Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
File: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft (raw, json)
Hash identifier: Hz/LVI1Jgg151cBJ5mBi3hvx69e8SGfc7j5nEL8YrFU=
Subject key identifier: 9F:3C:03:84:99:23:A2:49:07:78:69:E9:FC:DB:B8:EE:35:8B:8E:96
Authority key identifier: D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
Certificate issuer: /CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Certificate serial: 019DED496FC79567CDCF8B28BFF553A71A3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
Manifest number: 1613
Signing time: Sun 03 May 2026 10:01:46 +0000
Manifest this update: Sun 03 May 2026 10:01:46 +0000
Manifest next update: Mon 04 May 2026 10:01:46 +0000
Files and hashes: 1: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl (hash: Nt4zosOuWdNtMc4SXWPdYq8vfOsCCLhsXKWKcQNTovs=)
2: 1-fLD9auB23Q-KgYeQIubXO96o4Q.roa (hash: /JJTz3wE1LRLJ7bz0AIRldwzfH3lc1HU/FwtYIJiaSU=)
3: T-8JhhcHQ5cIwEg6IG4tP0d0W4I.roa (hash: 9CdFc+e0Ar1W8fwX0HTyCIb5Mdz7Fe3CEQ/bMI8Efhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ed:49:6f:c7:95:67:cd:cf:8b:28:bf:f5:53:a7:1a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Validity
Not Before: May 3 10:01:46 2026 GMT
Not After : May 4 10:01:46 2026 GMT
Subject: CN=9f3c03849923a249077869e9fcdbb8ee358b8e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:70:d9:cc:e1:06:ba:1b:cd:1f:4c:ed:cc:7e:
22:00:55:46:d2:ba:59:1e:43:df:89:ae:33:1e:0e:
8c:f7:6e:06:d0:40:cd:fc:2e:1d:f1:25:1d:ec:1c:
8a:33:ca:a4:79:26:68:0d:fd:ef:97:f4:5a:e9:20:
9a:64:f3:59:21:05:08:25:0f:27:a7:b2:c9:96:09:
a3:62:0d:36:1b:6b:dd:7a:e9:af:ad:1d:fb:eb:00:
4f:9f:13:e4:92:04:77:a7:31:f4:16:05:99:cd:d8:
63:05:14:f4:a4:b0:e9:29:be:e3:02:11:8f:98:5a:
bc:d9:20:90:c4:dd:2e:41:25:24:b4:e6:33:17:b2:
33:0d:b7:e3:69:6d:28:00:fc:f3:77:f7:bd:07:40:
89:07:d7:79:f4:96:81:0c:a7:5a:a0:ff:7d:45:1a:
40:cd:38:72:50:9e:22:b5:c6:67:83:09:4b:f9:37:
72:68:70:d6:d0:69:96:83:36:9a:dc:70:cf:12:68:
dc:f2:5b:65:58:c6:f3:c8:f5:58:1a:51:99:d2:70:
91:32:ae:60:fc:bc:67:46:6b:c4:be:f5:7d:cf:4e:
dc:18:ca:93:af:c5:41:2e:53:a3:88:88:09:24:5b:
bf:b6:25:83:98:01:8d:f3:64:15:95:56:bd:69:5b:
94:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3C:03:84:99:23:A2:49:07:78:69:E9:FC:DB:B8:EE:35:8B:8E:96
X509v3 Authority Key Identifier:
keyid:D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a5:a1:b1:fe:e8:77:0e:c1:23:9f:ea:cf:94:a8:9a:db:6c:
4c:74:1d:ec:76:21:cd:f9:31:3e:fe:b1:3d:06:c6:92:4c:75:
fa:83:11:45:18:b0:d9:bc:83:ae:39:8b:af:c1:91:03:03:5e:
b6:c6:b3:e9:41:fc:7f:e6:65:48:6d:a2:54:29:9c:21:95:e5:
fe:d7:1f:a4:dc:8e:ce:65:3c:b0:f9:36:0f:e2:5d:37:5a:34:
43:17:fc:49:20:88:35:e1:09:56:f1:4f:ff:e6:fe:e1:8a:81:
5d:90:34:11:27:6f:6e:9a:38:18:18:c2:d1:36:c1:af:1f:9d:
97:fa:62:76:c0:e3:5b:f9:c3:b4:ce:d7:2b:dd:8e:b8:2b:4c:
d9:e3:8c:50:54:6f:fd:c6:ce:4f:78:42:51:a8:f1:fe:48:8f:
fe:75:a6:20:24:aa:d7:be:a6:17:28:56:4a:73:54:32:cd:7d:
c6:f0:19:60:be:4d:40:e8:c1:24:54:bc:e0:66:e3:73:83:b1:
2f:a7:49:e4:ea:6a:4a:7b:7e:e5:bd:d0:b8:9e:91:fb:0c:a6:
62:c4:97:b5:02:9f:39:00:80:c9:5a:e8:7c:f4:79:3d:1d:76:
99:66:1f:0a:9e:a5:62:11:be:db:4f:d3:7c:0e:0f:39:d4:b4:
a7:44:d5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 15:33:56 2026 by rpki-client