Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft
File: 0dXq4THDsQiP-wI3mA1u4YiWaMY.mft (raw, json)
Hash identifier: KW9/2wXBCSfrG54trqoN6pfe2fwiDv+L7JsbHEQx8x0=
Subject key identifier: 19:CB:0E:EF:75:25:AC:4B:62:F7:05:65:D5:81:A4:AB:01:77:E9:89
Authority key identifier: D1:D5:EA:E1:31:C3:B1:08:8F:FB:02:37:98:0D:6E:E1:88:96:68:C6
Certificate issuer: /CN=d1d5eae131c3b1088ffb0237980d6ee1889668c6
Certificate serial: 019D9CD1FB326BDF79CB28876DB2BC1AAEE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dXq4THDsQiP-wI3mA1u4YiWaMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft
Manifest number: 023E
Signing time: Fri 17 Apr 2026 19:01:40 +0000
Manifest this update: Fri 17 Apr 2026 19:01:40 +0000
Manifest next update: Sat 18 Apr 2026 19:01:40 +0000
Files and hashes: 1: 0dXq4THDsQiP-wI3mA1u4YiWaMY.crl (hash: ksyDm7nz//3tqPeUh3XkHvwVSm2/eyLVX0JlSP6HDQQ=)
2: 0w_3pj-YjXdlGCOQrO5MmHi3QRU.roa (hash: NCRRT15Nw1RlGwpm/ytoJz8CpfLxBA4RH0mKpwLqRd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dXq4THDsQiP-wI3mA1u4YiWaMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d1:fb:32:6b:df:79:cb:28:87:6d:b2:bc:1a:ae:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1d5eae131c3b1088ffb0237980d6ee1889668c6
Validity
Not Before: Apr 17 19:01:40 2026 GMT
Not After : Apr 18 19:01:40 2026 GMT
Subject: CN=19cb0eef7525ac4b62f70565d581a4ab0177e989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8c:b1:39:67:72:05:3d:77:90:34:a0:43:39:
19:84:85:88:51:ed:bb:e3:c6:a8:43:95:b1:07:30:
78:56:d9:5b:91:a3:ab:23:2c:f1:39:b4:ee:1e:11:
9e:a0:62:13:7c:21:6e:5d:83:71:d2:06:28:90:85:
23:a3:f1:ac:1f:a8:75:41:21:74:b5:51:68:cd:82:
3d:d5:0f:a3:31:39:42:f6:af:37:86:bc:1b:d1:26:
2c:fe:f5:f8:42:b4:92:50:64:71:4f:39:83:f6:a6:
64:35:ed:ca:eb:6e:15:ff:20:a5:c5:2a:81:03:97:
fa:ff:b8:c1:b3:0d:73:c8:64:5c:aa:19:ac:0d:48:
06:9a:53:1b:26:f0:dc:83:85:82:a8:fb:c3:ec:49:
93:e3:96:69:43:9d:9d:44:ed:b9:0c:67:81:82:e8:
0f:e9:10:c8:26:7d:77:56:fa:ba:85:a0:06:59:d8:
1a:3a:0e:c9:5f:d3:80:61:51:d1:13:d7:52:8c:1c:
e8:70:91:3d:b4:bb:23:3b:7b:39:9a:fb:8a:74:46:
7a:df:ed:16:8e:98:f6:99:99:6c:c9:66:e6:ee:a8:
32:4a:7d:16:da:30:0e:9d:a4:d7:ed:cb:4d:48:bc:
85:cd:67:8e:75:f8:c3:f4:a3:61:a4:38:eb:91:13:
86:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CB:0E:EF:75:25:AC:4B:62:F7:05:65:D5:81:A4:AB:01:77:E9:89
X509v3 Authority Key Identifier:
keyid:D1:D5:EA:E1:31:C3:B1:08:8F:FB:02:37:98:0D:6E:E1:88:96:68:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dXq4THDsQiP-wI3mA1u4YiWaMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d9:75:4b:68:f1:3c:b9:a0:79:f4:88:74:fe:97:47:df:76:
d3:79:49:65:64:28:cb:19:48:7b:9c:ef:0f:aa:a7:65:9b:c9:
34:ba:ee:ab:af:0f:4e:72:5d:4c:31:f2:f3:b1:56:25:03:c9:
e6:f3:92:0c:f9:d8:38:73:dc:36:a5:8e:a7:5f:80:a4:c1:02:
4a:fb:38:3a:83:7d:25:66:71:a1:3a:ed:55:3e:dd:96:be:8a:
ed:75:f8:d8:c8:b8:e2:84:0f:e0:44:4b:33:9c:1a:92:00:bc:
f9:47:f2:5a:f6:bc:d3:30:2b:93:ae:60:0c:be:b4:6e:b5:a0:
91:06:62:3c:93:24:69:59:58:e2:3e:35:79:99:46:5f:ea:8b:
0d:7f:e9:27:51:6a:3a:17:74:26:c6:f2:99:b7:c3:9e:60:1e:
14:13:8f:b8:6f:59:71:49:d2:18:33:6b:52:35:1d:40:9f:1d:
a6:0a:b9:d4:ed:6e:c7:25:e6:41:29:18:01:30:fe:8d:3a:1f:
a2:22:4f:ad:f5:2c:01:da:7e:91:2d:fe:79:92:eb:bb:96:b0:
b4:54:52:cc:09:1a:c6:b2:9f:c9:83:d3:0c:09:f2:91:6b:da:
19:ec:18:84:c1:68:3b:1e:4c:c4:49:b9:3e:c9:62:e0:89:38:
d7:09:1e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:24:12 2026 by rpki-client