Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
File: _0cFo2PcHY0OpRybmh7L04B70FQ.mft (raw, json)
Hash identifier: ZYqMDk1+tTEBe3D+l/1i0CQucmc8Y8FyCTQhosLExM4=
Subject key identifier: 62:BC:AA:43:80:6F:67:DC:33:3B:2D:9F:1E:F4:2E:DD:FD:03:BF:55
Authority key identifier: FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
Certificate issuer: /CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Certificate serial: 019DD2083F73F7C3F81855CEDE45D164BE7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
Manifest number: 18E3
Signing time: Tue 28 Apr 2026 03:00:49 +0000
Manifest this update: Tue 28 Apr 2026 03:00:49 +0000
Manifest next update: Wed 29 Apr 2026 03:00:49 +0000
Files and hashes: 1: DJeUFnamTZ95ip1wqQB6GBsmyiQ.roa (hash: MVnppoj2mz3TnYvjg2uHh/9JjoQIHJwR2BBiRIQrPeE=)
2: GHjJjwBpoAdhz9IMpI8-MFbmhXg.roa (hash: Yg81SKjjSUrf7wcCQo3l8C3jEm5E2w8HUv9yWnStEig=)
3: _0cFo2PcHY0OpRybmh7L04B70FQ.crl (hash: hAM/3K7qSi8+g9KNEO7zN/DKgOIPLAloX9ROwv1TcTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d2:08:3f:73:f7:c3:f8:18:55:ce:de:45:d1:64:be:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Validity
Not Before: Apr 28 03:00:49 2026 GMT
Not After : Apr 29 03:00:49 2026 GMT
Subject: CN=62bcaa43806f67dc333b2d9f1ef42eddfd03bf55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:de:4c:26:2a:ef:b7:9d:96:a8:07:5f:1c:e5:
ac:2c:c3:0a:b8:27:c1:e3:db:ce:c2:48:97:a3:f4:
83:e2:be:c9:46:0c:10:07:79:a6:c2:ee:6d:e0:2d:
d9:1f:89:8b:48:fc:19:db:e4:9d:55:d9:90:de:50:
cb:6d:11:d7:ca:27:88:14:02:46:b7:d4:f8:de:e9:
36:56:06:3e:07:9a:97:15:61:b7:69:52:fe:cf:45:
6c:de:13:ec:71:3b:84:55:68:b4:f8:0d:dd:5d:7f:
9b:c0:6f:a7:5a:b7:63:d0:ac:cf:7b:2f:84:ed:7c:
44:9e:c4:cb:2b:40:4e:aa:48:61:52:d5:fd:65:6f:
8d:4d:60:cd:1e:8b:c7:94:20:11:ac:e7:9c:ea:3d:
29:a6:94:5b:f3:3f:c8:eb:d6:fd:bd:a0:b1:4d:1d:
ff:f1:9e:d0:2d:d8:17:1a:7f:c0:92:b3:20:e2:ae:
c5:c5:09:bf:24:76:fe:9b:2e:2f:34:5a:3f:c2:f3:
c4:bc:ab:3b:5b:af:74:45:86:75:60:6d:b5:95:4e:
2b:30:46:cc:c6:6f:92:e4:97:9c:69:ad:0f:1d:a3:
c8:e7:0f:57:9e:e0:d8:af:c7:3d:c9:69:67:d0:d0:
32:99:d6:c1:d1:a9:ca:19:22:6c:71:ed:25:c6:24:
78:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:BC:AA:43:80:6F:67:DC:33:3B:2D:9F:1E:F4:2E:DD:FD:03:BF:55
X509v3 Authority Key Identifier:
keyid:FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ad:1b:33:1c:bb:61:a5:a5:2a:ef:18:94:03:88:f9:0a:6a:
b3:0a:10:17:b4:c3:47:78:a9:73:5c:8f:c6:f5:37:32:8f:ed:
26:7c:cf:0c:9a:ea:26:c9:60:d4:14:92:ad:02:5f:5f:4d:d4:
b6:b1:34:a7:cc:1c:83:86:1d:18:13:68:19:d9:ef:0c:a9:22:
27:47:79:ce:15:60:b9:b2:3d:22:51:58:8a:ac:18:2a:bf:e8:
79:dc:71:85:ec:88:a7:80:0b:70:7f:c3:71:5c:f6:60:4e:46:
79:79:fc:8d:ae:ad:9a:f7:11:66:d3:cc:6b:4b:d7:ae:dd:79:
43:e4:40:fb:b4:a4:bc:88:1c:f7:4d:88:ec:86:6e:61:bf:a1:
60:91:c8:2f:b6:20:76:b8:df:9c:58:82:31:e7:e4:38:21:ad:
77:77:ac:52:8c:da:8e:e3:e1:93:71:30:04:25:ac:f2:55:62:
cf:c4:39:e6:ab:38:0b:78:a7:6f:42:83:cd:04:36:cc:cd:d9:
03:4e:43:41:e5:66:58:8e:47:be:05:c7:58:a2:f1:ee:13:86:
c6:b1:91:ac:e9:08:43:d4:99:a2:ae:cc:b6:73:a2:c1:30:40:
ca:25:52:11:fd:b0:5b:46:f0:34:4f:1e:26:5a:92:ec:9f:c2:
8d:08:29:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 04:45:59 2026 by rpki-client