Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
File: 0i870LrmA6t5BgKpa7vEK1Mi6I8.mft (raw, json)
Hash identifier: 57oTHTXjk+VnmNmRVTGdx3Vgt9j83dQsRu+QuAJ52D4=
Subject key identifier: 4E:BC:2E:1D:C3:FF:83:A0:4D:A5:01:3C:51:66:18:0F:8A:6B:2D:3D
Authority key identifier: D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
Certificate issuer: /CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
Certificate serial: 019D9AE2BF48412C35E311B8A122C69DCE22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
Manifest number: 0F42
Signing time: Fri 17 Apr 2026 10:00:44 +0000
Manifest this update: Fri 17 Apr 2026 10:00:44 +0000
Manifest next update: Sat 18 Apr 2026 10:00:44 +0000
Files and hashes: 1: 0i870LrmA6t5BgKpa7vEK1Mi6I8.crl (hash: PfiZbUOCWrFRkv3ndiQxsZlH3A0IWLJaT4W15S16Tmw=)
2: 8YQYzkkWSUbJ3UPPymYSW914MMg.roa (hash: 9lvLYcAIuT8e6AK3a0cVw0sCFSHzJhGpdm+DyXOpWt0=)
3: 96-EzPJNO2K_r89WsSa8F4wKfII.roa (hash: TgdBDufBqmIta91fueVV5ENNB6Zw3/BojYphtII6yZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:bf:48:41:2c:35:e3:11:b8:a1:22:c6:9d:ce:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
Validity
Not Before: Apr 17 10:00:44 2026 GMT
Not After : Apr 18 10:00:44 2026 GMT
Subject: CN=4ebc2e1dc3ff83a04da5013c5166180f8a6b2d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:af:cf:16:be:2a:41:c5:a0:84:1a:0f:79:57:
a6:d1:24:14:bb:78:4d:dd:b7:80:64:6e:a6:b7:a7:
e1:c1:4d:fe:37:a2:c2:56:3f:7d:89:ad:3b:95:a9:
d7:ab:f1:c7:7d:c7:83:80:f3:51:da:63:3b:0a:7c:
b8:fd:47:c9:fb:33:18:91:a0:92:64:99:ab:fc:b9:
60:de:59:05:88:44:85:3b:3c:22:64:7b:83:19:88:
99:10:8b:74:5a:ff:0b:f6:6e:55:c0:03:99:25:8d:
b8:5f:a2:86:3e:e0:b1:0e:eb:f0:26:ce:ab:07:c0:
5c:43:30:c9:78:d9:30:1e:c7:bd:ea:5b:e9:00:b1:
6c:6a:fb:f4:66:3d:24:1d:56:69:54:89:26:e6:6c:
d9:83:37:b5:6a:cd:51:8c:d6:d5:2f:85:5e:4b:62:
8a:58:62:c8:56:c1:59:06:69:db:55:b1:a2:ba:c3:
13:a9:73:ce:8a:49:b7:42:64:9f:5c:e4:43:8c:f3:
62:b6:ba:04:ce:02:2a:8a:be:fd:2f:f4:1f:d7:16:
78:3a:f1:34:88:39:ef:f9:8a:3e:42:0d:05:f6:e7:
df:8c:73:1e:1b:f3:72:02:f0:1c:7e:d9:dd:1d:9e:
a7:53:37:80:f6:c6:e6:83:79:48:98:38:17:a3:1b:
21:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BC:2E:1D:C3:FF:83:A0:4D:A5:01:3C:51:66:18:0F:8A:6B:2D:3D
X509v3 Authority Key Identifier:
keyid:D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:70:4b:db:63:23:09:e6:e6:b7:62:68:cb:ff:6e:7e:5c:29:
28:91:90:de:41:c3:05:28:68:5e:91:43:db:8f:19:43:50:18:
b6:ea:4c:45:41:21:35:94:fa:89:90:d7:ce:87:09:ef:99:33:
61:d8:29:1b:fc:48:5e:10:15:11:73:95:2b:9e:87:33:ff:4b:
66:4e:e8:34:89:a7:16:5f:6d:f1:de:ce:4c:79:9b:d8:d0:13:
10:48:2d:d4:70:91:8d:3b:3d:2a:5f:f0:fc:b4:d0:73:45:8e:
06:a4:25:dc:bc:0f:06:5c:17:51:c1:4b:f1:90:11:ed:b7:a5:
31:03:3e:ba:ba:ba:af:11:90:c0:2e:43:80:8f:eb:22:a4:d2:
ad:8c:87:3d:ad:ed:54:18:e9:90:93:d5:29:8b:dc:4d:07:25:
80:5a:18:1e:5b:6d:a5:d7:8a:44:1d:40:e9:e0:70:62:48:cf:
c1:95:aa:4a:27:2f:c2:b7:6e:39:cd:42:14:41:21:6f:83:bf:
c0:9d:39:8d:39:e7:0e:35:4b:e8:e8:44:1c:16:91:c1:3b:08:
8a:b4:61:f7:22:80:3b:34:c1:9f:0a:c2:29:f2:29:50:51:41:
46:d3:37:fa:e4:91:69:c4:19:5d:12:f7:c3:32:bf:74:e1:b3:
ae:56:d3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:14:15 2026 by rpki-client