Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
File: 0GLPgHpWt3Gl9CzBia8tYx61quw.mft (raw, json)
Hash identifier: xDgByGm0v4MhMeUa/aYg83spsx+A5ekA6LCkyjFNp+A=
Subject key identifier: 7F:6D:06:A8:0F:56:B2:CB:2B:40:4D:92:47:F5:97:F9:05:DD:FC:AD
Authority key identifier: D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC
Certificate issuer: /CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
Certificate serial: 019DCFAC2BAE421CE63206FC1BA3347398BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
Manifest number: 04AE
Signing time: Mon 27 Apr 2026 16:01:00 +0000
Manifest this update: Mon 27 Apr 2026 16:01:00 +0000
Manifest next update: Tue 28 Apr 2026 16:01:00 +0000
Files and hashes: 1: 0GLPgHpWt3Gl9CzBia8tYx61quw.crl (hash: Q/d+nG7yXsqZSWqlZ1d43/XxbES1ysSnR6JNS5epQ3A=)
2: FwyHYSFHDsnHe13-teMRd2Fwsok.roa (hash: HzeLlPvVaerPbRc2Uu0sKiJSiZNPtG93MnAwRwanKNY=)
3: NrghsoBul7tbolTWF8ZamRT2aQc.roa (hash: hJwEiMp115u5I16JHTrfollMknUTcgmFLYKBs/fIj04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 16:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:ac:2b:ae:42:1c:e6:32:06:fc:1b:a3:34:73:98:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
Validity
Not Before: Apr 27 16:01:00 2026 GMT
Not After : Apr 28 16:01:00 2026 GMT
Subject: CN=7f6d06a80f56b2cb2b404d9247f597f905ddfcad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:45:6b:3c:13:2c:30:9d:f8:ca:e2:79:b2:8d:
e0:2e:cc:a9:ec:2a:5c:e3:4c:e3:18:8c:a3:b6:11:
e1:1c:0a:ff:e6:37:09:19:ad:74:4e:f2:bc:56:a5:
d6:5a:16:37:87:32:d7:f0:83:50:2f:17:f8:0d:b2:
26:02:35:15:e0:1a:f7:84:a8:f6:9e:f3:59:6a:de:
3e:af:e7:a8:d0:14:62:79:23:d7:fc:26:55:56:46:
0e:dc:4a:ca:a0:66:46:bd:76:91:11:04:20:6c:50:
5a:7a:9e:a7:69:0f:62:6b:74:bf:c8:f0:15:3e:68:
57:a6:7b:09:f5:39:32:18:79:9b:c3:90:bb:a1:67:
6b:37:51:91:43:54:25:9d:1e:07:ce:03:68:2b:fa:
0e:68:be:c8:d6:e7:f8:9b:44:9f:8a:1d:67:e1:5f:
66:d0:2b:a8:f6:83:3c:11:e1:81:11:bb:51:40:ed:
f3:2b:dd:e0:28:ec:8b:11:f3:bb:2f:e8:23:85:93:
32:17:3a:15:02:de:8d:db:a0:bf:b6:39:9e:4f:3b:
48:60:ad:fb:47:c7:56:46:4f:5e:5d:40:95:88:3b:
d9:11:5f:a4:32:ee:a9:7c:5b:2e:e4:50:06:ea:9c:
cb:57:54:a6:c4:2b:f5:15:73:54:02:f6:e7:97:c9:
58:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6D:06:A8:0F:56:B2:CB:2B:40:4D:92:47:F5:97:F9:05:DD:FC:AD
X509v3 Authority Key Identifier:
keyid:D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d5:c3:e4:d2:52:98:03:ab:93:e5:2f:07:aa:9c:19:00:03:
29:c7:8b:df:ca:ae:90:54:a0:15:a4:69:fa:6e:dd:a8:aa:aa:
1b:be:64:64:ed:95:fb:cd:d0:c8:c2:f6:64:c2:c4:d0:53:07:
13:c2:a5:87:6b:b7:80:5a:9b:cd:04:71:5d:cc:86:b1:99:11:
83:e3:d1:95:16:cc:72:6d:7b:28:92:da:86:28:9f:99:e1:83:
56:99:27:f8:c5:48:1f:20:b5:bc:5a:96:d4:f2:34:e8:03:d2:
d3:24:80:21:de:ad:14:24:70:6c:55:03:ac:8f:14:5e:53:fa:
0c:97:6a:6e:0a:63:42:50:97:a1:3b:51:c8:ff:82:1e:82:1d:
90:1c:2f:8c:5f:35:a1:b9:ed:c6:7a:f3:99:6f:b4:e7:17:42:
da:b6:f5:76:46:d9:ae:84:ce:9c:a9:d1:8a:70:53:c2:41:e1:
be:3f:fa:10:ac:c5:fc:fd:60:fa:ce:aa:bf:ae:8b:9d:ea:23:
42:ef:3b:a9:35:19:18:fa:21:c5:d9:4b:f3:2e:aa:2e:97:39:
ec:10:62:f3:22:76:77:9d:c4:4b:0e:52:08:dc:60:81:83:1e:
c0:2f:6b:14:22:1c:af:2e:c9:82:78:b6:b1:ab:43:89:40:86:
78:57:e5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:34:29 2026 by rpki-client