Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
File: 0KpKGno60j-q4q6un6YZTwISgSk.mft (raw, json)
Hash identifier: tD/yrM3z0Fjzxfkcc5qJfJ1q14A1f9O01OFt45pC2ZU=
Subject key identifier: 97:0A:36:3A:DA:1B:0E:1C:7E:9D:36:12:AC:6C:CD:90:A7:6E:70:41
Authority key identifier: D0:AA:4A:1A:7A:3A:D2:3F:AA:E2:AE:AE:9F:A6:19:4F:02:12:81:29
Certificate issuer: /CN=d0aa4a1a7a3ad23faae2aeae9fa6194f02128129
Certificate serial: 019DCD4F8A3C30BA7EF0661045644DA785F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
Manifest number: 04F8
Signing time: Mon 27 Apr 2026 05:00:35 +0000
Manifest this update: Mon 27 Apr 2026 05:00:35 +0000
Manifest next update: Tue 28 Apr 2026 05:00:35 +0000
Files and hashes: 1: 0KpKGno60j-q4q6un6YZTwISgSk.crl (hash: hhdmqPA9EimASu5CtnOmUhkg6Ww/LNFcagw/fwLaXAM=)
2: 0r4BvsnJAN2Pz40prPoUEy6WvzU.roa (hash: AamdQ0j/vjkbuVtweF8p9JDSZ2i84cCde/Gwvcvf218=)
3: 5bf5CwJmQOVXufa2Bw359AZEO9s.roa (hash: vE+kqAcM+EoC006Mvnftc/u8n7NMMiAT3ni4cuysV1M=)
4: epNTET6BvQ6zhUMoLdSPzHjbIWE.roa (hash: qxvi55+BDN0SED0a/Y9HgRfeWegI7IGQUucmOAr178Y=)
5: ncOZbEMiJNqjiscavpDBkZeriIg.roa (hash: KP4yleOLVWJhJdzAKqGM+QLwSbZEncnkoAH1TNTBzJs=)
6: oS9h716veeRY1y9kuFn-MIGUEBg.roa (hash: KS+2BIj/1oDD8HcECr/uPYIsA+2SUgLQkBkCEiNQnZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:4f:8a:3c:30:ba:7e:f0:66:10:45:64:4d:a7:85:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0aa4a1a7a3ad23faae2aeae9fa6194f02128129
Validity
Not Before: Apr 27 05:00:35 2026 GMT
Not After : Apr 28 05:00:35 2026 GMT
Subject: CN=970a363ada1b0e1c7e9d3612ac6ccd90a76e7041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:21:45:e4:84:04:0f:ac:da:f3:be:0c:0c:0f:
61:75:7b:09:d5:9f:41:23:3b:28:05:d3:0c:78:30:
17:5c:40:45:5f:0e:5d:a0:a7:c2:42:11:ea:0f:47:
ce:fa:b6:3f:ff:cd:cb:7e:0f:92:fe:11:01:e6:56:
ef:cb:06:69:51:ee:79:b7:63:99:e9:1a:b6:5f:e4:
1d:01:5c:03:5f:b3:e8:f4:c9:d2:8c:cf:89:00:06:
d8:f0:a9:03:af:09:2e:48:38:47:80:8f:7c:97:48:
a4:3b:39:aa:98:f9:2c:4e:4b:fc:d6:56:cd:85:db:
ef:7f:a0:51:b0:bf:aa:9a:c2:77:8f:48:30:0c:2f:
b8:63:1f:49:8b:9e:24:28:4a:44:92:b8:15:11:5a:
b7:f4:90:7e:f4:3c:f6:e3:5a:28:cc:b6:ec:d0:2d:
ae:6d:36:7b:08:ad:2a:d8:e2:96:51:02:cd:75:e6:
8d:a5:6f:10:57:db:38:6c:73:50:bd:d4:0b:92:4b:
5d:15:c7:ab:35:bf:43:be:32:40:16:18:f1:b2:be:
ef:95:75:8a:9d:e9:e3:d0:81:06:c4:09:fb:9a:b4:
49:e7:d5:c6:bd:ba:2e:91:13:b6:52:28:e7:89:86:
75:07:a4:66:b7:80:e7:3a:53:6e:ef:f8:1b:97:e9:
55:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0A:36:3A:DA:1B:0E:1C:7E:9D:36:12:AC:6C:CD:90:A7:6E:70:41
X509v3 Authority Key Identifier:
keyid:D0:AA:4A:1A:7A:3A:D2:3F:AA:E2:AE:AE:9F:A6:19:4F:02:12:81:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:0b:49:14:16:0a:2e:60:4a:4d:a6:16:6d:59:b6:cf:65:37:
31:4b:9c:9c:5a:39:e5:e8:62:6a:bc:e5:ca:9d:99:72:8c:df:
32:15:62:a2:f7:b9:08:b5:df:b3:b7:28:1e:56:b8:62:2b:44:
36:10:53:76:79:34:6b:7f:3c:9d:85:a8:2b:7a:85:b4:ff:79:
bf:01:1e:4e:fa:c4:74:a6:6f:ea:8b:08:c4:21:e9:17:bd:2f:
bd:ce:c6:ba:27:17:ba:0e:ee:a6:bc:18:a7:65:cf:20:f2:f6:
d0:db:11:1b:c4:0b:48:ed:92:6d:2c:d7:be:36:66:c5:e6:e5:
b3:eb:aa:b8:36:ea:b8:52:20:54:60:e7:11:e7:b4:b4:dc:9a:
8e:0c:82:04:c5:46:8e:4f:02:6a:bc:f7:9d:02:fd:59:a8:57:
99:8b:a5:60:5d:d7:75:29:82:08:4e:34:b4:f4:8b:76:ff:92:
8e:dd:29:fd:e9:62:82:7e:42:2e:86:7c:fc:81:0e:c0:a3:cd:
46:8a:8f:16:28:8e:db:d9:9a:2a:72:cf:d5:ce:84:29:ec:df:
e3:64:24:37:6d:2c:23:cc:3c:74:52:16:e0:bd:88:9b:2b:72:
9a:b5:5d:9b:4c:3f:ab:3d:8a:49:de:d0:3b:27:c1:28:02:d9:
ce:2b:ce:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:36:20 2026 by rpki-client