Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
File: 0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft (raw, json)
Hash identifier: Z03pORn5EwF/l2WGljZ9frwWGWc1aFa8ZnYCLn1KJlQ=
Subject key identifier: 35:F5:1D:E4:3D:E8:66:1E:6A:C8:24:B0:4C:79:19:61:74:30:20:8B
Authority key identifier: D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7
Certificate issuer: /CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7
Certificate serial: 019DA45427F592948FE99D8B279EABEBE808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
Manifest number: 0CCC
Signing time: Sun 19 Apr 2026 06:01:11 +0000
Manifest this update: Sun 19 Apr 2026 06:01:11 +0000
Manifest next update: Mon 20 Apr 2026 06:01:11 +0000
Files and hashes: 1: 0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl (hash: ClLmAS9YhxdmGO0iJEMHDHRvfjhRhVNLulzKkS9sk7A=)
2: iGY_Mv10YgE-XbLN8s6W95SGc3w.roa (hash: 2VVKNx6PRdYWZ0nNRbCgG4Dar1wwW4X2eQNLFYqQiUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:54:27:f5:92:94:8f:e9:9d:8b:27:9e:ab:eb:e8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7
Validity
Not Before: Apr 19 06:01:11 2026 GMT
Not After : Apr 20 06:01:11 2026 GMT
Subject: CN=35f51de43de8661e6ac824b04c7919617430208b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ce:4c:06:20:3b:05:84:7d:f3:54:1c:2c:60:
3c:33:8a:89:7d:af:9b:0e:87:3b:ee:8a:57:99:77:
50:73:ef:5b:94:94:5e:16:61:ac:46:46:33:73:0c:
61:41:fc:59:7f:00:94:d7:a2:92:fb:46:36:fd:5c:
6b:d4:3f:42:2f:fc:39:d8:81:62:0e:61:69:98:c0:
84:1f:a5:9a:2b:8d:ae:36:72:da:bf:6b:da:fa:f4:
47:79:91:74:a6:f6:ec:a9:88:bb:6c:d0:f2:26:6c:
28:aa:61:94:77:04:28:52:dc:79:68:ae:1d:4d:be:
6a:28:fc:0c:3a:e0:06:5c:36:c7:07:b5:4a:fc:78:
15:44:a1:3f:70:b3:2e:5c:f6:60:a6:39:f5:91:0c:
b1:d7:a5:4c:7e:4e:56:4d:fb:34:b9:27:37:0e:3c:
51:02:bb:ab:67:fb:3f:ca:82:33:d7:b4:22:ac:91:
17:92:00:a7:da:b9:8a:04:bd:95:6c:fa:20:44:59:
30:2a:6c:31:db:47:9a:af:1b:90:70:7a:dc:d4:29:
8f:a4:a5:d4:bb:bd:13:f1:de:3a:28:95:f5:5c:95:
97:cf:c9:e1:5c:e3:44:2e:49:9d:e6:b5:ff:f7:2a:
ad:5f:96:f8:5d:eb:de:57:24:d6:7f:bf:d8:db:4d:
fc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F5:1D:E4:3D:E8:66:1E:6A:C8:24:B0:4C:79:19:61:74:30:20:8B
X509v3 Authority Key Identifier:
keyid:D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:9c:9a:e1:6a:44:1a:f8:3d:99:81:8e:ae:18:95:6d:31:87:
9b:54:4a:47:5c:ba:ee:a4:8a:50:2a:8a:0c:c0:03:69:59:47:
d3:e1:2e:f7:05:6a:6e:91:b1:09:e2:fb:b8:e7:13:62:e9:df:
32:03:55:be:72:87:ab:d0:1b:b0:b8:6a:c1:08:32:1a:97:84:
67:d7:54:2f:6f:4b:10:9e:74:63:66:69:1c:87:74:8e:4c:67:
21:96:7e:56:0d:80:65:e7:ff:78:fd:f7:cf:d0:df:73:a8:56:
c7:2a:6f:dc:01:b8:7d:18:be:1b:9d:b1:b2:05:74:65:1d:1e:
fa:24:43:3b:5e:60:08:ef:91:fa:4d:88:b6:9d:10:70:85:9e:
df:df:c7:21:aa:93:ac:d6:ad:e5:33:c2:a8:ae:28:7c:10:6e:
ee:36:d0:95:1c:5b:a1:a7:4e:82:df:3e:23:e3:58:95:72:85:
7f:c1:b5:f4:70:60:18:7a:6d:05:de:c4:57:3a:f3:79:10:8e:
28:d6:1f:9e:d9:eb:74:fd:07:44:cc:0f:c5:5c:f6:7c:e3:48:
c3:7d:55:00:10:22:47:8a:63:66:01:1e:5a:d1:09:82:67:21:
43:e5:24:f6:8c:55:e9:9b:34:5a:9d:4d:00:b7:71:f2:24:d5:
9a:ef:8b:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kVCf1kpSP6Z2LJ56r6+gIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMjVmYWM0YTVkOTViNDFhMDcyZWJiZjRmMDM1ZDA5YjNh
YTU5YzcwHhcNMjYwNDE5MDYwMTExWhcNMjYwNDIwMDYwMTExWjAzMTEwLwYDVQQD
EygzNWY1MWRlNDNkZTg2NjFlNmFjODI0YjA0Yzc5MTk2MTc0MzAyMDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0s5MBiA7BYR981QcLGA8M4qJfa+b
Doc77opXmXdQc+9blJReFmGsRkYzcwxhQfxZfwCU16KS+0Y2/Vxr1D9CL/w52IFi
DmFpmMCEH6WaK42uNnLav2va+vRHeZF0pvbsqYi7bNDyJmwoqmGUdwQoUtx5aK4d
Tb5qKPwMOuAGXDbHB7VK/HgVRKE/cLMuXPZgpjn1kQyx16VMfk5WTfs0uSc3DjxR
ArurZ/s/yoIz17QirJEXkgCn2rmKBL2VbPogRFkwKmwx20earxuQcHrc1CmPpKXU
u70T8d46KJX1XJWXz8nhXONELkmd5rX/9yqtX5b4XeveVyTWf7/Y2038/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDX1HeQ96GYeasgksEx5GWF0MCCLMB8GA1UdIwQY
MBaAFNEl+sSl2VtBoHLrv08DXQmzqlnHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFNYNnhLWFpXMEdnY3V1X1R3TmRDYk9xV2NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS84Y2VhMWYtNDVlNC00MjAxLWJlYmMt
MGRlZDA2ZTQwYTc1LzEvMFNYNnhLWFpXMEdnY3V1X1R3TmRDYk9xV2NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS84Y2VhMWYtNDVlNC00MjAxLWJlYmMtMGRlZDA2ZTQwYTc1
LzEvMFNYNnhLWFpXMEdnY3V1X1R3TmRDYk9xV2NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD5ya4WpE
Gvg9mYGOrhiVbTGHm1RKR1y67qSKUCqKDMADaVlH0+Eu9wVqbpGxCeL7uOcTYunf
MgNVvnKHq9AbsLhqwQgyGpeEZ9dUL29LEJ50Y2ZpHId0jkxnIZZ+Vg2AZef/eP33
z9Dfc6hWxypv3AG4fRi+G52xsgV0ZR0e+iRDO15gCO+R+k2Itp0QcIWe39/HIaqT
rNat5TPCqK4ofBBu7jbQlRxboadOgt8+I+NYlXKFf8G19HBgGHptBd7EVzrzeRCO
KNYfntnrdP0HRMwPxVz2fONIw31VABAiR4pjZgEeWtEJgmchQ+Uk9oxV6Zs0Wp1N
ALdx8iTVmu+LIw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:51:23 2026 by rpki-client