
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft
File: 0Mv2ugl6drYQyFYDW8GN55fCpnc.mft (raw, json)
Hash identifier: L8vMcmc7+K5L7O4M+ajccT9nQ5rAWSdrG2te5woOvyg=
Subject key identifier: AD:CC:4A:98:B0:B7:68:3C:58:BC:5A:53:F5:0C:0F:19:30:AD:41:4A
Authority key identifier: D0:CB:F6:BA:09:7A:76:B6:10:C8:56:03:5B:C1:8D:E7:97:C2:A6:77
Certificate issuer: /CN=d0cbf6ba097a76b610c856035bc18de797c2a677
Certificate serial: 019DD019E8D140310F42C32DF6DE83232FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft
Manifest number: 0AC7
Signing time: Mon 27 Apr 2026 18:00:52 +0000
Manifest this update: Mon 27 Apr 2026 18:00:52 +0000
Manifest next update: Tue 28 Apr 2026 18:00:52 +0000
Files and hashes: 1: 0Mv2ugl6drYQyFYDW8GN55fCpnc.crl (hash: rxmlsUK9HTOGrxKtH/Ticfy21AY4sqYa/BjJafIpUCw=)
2: DqXib1Ly2xFoTm2bjcxnicthk1w.roa (hash: g/TBWWlwOSVO9LY7Rp7QlLHadW83dAk0kFgZL+CVZlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:19:e8:d1:40:31:0f:42:c3:2d:f6:de:83:23:2f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0cbf6ba097a76b610c856035bc18de797c2a677
Validity
Not Before: Apr 27 18:00:52 2026 GMT
Not After : Apr 28 18:00:52 2026 GMT
Subject: CN=adcc4a98b0b7683c58bc5a53f50c0f1930ad414a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:06:86:70:77:74:4a:f5:19:55:15:c2:43:de:
8f:30:56:2b:fd:1d:ea:a7:29:41:a5:df:de:61:ac:
b1:04:3e:39:d4:6c:e6:ac:c5:46:61:ca:05:b5:a4:
a9:63:46:fe:c5:b3:60:e5:d3:c2:f0:99:10:8c:17:
f8:88:23:ed:73:95:dc:46:8a:41:42:94:c9:1c:b1:
2a:62:b0:02:cd:17:a5:8e:aa:c8:e9:28:a7:d5:01:
9f:87:88:ec:3d:00:3a:cf:82:20:a8:b2:6d:9d:19:
be:bc:96:7c:47:4b:27:d1:dc:fe:7f:02:f0:f5:44:
ce:2e:f3:4c:46:d0:65:d9:28:78:af:4b:b0:f0:89:
78:68:8c:ff:72:4c:15:d8:08:b5:fe:74:8c:ae:74:
8b:6c:88:73:1d:f1:49:ca:ee:e8:88:8b:57:29:46:
e9:18:55:4a:71:34:40:ae:b5:d5:9d:67:c0:69:36:
2b:d9:d2:c8:08:e0:1f:df:44:73:4a:9f:ff:d4:5a:
86:95:d3:f6:49:a6:52:09:25:d6:0a:af:0f:55:b8:
0b:84:d0:8c:45:57:d5:13:83:11:49:19:c0:36:76:
fa:58:48:d0:98:a8:ea:49:d9:d4:7a:f6:d0:d2:2d:
a9:53:f5:67:1f:4c:87:e9:f3:91:53:09:db:7f:0b:
c2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CC:4A:98:B0:B7:68:3C:58:BC:5A:53:F5:0C:0F:19:30:AD:41:4A
X509v3 Authority Key Identifier:
keyid:D0:CB:F6:BA:09:7A:76:B6:10:C8:56:03:5B:C1:8D:E7:97:C2:A6:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:73:db:91:99:09:60:55:71:1b:d4:25:78:b8:15:a5:a9:82:
3d:4b:d9:09:51:ff:af:8c:c5:e8:23:75:e5:ac:45:b9:7c:09:
05:96:67:c5:ed:b3:6a:5b:d0:ce:f7:52:54:0c:28:70:ef:59:
1e:ab:e3:0f:8e:4c:55:66:a1:00:f9:33:e3:80:21:b4:15:f0:
65:c1:75:c1:9f:4a:65:16:d9:bf:70:ab:e5:28:19:44:27:90:
b5:90:56:3f:6c:6a:cc:02:74:0c:64:68:4e:b2:a7:ad:b4:a9:
24:a4:96:df:81:02:92:12:74:5c:0b:26:60:ce:fb:03:ed:25:
e8:80:61:73:05:d2:91:17:f3:a8:4f:92:c1:c8:07:ea:04:7a:
0a:b2:fd:9c:52:2b:d8:9b:a9:3e:ec:79:06:d2:dd:ab:32:61:
8e:48:b1:7d:0f:16:80:0f:20:43:43:86:a7:eb:a3:38:0c:74:
47:4e:85:ae:15:bb:29:77:20:19:9a:1d:70:e6:03:e6:f1:f5:
23:9c:5e:fc:5a:0e:8a:fe:fc:62:76:8b:79:e7:8e:4b:6e:6c:
95:6b:af:4f:1d:10:94:d5:7d:94:66:17:1c:34:ce:10:14:d7:
02:07:08:5d:3e:8e:a3:8e:61:92:27:b6:89:8f:5b:4e:71:b7:
f5:a1:11:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 00:52:57 2026 by rpki-client