Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
File: 0vHIhC58-JGyNNOh4OLg73PoQqo.mft (raw, json)
Hash identifier: +B3prLGPSsXvhmb3kUAlDo39G8h9GSLRYWi/JrJJY90=
Subject key identifier: 08:26:8F:7D:3B:7A:6F:E7:27:DF:7B:BD:2B:4B:32:96:F0:3E:61:F5
Authority key identifier: D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
Certificate issuer: /CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Certificate serial: 019E303B9DAB6315BAB8A9125191FC2C86D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
Manifest number: 1912
Signing time: Sat 16 May 2026 10:01:13 +0000
Manifest this update: Sat 16 May 2026 10:01:13 +0000
Manifest next update: Sun 17 May 2026 10:01:13 +0000
Files and hashes: 1: 0vHIhC58-JGyNNOh4OLg73PoQqo.crl (hash: YLvmT5kwu3D13OgPL03ZY+6Dwf4lf9zSefNMkXXwgzg=)
2: l9fT_tPQilc8kDDpXdmC63EbBTU.roa (hash: e0hhcAS9+zmOEL/7aF5yJ1rOw5m87GlUo2fUEzHI/tc=)
3: zZqdbpX91TjBbrVKBU--OsfsNgs.roa (hash: 5bqwY0fuE7qADoXdmI9CeMVMqqLQteAK+rBOtRg2eMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:9d:ab:63:15:ba:b8:a9:12:51:91:fc:2c:86:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Validity
Not Before: May 16 10:01:13 2026 GMT
Not After : May 17 10:01:13 2026 GMT
Subject: CN=08268f7d3b7a6fe727df7bbd2b4b3296f03e61f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:42:0b:d1:c9:25:1a:69:8d:d1:41:d9:a5:9c:
a4:21:40:db:04:d0:29:08:69:52:54:2c:6b:5f:7c:
c2:8c:d0:bd:81:0f:b8:27:f6:29:77:8d:3c:7b:0d:
9f:68:f9:f3:4a:37:b4:4b:c5:67:9f:bf:ed:59:af:
b0:10:31:f7:60:48:cc:fc:ae:30:b7:59:f5:4b:2c:
81:1a:d6:64:0c:0e:4d:90:cb:1a:58:30:4b:1e:4e:
78:b1:7a:4e:f8:24:13:b3:c1:60:c6:80:1b:be:8f:
24:c6:b2:94:1d:92:d7:30:31:4d:fa:71:76:b1:98:
dd:e9:d6:be:cf:86:a5:d6:7b:54:39:4d:64:61:bd:
ac:33:0b:e0:8d:a7:2a:d6:f9:36:ef:e5:7a:8a:be:
12:a9:97:5c:19:9b:f9:e4:97:7b:39:ec:08:db:f0:
a0:2f:74:49:f0:20:15:5a:2f:29:10:a9:24:59:a3:
d5:f1:62:29:9a:0c:56:8a:9b:26:c6:47:14:9f:15:
28:08:70:40:96:bc:35:e3:08:2c:c9:0c:19:19:69:
db:26:6a:08:26:5a:4c:c3:eb:cb:90:04:31:ae:0c:
0a:5f:bc:a3:da:41:56:91:95:40:9c:16:b6:76:73:
0f:6c:f4:b9:c3:88:4b:fe:97:f4:d4:a0:4b:a9:20:
9c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:26:8F:7D:3B:7A:6F:E7:27:DF:7B:BD:2B:4B:32:96:F0:3E:61:F5
X509v3 Authority Key Identifier:
keyid:D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:8d:b5:cf:ff:57:3d:80:fe:f0:5b:19:87:bd:75:79:9d:b8:
8a:d0:5b:52:e8:29:37:d6:80:53:0d:37:56:0f:57:8e:b4:32:
78:13:49:e7:0b:c9:76:56:e2:ed:49:a4:b2:4b:d8:e3:19:df:
e9:5d:7b:2a:37:e1:b4:83:65:b9:72:9b:6c:19:5c:36:f0:bd:
fb:77:63:75:44:d2:8a:c9:0e:93:ce:df:60:c1:00:e7:7e:95:
08:93:40:61:e7:f3:97:1a:94:74:11:6a:df:1d:64:75:7d:39:
11:b2:b8:45:69:d4:c3:0f:53:4b:82:79:99:e8:bc:b0:4b:85:
9d:93:e4:e4:e6:8b:0d:34:d2:56:a9:7f:33:5f:4e:6b:b7:29:
05:66:3b:86:bb:e2:ce:59:21:fa:5c:36:a6:3c:c6:6d:99:a4:
04:02:08:97:f2:65:0b:60:f4:17:a4:f1:7d:19:fa:41:7e:6c:
da:2a:95:05:e9:fc:d0:02:b5:1d:d2:ba:3a:91:4a:93:24:68:
86:ee:1c:b4:a9:50:66:2a:38:ec:3a:05:a9:7d:d0:81:d5:b3:
5c:75:e4:6b:ff:eb:8c:03:52:ea:59:78:0c:28:c9:6c:30:3c:
6e:98:10:a0:11:1b:14:37:f5:df:82:9e:fc:0d:f5:9b:ea:98:
91:ad:3f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:42 2026 by rpki-client