Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
File: 0PbNMLTPoZPiJrupKC42aiKjEQ8.mft (raw, json)
Hash identifier: oNHc3THU3E2bRN8zaCI6eCu2Aor6K+kfIbc6efIvYIE=
Subject key identifier: 4D:DF:DF:B7:AF:04:41:92:FC:74:5E:40:F4:FD:64:E8:4B:66:4E:18
Authority key identifier: D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
Certificate issuer: /CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Certificate serial: 019D9850A5679FFB96EF8781F63411843AB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
Manifest number: 18C3
Signing time: Thu 16 Apr 2026 22:01:55 +0000
Manifest this update: Thu 16 Apr 2026 22:01:55 +0000
Manifest next update: Fri 17 Apr 2026 22:01:55 +0000
Files and hashes: 1: 0PbNMLTPoZPiJrupKC42aiKjEQ8.crl (hash: UOmGIXIq447QRiX4z2L0oz88OdFkaw49PS5uKQ/5Rrk=)
2: 0g907WBXD4qZBS5Lv--lVG4AGmY.roa (hash: ADx0uWHqRsIMIEM4zrRsIaFkNMUykkO7aZ3mKfDHgOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:a5:67:9f:fb:96:ef:87:81:f6:34:11:84:3a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Validity
Not Before: Apr 16 22:01:55 2026 GMT
Not After : Apr 17 22:01:55 2026 GMT
Subject: CN=4ddfdfb7af044192fc745e40f4fd64e84b664e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:01:b2:fd:8d:fd:8e:4e:e2:9a:0a:f7:ec:a0:
0d:87:2f:20:d1:09:85:34:40:6b:be:4f:01:b3:83:
d8:4c:99:9b:f9:a7:41:b7:5d:18:df:72:52:5c:f0:
27:42:fc:4c:36:19:9e:08:d6:fa:d3:ea:63:9d:3a:
bc:98:26:68:5b:1d:59:3e:54:59:6b:00:76:31:c8:
b9:2d:c5:1b:88:26:71:e7:cf:53:f2:a0:03:1b:d1:
9b:98:bc:8d:e9:60:8e:0f:36:c3:ad:c8:19:ce:f8:
81:8d:13:86:47:33:9b:31:7e:83:00:c0:78:e4:65:
a8:8e:66:a1:ae:9c:22:8f:e3:dd:5b:31:4d:0c:93:
bd:60:16:b0:ef:2f:20:5d:82:5d:2a:95:63:85:aa:
9e:96:7c:8c:6e:02:0d:a8:1a:44:c8:ff:c8:31:8c:
e9:ff:4f:bb:f3:28:f5:74:41:01:f7:3d:a2:c2:ec:
8b:45:4f:af:8e:2e:60:75:89:2e:af:28:08:7a:19:
20:6e:19:9a:dd:14:be:7a:78:4b:e1:b0:ce:3e:ab:
de:bd:c5:1c:e2:7d:17:2c:e7:48:2c:d0:f7:bb:29:
b2:70:a9:d7:03:62:e4:18:49:b5:dd:a6:58:55:84:
4e:60:e0:ba:39:fe:99:9d:e3:df:82:5b:54:5d:ad:
40:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:DF:DF:B7:AF:04:41:92:FC:74:5E:40:F4:FD:64:E8:4B:66:4E:18
X509v3 Authority Key Identifier:
keyid:D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:db:e5:00:fa:5e:6b:98:57:57:a9:61:06:ee:cd:8f:99:17:
9a:a3:81:b8:b6:8f:9a:74:3c:c7:af:14:c5:8d:db:af:55:56:
33:b3:87:cf:10:c0:f5:56:65:51:03:cd:98:33:02:b5:53:df:
79:c6:ed:4c:2e:d2:61:75:e6:73:31:40:b5:f1:3a:b1:ae:19:
e1:05:13:6b:b4:ce:02:81:1e:64:49:0a:3c:c4:3d:9b:fd:c3:
ea:ca:7e:86:3e:08:7c:ac:37:ba:65:41:25:cd:2b:95:63:98:
39:77:59:6a:63:45:b4:67:cb:99:a2:11:19:d2:b5:b8:88:3b:
e3:00:8f:aa:d7:8f:9c:03:c8:a2:dc:16:9d:fa:e5:e7:d6:03:
c4:b5:59:75:1e:72:3e:ff:26:42:a6:b3:e8:c8:0a:68:45:47:
1b:9e:94:ab:72:df:48:56:40:95:e9:1c:a2:ed:07:4c:b6:1d:
87:c9:a5:1b:7a:de:ea:2f:bb:4d:78:02:30:7a:24:78:ef:6d:
39:45:96:e9:1e:3b:de:c5:c2:02:e0:af:fd:fc:3c:4c:a5:bb:
03:f0:55:b2:7d:8c:f4:91:51:98:3b:bd:53:68:04:f6:4a:3a:
4a:f8:eb:09:44:f0:14:ff:79:b2:c7:ee:96:11:2b:51:59:27:
09:e4:57:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:26:28 2026 by rpki-client