Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
File: 0KNDo37K0r-yw1vZsm1_SLy1dTc.mft (raw, json)
Hash identifier: 1NwSSSUOR29VtpZZ4m82nlJBNmp5/L/HRLVGE/Q35/U=
Subject key identifier: 5F:9B:48:21:4C:33:9C:A5:0D:F8:54:51:3F:1D:3F:93:35:B1:22:28
Authority key identifier: D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37
Certificate issuer: /CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
Certificate serial: 019D984FA6C92D14A0E1373965CACA1BC0C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
Manifest number: 1852
Signing time: Thu 16 Apr 2026 22:00:49 +0000
Manifest this update: Thu 16 Apr 2026 22:00:49 +0000
Manifest next update: Fri 17 Apr 2026 22:00:49 +0000
Files and hashes: 1: 0KNDo37K0r-yw1vZsm1_SLy1dTc.crl (hash: QcM6rOtcHXAE0jgdvqbGT3eEbKILlnc8h6VITzeYFtQ=)
2: MqEYcGP28yZryUtdD_3wTNGTAVc.roa (hash: p6r4IvQhkyRHVWZ8dRkzEjBjRhq65iPcj75XjeJcHaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:a6:c9:2d:14:a0:e1:37:39:65:ca:ca:1b:c0:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
Validity
Not Before: Apr 16 22:00:49 2026 GMT
Not After : Apr 17 22:00:49 2026 GMT
Subject: CN=5f9b48214c339ca50df854513f1d3f9335b12228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c9:de:a1:9f:2a:9b:4a:92:54:52:4c:a0:72:
0f:6f:a9:c3:38:d7:f9:1d:32:2e:7c:48:50:dc:10:
27:02:0a:bb:e9:46:90:c2:bb:28:19:0f:fb:05:7e:
01:11:3a:f7:ce:0e:4a:7f:6a:c5:86:7e:b0:77:26:
61:9c:51:51:bb:5a:9c:89:94:b9:3d:a2:89:86:d3:
c5:db:bd:24:d5:d5:fb:df:35:d5:92:0c:a5:90:ad:
9d:3a:8b:6b:2a:06:da:72:da:e9:e9:de:54:05:74:
66:34:20:43:38:dc:e3:63:c6:cd:9c:9c:1e:00:45:
08:d6:ab:30:5f:04:67:94:ee:db:7b:b4:71:2b:c7:
86:ea:7f:d2:79:b9:af:5e:00:f3:24:13:85:86:58:
45:d8:81:14:68:75:e1:aa:02:d1:ae:4b:b9:6a:2d:
36:b0:99:1d:77:db:f0:92:8a:a0:e2:a0:59:40:dc:
1a:00:43:bc:fe:bc:c3:c7:3a:fd:c7:aa:e4:70:1e:
5a:65:da:26:36:03:5f:7a:82:3c:fd:ef:7f:c8:42:
f3:1f:44:e7:56:ee:90:fe:ea:0f:2e:f1:19:47:50:
a9:e2:28:b3:1e:bd:b4:04:a2:82:30:99:83:57:98:
a7:c8:76:e0:b1:a7:86:dd:9a:35:d0:a0:75:68:ad:
62:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9B:48:21:4C:33:9C:A5:0D:F8:54:51:3F:1D:3F:93:35:B1:22:28
X509v3 Authority Key Identifier:
keyid:D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:6c:4e:19:94:eb:ab:ec:05:30:a9:b1:be:fb:40:71:bb:f2:
fc:aa:43:b0:59:fe:f9:c4:fd:17:20:94:2f:5c:25:b0:15:0e:
cb:97:6c:c5:18:ab:3a:11:44:e3:ed:58:37:24:a0:98:ed:b9:
64:30:66:3a:a8:b9:96:f4:7d:29:c5:d2:45:8a:42:67:34:b8:
dd:65:56:25:76:76:dc:a8:a9:e9:f6:fd:59:47:cf:bd:2a:50:
44:42:11:27:29:a6:5c:e5:5e:c9:08:e1:e9:6c:2f:74:a1:8d:
9f:f4:9a:a2:9d:2e:5f:b5:3e:12:e5:62:a9:f4:2a:8f:39:5f:
5f:85:3c:9b:c5:02:ef:6e:0a:a2:00:c0:86:3d:fc:34:7c:2c:
14:2a:e5:45:31:f3:17:59:18:3f:f6:1d:14:d1:b5:ea:0e:a8:
bd:60:c5:8b:a0:13:04:74:30:e4:7a:63:3c:a8:1c:a5:e3:55:
37:c9:66:23:6a:53:46:bf:26:3b:69:d2:c5:cc:3e:50:53:c3:
52:d6:ed:9c:67:81:c3:ff:e0:66:59:7a:28:da:5f:c3:41:a4:
c8:da:a2:52:9a:4b:46:97:bc:8d:61:4d:8e:01:21:1c:a0:8b:
bb:b9:f1:35:5a:b1:db:f6:c3:d5:55:b0:29:35:a5:8b:14:25:
85:4c:34:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:52:59 2026 by rpki-client