Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
File: 0RaDXQN3hmIKnp96DjYEmLtlQSc.mft (raw, json)
Hash identifier: QQFMLCYiENWkU+fs2SzXXe48H6t2py990m6f9ifQSyw=
Subject key identifier: D3:6B:E1:E2:99:E7:D2:9D:C8:92:B6:2F:D5:A7:4D:A3:8F:69:8D:C0
Authority key identifier: D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
Certificate issuer: /CN=d116835d037786620a9e9f7a0e360498bb654127
Certificate serial: 019DB2EBD045E0DAEF752ABA37DC5A1B290A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
Manifest number: 0CE6
Signing time: Wed 22 Apr 2026 02:01:31 +0000
Manifest this update: Wed 22 Apr 2026 02:01:31 +0000
Manifest next update: Thu 23 Apr 2026 02:01:31 +0000
Files and hashes: 1: 0RaDXQN3hmIKnp96DjYEmLtlQSc.crl (hash: tHRqiK1mmDaFMdBwUY+8vMViaD4TjUg8n8k02MGOnv0=)
2: GxXxtmytTeePZFqMmjKewv0phDk.roa (hash: DQNMt4Qmq5pWK/m+65wngsoZgA7+I6etgVuEFLBf9P8=)
3: hrfVvtnK2yUD8q8kqhgwgxBrIWA.roa (hash: knPxWaldCF2NZQN6BPLTcSuiJLTa63/Ehra1OYIbZUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:eb:d0:45:e0:da:ef:75:2a:ba:37:dc:5a:1b:29:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d116835d037786620a9e9f7a0e360498bb654127
Validity
Not Before: Apr 22 02:01:31 2026 GMT
Not After : Apr 23 02:01:31 2026 GMT
Subject: CN=d36be1e299e7d29dc892b62fd5a74da38f698dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6f:82:79:09:3a:5e:8e:cb:57:b1:4f:a7:8d:
aa:7a:12:f3:ce:50:7c:fc:34:7b:a0:ce:82:8e:cd:
ce:14:67:92:14:77:4a:d5:32:42:9d:96:1c:d7:55:
99:66:49:df:64:d4:a0:b5:21:99:d3:c6:27:13:1c:
1f:ec:ec:6c:a6:28:45:90:cf:3c:1d:d5:32:cf:fe:
b7:5d:2e:b1:15:3a:ee:4b:0f:0a:e6:fe:41:40:cb:
e1:2e:91:73:d5:38:cc:70:43:90:90:75:ce:3f:c2:
16:71:9b:e0:45:a0:61:e3:ff:6d:fd:ba:69:9d:84:
f7:55:38:bb:0d:e5:e0:da:60:53:a1:44:60:a4:60:
57:09:54:fb:85:bf:4f:b4:f0:ef:cc:f7:2a:fd:3c:
dd:27:59:31:4a:6c:d9:4f:f2:e9:9b:13:1a:45:0b:
04:e0:61:52:d5:a2:3c:fa:df:92:82:0d:9f:1f:3e:
63:62:53:3b:02:02:d6:f5:5b:3d:4a:ac:e4:73:5c:
ca:2a:40:fd:12:59:86:b9:aa:73:df:2b:b1:0b:32:
66:0d:2f:1f:d0:2c:5c:6c:d9:19:65:f4:5d:0d:ca:
75:f9:11:82:68:8b:1d:77:65:53:ef:42:2f:94:d0:
86:2c:d6:ee:46:25:3f:fb:44:58:74:32:d5:17:d3:
4b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6B:E1:E2:99:E7:D2:9D:C8:92:B6:2F:D5:A7:4D:A3:8F:69:8D:C0
X509v3 Authority Key Identifier:
keyid:D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:0b:f6:70:e0:38:92:9a:b0:ea:35:9a:b0:2b:32:c2:e1:cb:
01:c3:eb:bb:e4:3f:6b:c6:25:19:f1:cb:e2:b2:81:b8:0b:f8:
b7:a1:cd:5a:64:5f:da:02:65:f2:8d:26:8b:a1:14:6d:9d:bb:
32:e6:74:39:01:91:0a:37:dd:72:cd:d2:49:84:4f:16:8d:98:
e3:28:5c:3c:16:0f:96:66:15:30:c6:07:d5:3c:9d:19:f5:8f:
3a:78:59:3b:82:43:e1:40:b4:8b:c9:4f:da:36:0f:00:a4:5e:
b4:ce:6d:aa:83:eb:85:ea:eb:16:fd:cd:1f:84:34:b4:09:83:
a9:0d:15:f9:22:f1:7b:a3:fa:e3:d5:20:26:81:1e:a9:58:1a:
eb:e3:f2:65:36:b9:51:7b:58:31:09:00:bf:cd:e4:84:51:36:
99:08:ee:3b:30:21:ce:88:55:2d:ba:a3:be:da:7f:fd:c7:6f:
16:e0:72:41:4d:32:f3:c5:0b:9d:73:6c:86:eb:c4:80:52:f6:
40:5d:ba:9f:81:6e:47:ac:f3:c0:2c:57:46:0a:91:9a:76:72:
f8:eb:f1:49:1f:37:27:2d:c4:1d:15:8b:04:32:fe:c1:ae:81:
29:ec:1b:96:06:6f:82:c8:bf:81:56:da:13:d8:74:4b:b5:41:
4b:eb:92:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 04:13:02 2026 by rpki-client