
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
File: 0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft (raw, json)
Hash identifier: LXQHnIO443B2cMI7zgccbdTR0bQvf7Th3pZsuYUREjI=
Subject key identifier: 70:7A:88:CE:58:9A:77:D1:4F:CA:73:F5:88:15:3C:DD:70:5C:53:AC
Authority key identifier: D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A
Certificate issuer: /CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a
Certificate serial: 019D9AABC83D754917BFD07FD96A53F6DC7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 09:00:42 +0000
Manifest this update: Fri 17 Apr 2026 09:00:42 +0000
Manifest next update: Sat 18 Apr 2026 09:00:42 +0000
Files and hashes: 1: 0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl (hash: bTD3R1nSYFv5DC09OoLpq8b18zsb76DndJ+45ntvQZ0=)
2: 18LvMJbaobz9RVoG3KwWtt6oPsk.roa (hash: U928xEWQEvSL1IP/0rVvcpbAEWqlTfBez50gOZPkoHY=)
3: 5jCnir6W6gAd6_EDtQEmsCT7w14.roa (hash: 0wvxGHojLuaQ4hENlIsY48YCfJ44p5EM0SkFd7dB+g4=)
4: bQqTZ3ArgViLCoqi3gs3VHHEcM8.roa (hash: aWk0i4GB/D7KkQJxNXNTSQ961hAd3k/+4U2XwwZMILk=)
5: vW2RW7QY1hflVRyn1_CDLNIOZtQ.roa (hash: M4ZBHT4dK/BF7Hs2UlU9Rb4uebu3FER628aOLG71DV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:c8:3d:75:49:17:bf:d0:7f:d9:6a:53:f6:dc:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a
Validity
Not Before: Apr 17 09:00:42 2026 GMT
Not After : Apr 18 09:00:42 2026 GMT
Subject: CN=707a88ce589a77d14fca73f588153cdd705c53ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:65:63:fe:6b:98:e8:79:e0:6d:90:b9:d9:80:
f8:61:99:9d:41:7a:9e:66:f8:70:57:dd:53:c6:d7:
6d:20:dd:d0:fa:0c:3f:9d:b3:db:87:59:ce:9e:41:
48:a7:04:e2:c3:34:bd:94:0a:a7:03:0b:0c:bd:5a:
98:05:58:a4:d3:b6:62:ed:25:47:7e:7c:11:7a:65:
7c:50:5f:5a:42:9b:25:6b:46:ab:6e:db:b9:2a:20:
94:35:10:23:05:bc:fd:29:09:59:84:4e:6e:30:5a:
ee:20:41:90:58:6d:b1:4a:18:56:fe:fd:e9:a8:64:
86:55:a8:f3:62:37:3e:17:b4:bb:38:9f:74:a2:f0:
6e:60:e2:cf:e9:43:56:fc:cd:5f:da:e6:05:9f:3b:
33:3e:1f:1d:28:03:c0:57:14:9f:90:df:66:4a:d2:
5d:ed:d8:4f:4e:df:58:29:81:e4:e1:fd:bd:8d:e2:
79:e8:1a:9f:f8:05:6d:24:26:fd:72:b1:72:11:a3:
1f:34:fe:d6:bc:c5:00:91:a7:af:eb:49:67:93:ba:
a2:2a:1b:c7:5a:94:c6:d9:a1:49:0a:32:88:64:7d:
5c:2f:04:93:f5:76:4d:5e:26:c0:46:ee:6c:c2:5a:
5c:c7:ae:df:33:67:00:73:a7:ea:e8:6e:2b:a3:c4:
77:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7A:88:CE:58:9A:77:D1:4F:CA:73:F5:88:15:3C:DD:70:5C:53:AC
X509v3 Authority Key Identifier:
keyid:D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:88:11:06:10:ee:f8:55:31:7a:c9:2b:4b:62:a9:2e:cf:0c:
29:d3:c6:01:64:3b:f9:4f:8d:57:34:23:a7:ab:cb:f7:6b:9d:
42:7c:d1:14:76:7e:b8:3f:6d:94:cb:cf:33:25:2d:72:f5:e2:
8c:ea:9d:05:7b:8a:fa:bc:a5:b7:48:6a:85:ee:e7:f6:b7:e0:
07:83:07:de:c6:87:06:eb:df:8e:7e:f8:fd:4b:55:54:f5:59:
81:a6:01:06:9a:a8:6c:9f:f4:c0:29:00:38:c7:f3:99:4b:4c:
85:d8:db:83:6a:81:e2:a9:7b:55:27:e0:9a:57:9d:71:37:4b:
a9:cc:87:56:76:27:a3:0f:ac:48:0c:07:19:78:6d:a4:da:2e:
05:85:71:d4:64:ff:d5:28:c2:2f:2a:72:75:0f:14:51:bb:0e:
e1:8c:44:69:35:eb:d1:45:58:fb:11:06:3d:cc:f8:95:95:f7:
9a:25:a1:29:38:3f:6d:02:9e:2d:43:30:53:4e:8a:97:52:cd:
4a:b9:9f:07:38:2b:c4:6b:44:97:30:60:b0:29:db:ea:ba:50:
cd:58:a0:37:d0:ad:84:68:f8:bb:6e:50:34:0c:59:f9:8e:3e:
e5:17:a4:57:9e:2f:f1:e6:49:cf:3f:68:78:32:b7:e2:da:0e:
40:ee:8d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:51:17 2026 by rpki-client