Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
File: 0nuHf4mTQSab7GfG46CoiLp66Y0.mft (raw, json)
Hash identifier: KjM1Ix7c7sQe5sqwcOIHlIGYbguZlsDv0mXNGnuyLKM=
Subject key identifier: 65:0B:6E:AA:FB:59:DA:02:CA:75:D4:2A:6D:C0:DF:F3:F1:A8:B6:30
Authority key identifier: D2:7B:87:7F:89:93:41:26:9B:EC:67:C6:E3:A0:A8:88:BA:7A:E9:8D
Certificate issuer: /CN=d27b877f899341269bec67c6e3a0a888ba7ae98d
Certificate serial: 019D99D02BA2974A3FD043C581FE0A3A1680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
Manifest number: 0CC7
Signing time: Fri 17 Apr 2026 05:00:49 +0000
Manifest this update: Fri 17 Apr 2026 05:00:49 +0000
Manifest next update: Sat 18 Apr 2026 05:00:49 +0000
Files and hashes: 1: 0nuHf4mTQSab7GfG46CoiLp66Y0.crl (hash: VkST9Hn6uEESdLhMTUkJcZHPx5Gz646IiAqOxXrI8Ik=)
2: ESKSicApbc_Lc7K1oxfrHyvWB2A.roa (hash: 9hp563pGKax4wS0ioE86wmQq8LK8c0yOcQLKfH9tKgk=)
3: GzzDQC3ubi3zt1X18DBGioGRdBc.roa (hash: D/wNKKfIUY9J0S4B/WgJwAFtRjUwUsHpDQtQvyp4Lvk=)
4: a8xxFezDGCmHsEOSRqb1XFyjzzQ.roa (hash: UKvCG+Ut498aH2KrK/T04+U4clxpUw2ygew8dg+YGZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:2b:a2:97:4a:3f:d0:43:c5:81:fe:0a:3a:16:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d27b877f899341269bec67c6e3a0a888ba7ae98d
Validity
Not Before: Apr 17 05:00:49 2026 GMT
Not After : Apr 18 05:00:49 2026 GMT
Subject: CN=650b6eaafb59da02ca75d42a6dc0dff3f1a8b630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:47:0e:80:a5:de:c5:b8:75:91:52:22:22:f4:
e9:9b:fb:99:59:74:07:c5:7d:b2:82:1c:d6:0b:14:
7e:f8:be:4c:ba:30:9c:c2:25:90:2f:dc:04:5e:f9:
24:cb:5e:4d:20:f9:46:b1:df:02:08:a5:dd:77:d4:
3a:93:56:a5:a5:3e:a2:aa:38:d1:a3:52:00:85:a0:
ba:fa:e0:1d:c9:c0:fc:97:7b:21:60:bf:1a:5e:ec:
99:83:93:21:29:e3:a3:ee:78:64:d5:22:16:47:9d:
d8:cd:6f:b1:fa:42:b1:31:ed:87:02:e7:85:15:c1:
3b:bf:1f:3f:e6:47:23:b1:aa:ba:13:2d:80:1f:29:
c0:f0:33:9b:22:70:56:4a:7a:45:29:ed:e5:68:7a:
9c:80:a2:b4:bb:f7:ef:f4:84:a6:f4:b4:3d:ac:1b:
c7:cd:11:6f:ec:b3:60:e5:da:32:45:2c:93:d7:69:
27:81:9d:5b:5e:6d:55:a5:0a:5f:8b:ae:0c:6d:45:
66:bb:b8:f0:7a:cb:05:d2:19:24:f4:d7:2b:21:de:
fa:e7:e1:20:78:25:81:17:8f:c0:04:e5:df:a2:ea:
f9:23:60:00:92:b6:72:59:d5:c7:d2:91:3c:28:f0:
89:47:ac:f6:a0:f6:fc:f4:26:4b:00:30:a4:04:9f:
06:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0B:6E:AA:FB:59:DA:02:CA:75:D4:2A:6D:C0:DF:F3:F1:A8:B6:30
X509v3 Authority Key Identifier:
keyid:D2:7B:87:7F:89:93:41:26:9B:EC:67:C6:E3:A0:A8:88:BA:7A:E9:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b7:f5:0e:73:af:4e:f1:3c:4a:1c:33:1b:da:0e:1d:1f:f0:
d8:95:f4:64:ad:cc:1e:39:5b:2e:26:af:9f:e7:b5:30:4e:f5:
b3:ab:fb:9e:7a:ff:17:95:cc:68:08:d1:e9:d6:86:ea:2f:5b:
63:23:56:ca:5a:a7:4e:2e:a3:d4:b9:35:33:0e:9e:9d:aa:d1:
2d:0d:23:5b:9f:a4:55:32:a7:f2:3d:5a:53:6d:e1:4c:20:f9:
a1:54:e1:b3:ae:55:f8:5c:d9:f0:51:b8:66:b6:80:a5:51:c7:
a2:26:61:cf:62:34:7e:2d:e8:fe:62:15:d8:6c:f5:91:43:8d:
94:0a:29:ff:b0:d0:aa:51:c4:5d:4b:9c:62:ed:37:dd:f2:0d:
d1:56:95:69:36:3c:bd:d7:e9:ca:5c:7b:97:59:48:6a:90:d1:
bb:76:7d:26:81:e8:46:c4:28:f7:c5:78:03:57:04:9a:30:36:
05:3b:a7:74:da:e3:6a:5d:94:73:c0:94:29:c1:d6:29:4e:b5:
c5:ba:33:37:35:04:d9:68:88:fc:12:82:76:26:a9:1e:63:99:
71:c3:79:f7:3b:6b:0b:a0:db:4c:61:c8:65:c3:30:cf:58:5e:
e8:43:f8:d5:e3:76:b4:7c:8e:1e:3d:62:17:ef:00:b6:a0:5a:
86:e8:4d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:03:36 2026 by rpki-client