Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
File: 0As3tvS0RWReaZOpxexghJJCXw4.mft (raw, json)
Hash identifier: Vn5Hwu91n4hmd1F4dPhUts4EfGgSuZ/Ky/NukykYnIE=
Subject key identifier: 0D:7D:75:10:48:EB:25:0C:17:53:65:23:DD:2C:B9:FF:62:20:3E:7E
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial: 019DCE2B32F5193472E74A5A646D87BD0D29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
Manifest number: 0C8D
Signing time: Mon 27 Apr 2026 09:00:30 +0000
Manifest this update: Mon 27 Apr 2026 09:00:30 +0000
Manifest next update: Tue 28 Apr 2026 09:00:30 +0000
Files and hashes: 1: 0As3tvS0RWReaZOpxexghJJCXw4.crl (hash: R7/o5TTVBZE3shGuZ0ssANLkG1GR+MWpzgDNnmLxElU=)
2: A895E3Nb3C65o8ijPlK8Lorwh00.roa (hash: tqCw5dUoNXqxDnqcOXcynHp1qTbqM0KgkUMFlaWbuSQ=)
3: GBY268elKXl97npV4jXZBGsnzcw.roa (hash: puRSSX8DZwtYE+mawU0837aHCzln32Frk5qp7mgeh8Y=)
4: NCC353pQrNx8eGiSxSQfU2T_0X8.roa (hash: x5reXqO96nT5gM2bNozGLs+YENzOaeTSR3ek69LYolg=)
5: XX639XievMdqJ8SDTTjke_CjH90.roa (hash: eFHYg4wIZNajc7SdejcYRKfEHVh83hlLOw8omNGRsMs=)
6: bQ2Z3MpaRAN6Ght6WnEtUcjPZgg.roa (hash: 5jTz/OfVAorDmvszopQ0R2vKYBjIj8qCbrV2KmrXO8I=)
7: gs6phYuCPMyOMTxhcDdZ3qJlA9I.roa (hash: 5oHY1r24RUQH5fxNUDlPxQ1Hw8bNGQ4ZLPSvu4mNt/E=)
8: llhcsYDLkm4Ou2uZaJyDW3EMdA0.roa (hash: v77F3OYndH+vxoqA2hOKsJpKUx5tr3Ki2/ZCUFpENYI=)
9: uGQWNyg5237Zm0UUhjGg8gARmn0.roa (hash: li0m/zbSxgzFDwh2iasmSHBN8irzYLoTvtgSIVNzWfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:32:f5:19:34:72:e7:4a:5a:64:6d:87:bd:0d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Validity
Not Before: Apr 27 09:00:30 2026 GMT
Not After : Apr 28 09:00:30 2026 GMT
Subject: CN=0d7d751048eb250c17536523dd2cb9ff62203e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:52:81:c7:b9:a7:6f:ae:38:94:ec:83:f4:e0:
f4:2f:67:d9:51:c3:3f:59:46:91:01:23:5c:79:b4:
c7:b2:eb:5e:09:70:3b:8e:70:e9:d1:37:e7:56:60:
53:b3:cb:e4:00:6c:20:e6:8a:6f:af:49:50:21:f2:
86:c3:bc:5c:91:fa:1c:bf:f4:b9:f3:2e:95:62:69:
38:e7:2a:68:23:65:f6:11:f3:ef:69:37:bf:61:5d:
f1:5d:8a:7d:c7:18:1a:65:0c:51:a5:c4:fd:b4:f5:
e9:75:1a:65:af:29:23:c6:ac:56:96:b6:e5:85:0a:
bf:72:49:bf:7f:36:c7:73:7e:f8:18:0f:e0:c3:b6:
c7:5d:62:23:b6:69:f1:ec:6c:fb:97:0a:26:9d:4d:
3a:b1:21:20:09:ca:69:42:0e:1d:4e:27:8f:0f:e5:
98:46:b6:02:c2:fb:e5:04:1b:88:25:56:68:49:96:
3e:eb:f9:5c:e7:39:eb:8a:6e:74:61:b7:a1:25:b4:
ad:80:6b:b3:fd:a5:14:3d:0f:fe:c5:ae:76:cd:ec:
cc:33:11:d2:83:6e:81:95:1d:27:6c:e8:f9:0b:8c:
5e:9d:17:30:10:10:d9:ac:e4:a2:25:53:e0:78:aa:
87:5b:e8:8d:31:c9:3f:1f:d6:bb:23:86:53:94:ae:
47:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7D:75:10:48:EB:25:0C:17:53:65:23:DD:2C:B9:FF:62:20:3E:7E
X509v3 Authority Key Identifier:
keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:10:ac:13:96:db:de:51:1e:06:e5:5c:65:8b:7c:df:cd:9b:
4e:14:b3:e3:b0:62:f9:f2:97:3d:6c:5a:d8:74:7d:a7:34:d9:
33:af:82:5e:1d:4a:45:ad:f7:09:07:db:c2:9c:04:15:13:dc:
7a:dd:84:b7:e5:00:28:60:d2:09:be:63:69:d1:0e:3f:bb:6f:
a1:0c:c4:91:2e:45:86:73:d4:e2:43:e2:82:b4:33:b4:eb:a2:
a2:d9:d2:b1:fc:9f:4b:a7:d3:55:7b:02:38:45:f2:9f:e2:cb:
2f:30:b0:c6:e5:72:a8:ff:f0:6a:11:26:cf:0a:88:f9:37:a1:
84:ec:c2:3b:c5:c8:cd:35:8d:98:55:f0:4a:98:83:70:fc:c3:
54:9b:87:bb:3d:d9:a6:55:2b:42:95:e8:1d:7a:24:5c:86:0f:
30:8b:ca:73:a5:cc:51:48:83:9e:6a:3a:e1:ed:a0:f6:40:e1:
c4:07:eb:4d:07:a6:c8:b3:d1:b4:dc:d2:2c:a9:3f:f4:81:11:
1f:e6:08:84:2a:75:fc:fe:8a:68:67:37:78:60:c9:6a:1e:77:
37:06:6f:b2:13:13:6a:3f:ae:b4:bf:b9:25:bb:4a:0a:1d:b1:
42:1f:c7:05:88:35:fd:99:2c:a8:00:45:fc:e0:dc:dc:86:02:
8d:1d:3b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:48:53 2026 by rpki-client