviFc.crl (hash: F8VizBQzKNuO03nCOkQ+hGkQIgWdhrHWUgpZJ8KTz5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:59:0d:6f:ae:c9:49:f6:f3:8a:f3:1a:6d:c3:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Validity
Not Before: Apr 17 03:00:52 2026 GMT
Not After : Apr 18 03:00:52 2026 GMT
Subject: CN=9188cdf788686a9828e5b7309d61bbeac772238d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:12:2f:b8:82:01:9f:ab:89:41:6a:dd:35:f8:
9f:c3:46:3f:00:9a:4b:31:91:99:ee:54:42:e6:92:
a2:56:49:a2:19:0d:bd:c0:20:d1:63:7b:c6:d6:33:
0e:fa:43:3e:1f:ee:36:30:11:96:5d:57:ce:e6:7a:
1c:c7:21:1a:73:ec:45:6f:83:56:ec:24:e3:04:f5:
6e:47:2a:e0:90:8e:a6:13:01:8d:4e:64:52:1b:79:
45:c1:75:c7:02:2a:0d:cf:3d:34:64:df:e8:ff:b2:
8d:8a:35:6e:e2:24:d2:e9:d4:10:30:b7:a1:aa:e0:
c7:8a:c3:8d:a8:ec:7e:98:b4:a4:5a:bf:7e:28:9d:
29:33:d0:33:d9:56:cc:e0:f5:4b:e4:bc:0d:a6:28:
33:14:3a:dc:84:86:a0:20:8f:9c:66:4f:75:40:45:
4a:cd:11:28:d4:99:a2:b6:ae:42:88:fe:63:f0:dc:
b5:c9:fa:25:fe:13:07:4b:33:57:73:f1:09:00:c8:
12:46:98:d2:41:91:5c:dd:91:49:0c:aa:38:78:cf:
6a:34:a2:c2:65:f1:3e:e4:08:ce:e9:33:65:08:f3:
23:7c:4b:2b:f6:aa:a4:6c:82:6f:11:6e:3c:ee:3a:
6c:11:5c:48:49:71:8f:da:ac:82:03:59:ef:37:b0:
83:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:88:CD:F7:88:68:6A:98:28:E5:B7:30:9D:61:BB:EA:C7:72:23:8D
X509v3 Authority Key Identifier:
keyid:AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:0d:c7:e8:db:6d:45:00:6a:c0:19:86:b8:7b:5d:60:67:99:
29:e5:e1:36:f7:78:72:b1:1b:b2:59:5d:1b:ad:4c:0d:fc:d1:
26:d3:3d:49:43:10:b8:c0:52:19:a7:06:73:23:32:af:83:ea:
a7:5c:da:76:46:1c:fd:ae:51:56:a1:f5:c8:d0:21:8c:55:25:
3b:3b:58:7a:2e:90:37:57:42:6d:88:db:17:27:50:eb:d3:2b:
60:7a:80:a3:2c:9c:35:b0:38:91:00:ec:ed:d7:9a:1f:9e:41:
c1:53:0e:0f:7a:92:25:b8:21:43:18:25:a5:2b:65:ef:ac:f7:
61:12:48:e8:c4:01:b8:0e:d4:71:8f:1d:6d:b8:31:06:67:b3:
ab:84:7a:b7:ee:90:13:80:bc:d1:14:c8:88:7a:1e:30:7f:a7:
21:87:d7:0f:2b:88:00:0a:2b:50:99:3c:ec:f3:ba:f0:ee:84:
d7:b8:e0:0b:1a:df:eb:9a:ef:96:f8:5e:af:26:ed:15:9c:56:
18:ed:a4:fd:ec:69:e8:c1:1f:d1:09:27:b5:9b:1f:49:ce:af:
79:10:b0:f1:7e:38:c1:6c:5f:83:d3:cf:00:7b:f0:8d:cd:bf:
3b:5d:d3:3f:4a:32:6b:21:87:70:38:d3:18:cd:38:df:90:2c:
4a:2b:5c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:52:19 2026 by rpki-client