Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ed4a4c-e565-4604-999f-c5274399458b/1/0MP5VIhUg88Sqa7QXM5gNX-ktL4.mft
File: 0MP5VIhUg88Sqa7QXM5gNX-ktL4.mft (raw, json)
Hash identifier: folDdaJI6VsULuY2KWk4WVFQfw3bkdAdj31fLycRKdA=
Subject key identifier: AA:54:58:49:D4:2E:CA:1B:C4:5A:1E:4B:D4:FB:5A:CB:63:8E:C9:B4
Authority key identifier: D0:C3:F9:54:88:54:83:CF:12:A9:AE:D0:5C:CE:60:35:7F:A4:B4:BE
Certificate issuer: /CN=d0c3f954885483cf12a9aed05cce60357fa4b4be
Certificate serial: 019D66F554D3370507F96299E6981D92B11A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0MP5VIhUg88Sqa7QXM5gNX-ktL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ed4a4c-e565-4604-999f-c5274399458b/1/0MP5VIhUg88Sqa7QXM5gNX-ktL4.mft
Manifest number: 18
Signing time: Tue 07 Apr 2026 08:00:47 +0000
Manifest this update: Tue 07 Apr 2026 08:00:47 +0000
Manifest next update: Wed 08 Apr 2026 08:00:47 +0000
Files and hashes: 1: 0MP5VIhUg88Sqa7QXM5gNX-ktL4.crl (hash: N92rXASxc56I+jg1eY8KTRdsK6umgG1pn4VRzH+qJBg=)
2: 1JGl546XdWjk0oOy56nI8pHJhWk.roa (hash: uscShTP+qNfU1RA7Q+pYfpaR8pLkQ13vtqeKOAQVAxU=)
3: MOJcdxQiBxAx2vvdcpdbYmiGD_A.roa (hash: ZIMOdFsqgaXvljzA+t76+XedwYdcjxI2Gj45XhDck7I=)
4: PiEU5bw5uemnzlSgvSZN2wdnxVM.roa (hash: ESXJVv37LFh+irhkVpNO1UdQQDqDJqxHQaBXkLgisEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/ed4a4c-e565-4604-999f-c5274399458b/1/0MP5VIhUg88Sqa7QXM5gNX-ktL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/ed4a4c-e565-4604-999f-c5274399458b/1/0MP5VIhUg88Sqa7QXM5gNX-ktL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0MP5VIhUg88Sqa7QXM5gNX-ktL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:66:f5:54:d3:37:05:07:f9:62:99:e6:98:1d:92:b1:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0c3f954885483cf12a9aed05cce60357fa4b4be
Validity
Not Before: Apr 7 08:00:47 2026 GMT
Not After : Apr 8 08:00:47 2026 GMT
Subject: CN=aa545849d42eca1bc45a1e4bd4fb5acb638ec9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:84:22:9f:82:4a:86:8f:c3:4d:d9:b1:7c:9e:
9a:52:46:c8:b8:49:82:31:ad:bf:49:b5:e4:eb:ba:
6a:9f:c3:2c:5e:94:ca:80:88:c3:d8:9c:54:ab:9f:
f5:5d:09:ee:3b:ea:f1:b5:e2:1c:db:50:96:f3:0e:
d8:68:94:71:17:66:de:14:cc:f0:4a:f3:63:93:71:
cc:50:76:92:89:8e:47:9f:c7:fc:2c:32:40:0d:6d:
51:7b:40:c2:c1:12:96:d3:02:a3:e0:50:f5:83:42:
66:90:68:12:48:d2:d4:7f:c2:2c:4a:84:a5:9f:96:
b4:df:00:ed:7c:12:6c:a9:38:f3:82:2b:24:d6:4b:
c2:a4:d0:c7:0e:67:8f:da:73:d4:0c:39:10:13:59:
a2:47:dd:7e:c6:95:d9:da:4b:f7:7f:4e:b3:81:1d:
17:a6:ba:6b:38:98:6c:d3:62:00:f3:2c:51:67:5f:
35:40:ff:3e:43:ae:c7:66:7d:9c:26:4e:1d:79:c2:
c7:a5:69:ad:62:ce:b7:d0:33:19:c1:03:80:41:18:
01:6e:ab:f9:d4:53:12:74:9f:d4:7b:b2:ba:06:7c:
af:45:e5:2c:9b:3d:cf:57:8a:11:c2:10:e3:f8:51:
4b:39:72:5b:ae:2a:d7:00:83:a4:15:27:28:d5:12:
86:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:54:58:49:D4:2E:CA:1B:C4:5A:1E:4B:D4:FB:5A:CB:63:8E:C9:B4
X509v3 Authority Key Identifier:
keyid:D0:C3:F9:54:88:54:83:CF:12:A9:AE:D0:5C:CE:60:35:7F:A4:B4:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0MP5VIhUg88Sqa7QXM5gNX-ktL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ed4a4c-e565-4604-999f-c5274399458b/1/0MP5VIhUg88Sqa7QXM5gNX-ktL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ed4a4c-e565-4604-999f-c5274399458b/1/0MP5VIhUg88Sqa7QXM5gNX-ktL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:96:a2:d4:9f:71:bd:c9:6a:52:ec:1f:d5:d2:ed:1e:60:49:
b0:a3:70:67:fc:e5:d2:c6:e2:07:f8:7c:e6:7b:e5:dc:88:22:
66:d4:03:5b:e0:20:4f:b1:76:44:1c:b6:35:38:2c:6b:bb:5b:
65:ed:3c:f2:03:39:0f:20:4b:23:25:85:a1:98:99:e4:fb:d0:
b2:d8:29:a4:5d:75:c3:08:9a:84:f9:72:5f:ef:2e:af:b3:2f:
2b:97:9e:f2:54:60:30:fb:b2:0e:a5:04:48:0d:9d:de:42:aa:
3d:4c:f4:f3:56:57:a5:54:83:8c:0b:a0:55:0e:2a:cf:74:71:
e2:54:fb:e5:28:fa:a2:38:da:dc:b2:12:05:2e:16:f4:b2:98:
74:45:01:77:02:ac:ec:ef:63:7b:e6:7f:72:f2:df:44:de:78:
3d:5f:ff:9a:10:b8:3d:5e:05:65:53:06:66:2e:64:82:74:9c:
8f:09:29:e7:9b:b9:f0:93:98:32:96:cd:dc:a6:09:56:d5:8f:
05:ae:85:a6:06:d3:12:f8:88:87:ae:a5:db:4f:a5:af:1d:85:
47:48:77:34:7a:18:3b:2d:db:3e:e3:c3:1d:fa:31:33:8a:76:
11:e5:99:9f:41:19:8e:cb:f1:7b:b1:0d:10:e7:2a:db:a2:31:
fb:82:1f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 12:02:54 2026 by rpki-client