Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
File: 0RaDXQN3hmIKnp96DjYEmLtlQSc.mft (raw, json)
Hash identifier: /il7++Mi8JExaVQzaeWtQf08u5oY7v4lQ7I8nOCxUyU=
Subject key identifier: D1:1E:C0:36:D3:49:69:E4:CC:4F:48:09:AC:2C:72:18:AC:10:1A:9C
Authority key identifier: D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
Certificate issuer: /CN=d116835d037786620a9e9f7a0e360498bb654127
Certificate serial: 019DB0FD2E283F7D29BAE7DCF7DA8BB9B211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
Manifest number: 0CE5
Signing time: Tue 21 Apr 2026 17:01:15 +0000
Manifest this update: Tue 21 Apr 2026 17:01:15 +0000
Manifest next update: Wed 22 Apr 2026 17:01:15 +0000
Files and hashes: 1: 0RaDXQN3hmIKnp96DjYEmLtlQSc.crl (hash: LuFQxLwRUv3b8OM94LLB7vZM1kN7PcDhPRwHiddba6o=)
2: GxXxtmytTeePZFqMmjKewv0phDk.roa (hash: DQNMt4Qmq5pWK/m+65wngsoZgA7+I6etgVuEFLBf9P8=)
3: hrfVvtnK2yUD8q8kqhgwgxBrIWA.roa (hash: knPxWaldCF2NZQN6BPLTcSuiJLTa63/Ehra1OYIbZUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 17:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:fd:2e:28:3f:7d:29:ba:e7:dc:f7:da:8b:b9:b2:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d116835d037786620a9e9f7a0e360498bb654127
Validity
Not Before: Apr 21 17:01:15 2026 GMT
Not After : Apr 22 17:01:15 2026 GMT
Subject: CN=d11ec036d34969e4cc4f4809ac2c7218ac101a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:47:0a:c4:1b:e1:10:f8:01:92:92:c6:fb:5e:
8d:76:5b:75:a0:78:b0:c9:99:35:5c:0d:35:d9:29:
c2:95:a2:ec:04:cd:03:4e:23:f4:c8:7d:5e:9b:f1:
80:88:89:33:92:af:60:a4:e2:a5:57:ad:a2:eb:51:
a6:9a:26:d2:77:a9:12:11:99:9a:c7:3d:79:79:de:
5c:ee:fa:ae:31:10:0d:3d:26:55:bf:a3:56:45:ee:
cc:24:cb:42:8f:8f:8c:88:d6:8f:0c:84:5f:71:ba:
07:67:d5:87:0e:6a:6a:85:c0:63:90:92:95:03:9d:
9d:e6:62:cf:50:b7:46:12:d0:ec:d8:ce:90:b2:f3:
ee:92:f9:99:90:c0:03:01:c1:d5:85:d9:ae:81:43:
8c:30:cd:59:1f:8d:04:08:1b:24:e1:8e:38:ef:9e:
3c:af:70:10:10:fd:d8:d3:ba:c6:4c:04:b6:b7:b5:
e3:2a:85:de:83:a1:df:57:45:47:df:6d:f5:96:0a:
a2:e3:e8:a0:b8:46:0f:a1:4c:97:8c:0f:55:7c:e6:
80:46:b5:bc:08:b8:10:11:53:4c:3d:e0:ae:32:95:
d0:95:a8:6d:dc:c0:d7:86:05:1c:56:d9:27:bd:b3:
84:aa:bf:20:f2:5f:a8:cd:29:d7:6e:69:99:9e:96:
8d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1E:C0:36:D3:49:69:E4:CC:4F:48:09:AC:2C:72:18:AC:10:1A:9C
X509v3 Authority Key Identifier:
keyid:D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:4d:7f:15:f2:fe:cd:30:f8:73:f9:0c:ed:f3:6d:26:52:c6:
90:15:94:91:1e:40:bc:be:c7:59:cc:bc:5d:38:10:78:d0:b8:
4e:62:ad:12:6a:b1:ad:3e:e1:1c:e7:95:b2:f4:78:5d:50:ec:
75:e9:ea:1e:01:c9:93:ce:ef:5c:74:38:b8:3c:9e:30:78:bf:
57:02:7a:50:e3:c6:4f:32:cc:3a:53:00:fd:33:1d:58:e8:cf:
49:5b:92:b1:6c:12:f6:91:86:c4:89:43:3c:2d:1f:88:1e:1d:
db:b3:98:69:22:ff:b2:b6:a1:88:a0:dd:5e:34:4c:af:8c:dd:
9f:d1:79:08:9e:d4:0a:70:1f:3c:fe:2d:d7:2d:24:4c:49:41:
be:94:ce:b2:8b:82:a2:40:ad:eb:a0:2c:44:25:e6:c5:c6:38:
ee:51:b7:bf:aa:4a:ab:4c:ba:de:46:63:8d:bc:2a:ef:e8:2e:
a4:e4:68:93:0d:5d:ef:3e:f9:0d:40:13:e8:38:29:3d:37:1f:
f3:d0:c9:8f:f9:0f:c6:0a:4f:e4:3a:bb:76:d1:6a:f3:a4:dc:
4d:6f:0e:a5:89:0f:d2:a7:de:28:3e:2e:17:ba:f7:c7:5d:d6:
7a:35:88:1e:46:0b:ab:cb:1f:84:bf:e5:a1:dd:83:18:04:15:
1a:eb:ea:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 03:02:15 2026 by rpki-client