Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ed4a4c-e565-4604-999f-c5274399458b/1/0MP5VIhUg88Sqa7QXM5gNX-ktL4.mft
File: 0MP5VIhUg88Sqa7QXM5gNX-ktL4.mft (raw, json)
Hash identifier: MPwx0dyvwLw0f5W90fyMP58ENcjFQcSHeN02e2JeB3c=
Subject key identifier: DA:2B:0C:E3:D8:36:E5:1B:D6:58:FD:49:70:89:11:29:19:F9:B9:D6
Authority key identifier: D0:C3:F9:54:88:54:83:CF:12:A9:AE:D0:5C:CE:60:35:7F:A4:B4:BE
Certificate issuer: /CN=d0c3f954885483cf12a9aed05cce60357fa4b4be
Certificate serial: 019D992B612C5277BF1C68B8679A013BE456
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0MP5VIhUg88Sqa7QXM5gNX-ktL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ed4a4c-e565-4604-999f-c5274399458b/1/0MP5VIhUg88Sqa7QXM5gNX-ktL4.mft
Manifest number: 32
Signing time: Fri 17 Apr 2026 02:00:50 +0000
Manifest this update: Fri 17 Apr 2026 02:00:50 +0000
Manifest next update: Sat 18 Apr 2026 02:00:50 +0000
Files and hashes: 1: 0MP5VIhUg88Sqa7QXM5gNX-ktL4.crl (hash: hMc9hsWnw05mcWG39EahPhQeHVBrvf3srleRTutbjkY=)
2: 1JGl546XdWjk0oOy56nI8pHJhWk.roa (hash: uscShTP+qNfU1RA7Q+pYfpaR8pLkQ13vtqeKOAQVAxU=)
3: MOJcdxQiBxAx2vvdcpdbYmiGD_A.roa (hash: ZIMOdFsqgaXvljzA+t76+XedwYdcjxI2Gj45XhDck7I=)
4: PiEU5bw5uemnzlSgvSZN2wdnxVM.roa (hash: ESXJVv37LFh+irhkVpNO1UdQQDqDJqxHQaBXkLgisEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/ed4a4c-e565-4604-999f-c5274399458b/1/0MP5VIhUg88Sqa7QXM5gNX-ktL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/ed4a4c-e565-4604-999f-c5274399458b/1/0MP5VIhUg88Sqa7QXM5gNX-ktL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0MP5VIhUg88Sqa7QXM5gNX-ktL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:61:2c:52:77:bf:1c:68:b8:67:9a:01:3b:e4:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0c3f954885483cf12a9aed05cce60357fa4b4be
Validity
Not Before: Apr 17 02:00:50 2026 GMT
Not After : Apr 18 02:00:50 2026 GMT
Subject: CN=da2b0ce3d836e51bd658fd497089112919f9b9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8c:05:6e:ef:a5:4d:f7:8d:45:7a:6e:7f:a7:
04:d4:8f:b8:39:d7:48:e0:04:1f:50:e0:b6:54:b7:
10:42:86:6d:5f:55:46:74:61:98:a5:b6:71:da:a0:
2e:ef:1b:e4:be:25:1f:37:93:57:5b:7f:c6:4a:96:
da:41:f2:5b:5c:74:cf:9e:63:e5:a7:75:c8:c2:49:
2e:bd:4b:22:55:54:ba:47:db:46:18:67:79:1a:f9:
d5:de:6c:89:66:b4:73:c3:17:c6:46:dd:e5:54:05:
33:38:61:3f:f3:cf:d3:1c:8f:30:73:4f:ee:37:68:
e4:62:7a:83:36:65:ca:a9:8c:43:75:5a:99:53:17:
2d:75:76:87:87:f2:58:e1:2a:c7:f0:46:69:89:ca:
c3:6d:ab:05:d4:20:ee:0d:d9:df:c0:b5:a7:89:8c:
97:d6:5b:5c:9c:e0:0b:df:0a:06:2d:62:a3:52:74:
55:36:ba:1c:55:22:f6:a3:cc:ef:6d:78:5c:83:72:
77:d7:4b:86:7c:6c:42:24:0c:ba:74:4c:c5:39:1b:
c0:b2:23:a9:6f:16:c0:e1:73:d8:f1:d3:cc:43:6b:
d7:93:ae:7b:4d:bb:06:97:6c:79:fa:7a:31:0f:8b:
4d:d3:d2:43:ba:ce:fc:67:fd:d8:2b:aa:36:40:e4:
4d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2B:0C:E3:D8:36:E5:1B:D6:58:FD:49:70:89:11:29:19:F9:B9:D6
X509v3 Authority Key Identifier:
keyid:D0:C3:F9:54:88:54:83:CF:12:A9:AE:D0:5C:CE:60:35:7F:A4:B4:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0MP5VIhUg88Sqa7QXM5gNX-ktL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ed4a4c-e565-4604-999f-c5274399458b/1/0MP5VIhUg88Sqa7QXM5gNX-ktL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ed4a4c-e565-4604-999f-c5274399458b/1/0MP5VIhUg88Sqa7QXM5gNX-ktL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f1:9f:20:81:07:13:ac:15:03:e8:82:47:4f:94:19:1f:e9:
ce:60:e2:d1:d1:db:59:e7:9f:d6:de:8f:5d:2a:74:03:0f:0a:
fe:fd:b6:cf:5e:d0:38:cf:12:be:01:12:f9:aa:44:84:51:48:
17:30:29:87:28:f4:4e:0b:e7:fb:a4:28:47:34:11:d9:37:13:
ee:b4:e0:18:b8:59:fa:29:e0:cb:3d:8c:5a:9f:c6:75:e1:62:
fe:b2:6b:55:6b:8e:22:c6:e0:99:3f:35:db:fa:43:fe:9c:57:
19:c1:61:31:4b:1a:e7:a3:d3:09:a4:5a:1f:47:be:65:b1:95:
9e:e1:20:ee:0c:fe:c9:bf:04:44:85:02:02:2a:0f:46:5b:64:
e4:d0:7e:22:eb:49:be:0f:a6:77:8e:53:b4:58:7f:9f:39:09:
0e:66:00:7c:ae:a0:60:19:60:a9:b8:b6:b8:5b:9c:17:0a:6e:
55:a7:02:1f:1e:61:19:49:5d:39:c8:a0:b0:61:c6:21:cd:76:
4a:71:a2:23:9d:25:5e:24:b3:4a:41:1b:f1:53:3a:f8:74:02:
6a:e4:7e:76:35:5d:43:10:34:ff:bc:21:af:df:a3:c2:1a:03:
57:cc:76:19:0d:42:30:d7:55:64:88:21:b0:ff:07:37:3d:b4:
69:44:dc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:28:39 2026 by rpki-client