Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
File: D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft (raw, json)
Hash identifier: PZpE5laRvpq+pPMJC+CQ/pGQw8gE5VRR+/1E3Sx6Xy0=
Subject key identifier: 85:6E:7F:AB:4A:E1:AE:A2:33:42:15:D2:10:5B:98:5F:B7:A6:BF:B9
Authority key identifier: 0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
Certificate issuer: /CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
Certificate serial: 019D9AE2DC98F62DD75F9B1919B686E00784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
Manifest number: 0F58
Signing time: Fri 17 Apr 2026 10:00:52 +0000
Manifest this update: Fri 17 Apr 2026 10:00:52 +0000
Manifest next update: Sat 18 Apr 2026 10:00:52 +0000
Files and hashes: 1: D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl (hash: W5Fa8UV8p0OcbAr31DJ43EnRQ3IzbMznpNm9uiKudvY=)
2: jK9vJkC-9INkg3kH606wmZpM3gY.roa (hash: pPtcnLjluAlTQa5sDa1ndB+L+idIHW8vl3l2EMrfHcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:dc:98:f6:2d:d7:5f:9b:19:19:b6:86:e0:07:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
Validity
Not Before: Apr 17 10:00:52 2026 GMT
Not After : Apr 18 10:00:52 2026 GMT
Subject: CN=856e7fab4ae1aea2334215d2105b985fb7a6bfb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0c:79:ce:0a:32:86:10:06:8b:d3:54:b2:46:
33:35:97:a2:58:1e:99:dc:b1:27:25:6f:3d:8a:3a:
67:a9:45:8c:1b:db:09:ff:06:14:b3:1e:fd:c5:3c:
43:5e:ef:87:4f:f5:76:fe:e1:c5:11:65:21:3c:37:
fe:82:b1:9b:f2:67:ea:53:04:25:93:20:0d:db:51:
59:e0:76:68:3b:87:b1:10:01:c1:50:76:ae:23:4c:
9b:3e:44:2b:21:39:79:30:9b:56:15:75:da:f6:67:
3b:ac:57:5b:cb:d3:88:ca:54:48:41:dc:14:ee:e2:
fd:34:7c:f7:0c:04:dc:15:4f:24:c9:69:cf:28:61:
90:45:d1:1b:7d:6f:ab:54:1c:03:3c:d8:de:1c:5f:
f4:93:ff:70:2b:f6:f6:72:03:f8:96:32:87:96:11:
3a:9d:63:53:ee:15:d8:60:ef:fc:d6:f5:d1:97:8a:
5d:f4:81:39:7a:39:01:5f:71:e8:22:14:c0:03:b6:
34:63:f3:59:16:24:2d:03:49:db:43:4f:b2:f4:6d:
a5:58:54:92:9e:5c:d2:c2:9f:45:25:58:5d:bf:4b:
5d:2e:00:9e:a4:a7:44:df:24:5b:96:c6:08:57:55:
21:d7:4b:e9:cb:3d:49:bf:28:7f:1a:35:38:20:4c:
c9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6E:7F:AB:4A:E1:AE:A2:33:42:15:D2:10:5B:98:5F:B7:A6:BF:B9
X509v3 Authority Key Identifier:
keyid:0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:70:a7:8c:a0:68:29:2e:82:d2:47:b1:81:27:9b:72:d3:91:
44:a8:31:93:7f:a8:d1:cc:90:3a:6e:f6:65:8a:89:b4:0d:af:
80:a3:0c:1c:91:22:92:a5:1b:da:1f:61:9d:59:8d:e3:16:ea:
f4:89:a6:17:24:90:53:61:95:19:45:6d:2a:88:36:c6:b0:62:
1e:66:03:ef:77:e5:52:63:e9:97:f1:d5:41:76:4c:1e:42:cb:
55:bf:57:7d:b3:5c:20:70:f2:58:37:6c:26:ac:e5:dd:2e:5e:
d8:d5:ec:da:5a:16:a3:98:66:0c:d2:53:02:7e:91:c2:c2:52:
4d:96:6b:a5:c0:d6:6f:f3:59:d1:cb:45:cf:a3:50:19:6e:04:
91:9b:25:f8:aa:19:6f:3c:59:67:39:ef:66:f4:31:68:be:3a:
eb:5e:fa:3e:65:2b:5f:b9:e3:d3:e5:b6:96:ca:18:6b:73:fa:
1e:38:c8:36:f8:62:1a:9f:96:ad:0e:b7:c0:91:f4:f4:d5:c4:
a5:19:73:b4:06:dc:e7:3c:a8:6c:f1:1e:d3:36:48:0a:53:8d:
38:9b:5b:c2:8c:60:34:29:9f:35:1b:50:e7:aa:bc:39:d3:06:
a6:5e:f0:08:03:c1:c0:59:56:77:d0:06:d7:3d:35:70:01:3a:
62:a0:a8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:08:58 2026 by rpki-client