Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
File: 0Mo8Cxlv3gunTBSHvcucX6BTZks.mft (raw, json)
Hash identifier: hZLeoRw/Utd/MBMnFrXfWXoAH21eo4K+4efOVojZKFA=
Subject key identifier: 03:5C:A6:4B:C3:ED:42:42:9D:BE:AE:54:59:D5:11:8F:87:6F:F8:B9
Authority key identifier: D0:CA:3C:0B:19:6F:DE:0B:A7:4C:14:87:BD:CB:9C:5F:A0:53:66:4B
Certificate issuer: /CN=d0ca3c0b196fde0ba74c1487bdcb9c5fa053664b
Certificate serial: 019D992B8984D7A2B0AF420BF0E36310E033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 02:01:00 +0000
Manifest this update: Fri 17 Apr 2026 02:01:00 +0000
Manifest next update: Sat 18 Apr 2026 02:01:00 +0000
Files and hashes: 1: 0Mo8Cxlv3gunTBSHvcucX6BTZks.crl (hash: VT8xcF/f2Sj2BXtDZqfmTmQbYOHts+wzG3LiJvizKtQ=)
2: MZedXybYHwozV6I5FVF9kaQXqGw.roa (hash: 9GqJqyPbldCXpYPmuX8YAVKvtX3ZVzz/4Tffa0wjAiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:89:84:d7:a2:b0:af:42:0b:f0:e3:63:10:e0:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ca3c0b196fde0ba74c1487bdcb9c5fa053664b
Validity
Not Before: Apr 17 02:01:00 2026 GMT
Not After : Apr 18 02:01:00 2026 GMT
Subject: CN=035ca64bc3ed42429dbeae5459d5118f876ff8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:65:7c:18:e6:60:79:87:dd:86:aa:4a:e2:d2:
20:82:01:92:75:a5:2d:95:f2:1c:75:e7:00:e2:12:
7f:fa:c4:f1:20:d5:75:4b:ba:78:01:6c:6b:ec:6f:
c8:08:9a:87:2a:fb:37:f9:60:ff:03:b2:d4:0f:2e:
0e:18:b8:ac:f9:15:98:f1:b7:6c:47:25:c7:1d:e9:
6f:6e:50:67:66:e0:42:e4:81:84:0a:78:df:bd:db:
2e:a0:8c:f9:d1:33:12:16:58:bf:46:28:66:59:b0:
da:60:25:a1:7b:02:ff:78:35:76:ec:79:50:73:fc:
53:48:b9:2d:ab:d6:d0:0f:21:17:9b:d2:71:1c:11:
e7:3a:63:ce:37:6a:2e:08:27:e5:99:5c:64:c0:31:
b4:ae:72:c7:96:f3:f3:97:07:9e:bc:42:98:ba:0e:
e0:7f:55:0c:51:8b:05:93:a3:20:c7:60:3a:f8:63:
54:2d:1c:8b:b4:5c:46:58:2f:37:78:a7:47:16:86:
e1:f2:03:ce:4e:ed:44:42:83:3c:28:86:03:80:81:
20:c9:ea:2a:fc:7a:08:94:51:66:93:b4:6a:bd:e3:
ef:06:fe:07:15:11:06:8d:98:9e:cf:d9:4c:03:27:
8c:f2:96:36:f3:3c:12:f7:3f:30:4d:dc:00:4d:c2:
eb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:5C:A6:4B:C3:ED:42:42:9D:BE:AE:54:59:D5:11:8F:87:6F:F8:B9
X509v3 Authority Key Identifier:
keyid:D0:CA:3C:0B:19:6F:DE:0B:A7:4C:14:87:BD:CB:9C:5F:A0:53:66:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:81:fd:c9:85:22:1e:37:8a:4a:fd:9e:2c:ee:c2:86:a5:94:
2c:7b:1f:f5:f8:81:a1:47:23:e3:ec:a7:34:9d:fa:6c:5d:e9:
66:75:78:20:ff:ae:8b:80:2f:a5:8c:54:45:83:f8:ab:f6:a1:
41:3a:07:6b:6d:7b:fe:3d:2f:47:35:f2:7b:be:5a:ae:cc:c5:
24:58:d0:1f:15:ce:0b:7d:ed:ac:6e:2b:81:1f:35:5a:fe:4d:
fd:6d:da:84:fd:be:e3:67:e5:42:ca:df:b0:88:f1:d9:ca:23:
93:f6:7a:17:56:63:89:a0:91:34:15:55:02:f7:14:2f:32:ed:
49:5a:04:83:88:2d:8d:5f:ba:9a:75:1b:bc:de:ae:9d:c8:8d:
d1:1e:05:87:bc:fc:e8:1e:5c:7c:cd:c8:ac:c1:b4:27:c9:19:
ed:93:74:ca:8b:03:25:6f:8e:26:c7:45:de:76:3d:34:3d:95:
c0:91:ad:7f:52:fb:94:fa:c5:e9:6c:24:41:19:79:c0:25:5e:
79:12:2b:4a:ee:74:12:f6:ec:75:3d:df:ab:c9:66:ef:cb:41:
4a:fa:2a:b3:ff:b1:33:a1:66:e5:93:8e:b2:e0:d5:a4:63:26:
d1:51:f0:b1:84:7c:1a:f8:fd:92:2b:6f:02:41:86:8a:53:18:
71:f5:0f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:14:36 2026 by rpki-client