Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
File: 0d4HoaH2W9EW4R-fEQhgS26VzP0.mft (raw, json)
Hash identifier: hTy2l0WIQOlbeFf36sGb3uWcCvQc4moSE/anl42SHDY=
Subject key identifier: 7A:15:D8:0C:C5:23:12:1A:39:92:CE:07:E7:C8:10:00:D3:48:67:75
Authority key identifier: D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
Certificate issuer: /CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Certificate serial: 019D3A1D13D6EF36FC8BA90321C190687A55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
Manifest number: 1426
Signing time: Sun 29 Mar 2026 15:01:17 +0000
Manifest this update: Sun 29 Mar 2026 15:01:17 +0000
Manifest next update: Mon 30 Mar 2026 15:01:17 +0000
Files and hashes: 1: 0d4HoaH2W9EW4R-fEQhgS26VzP0.crl (hash: PetyFDM1CqSCjz2z3so+LssU9lnz23NLi9urPBE9VjM=)
2: 6AcW6a22cinoLIymW2byGAd7uWo.roa (hash: RoxEP6kBPzD8q8xHwCRknSTvIS7/SOyyVCFWMK8wKF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1d:13:d6:ef:36:fc:8b:a9:03:21:c1:90:68:7a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Validity
Not Before: Mar 29 15:01:17 2026 GMT
Not After : Mar 30 15:01:17 2026 GMT
Subject: CN=7a15d80cc523121a3992ce07e7c81000d3486775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1e:6f:70:09:60:cb:3e:e2:fa:60:23:3d:2d:
e3:97:ed:12:20:75:b3:a7:ff:9e:14:93:81:a3:66:
df:1b:c2:b7:72:65:89:13:32:42:b7:b0:98:e7:4b:
d2:31:74:25:f9:53:f4:b8:6f:84:2a:a8:fa:2d:51:
90:d8:30:ce:b2:81:5b:10:81:0c:d4:de:ad:98:86:
0c:75:8e:30:2d:61:e4:8c:02:86:bd:4e:49:d3:ee:
29:a2:8b:eb:ad:9b:ca:9c:3b:c2:86:67:41:11:df:
0c:dc:f0:47:f5:5e:da:b4:41:d5:6e:16:fc:0d:1f:
6e:9a:bf:cb:e4:e9:f2:39:11:a9:87:f9:5b:ad:b8:
34:b7:fa:b0:e2:b4:d2:5f:1a:c0:b6:f4:c2:9f:ca:
db:70:4a:2c:a1:16:d2:3e:0e:d6:39:2a:ee:39:1f:
e5:df:cb:9d:ee:05:f5:89:55:27:e0:76:f7:88:eb:
96:3c:52:f9:f3:3d:46:f5:0c:25:ed:19:28:9e:81:
e9:fc:34:93:69:ef:f0:27:27:f8:dd:91:82:c4:f4:
7a:7b:fe:aa:02:9a:22:34:6f:e3:22:67:13:bc:c4:
20:61:24:3c:bd:be:d2:4c:86:47:e6:cb:35:17:a7:
02:e9:29:a4:8d:67:f9:94:62:da:71:28:d1:b7:da:
03:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:15:D8:0C:C5:23:12:1A:39:92:CE:07:E7:C8:10:00:D3:48:67:75
X509v3 Authority Key Identifier:
keyid:D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:fd:9e:6d:17:e3:10:26:cd:bb:23:f0:02:cb:bf:dd:35:82:
dd:27:a3:b8:b2:c5:66:f1:16:f0:14:84:54:96:b5:bf:a9:8a:
63:ed:94:b9:f7:31:db:12:3f:95:2e:fa:b1:46:52:3a:19:8f:
d5:15:41:ad:2d:74:70:3c:ed:7e:8e:af:ee:37:4b:1a:20:8b:
8c:34:a1:42:68:35:ce:97:2b:84:e6:ce:17:17:4b:64:9d:e5:
66:61:81:b8:a2:a9:25:8a:e0:05:4c:09:c1:7a:74:29:27:c1:
33:5e:85:ec:2b:02:e7:c5:c1:d6:ae:97:c2:28:a3:ce:44:46:
6e:ab:02:2c:6b:36:82:e2:de:40:2c:51:ad:3f:c5:4d:d4:d1:
59:76:6e:df:2d:9a:55:c2:96:41:fc:ac:43:20:cd:89:cb:44:
0d:16:6a:c4:23:79:f6:6a:47:82:23:ea:d8:e3:1a:7d:43:12:
ab:c1:c6:e1:3a:00:7a:18:8b:96:81:ab:a9:7d:9d:25:4b:f8:
54:b0:5b:f5:04:7f:52:5c:03:c2:5d:51:27:ac:38:37:82:fe:
db:88:ed:3a:39:ec:d2:25:e4:8c:62:71:40:49:e3:0a:44:78:
98:21:a1:e2:db:97:2c:ea:62:e3:70:cb:c3:85:c4:7d:ee:4b:
f0:5b:1f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:35 2026 by rpki-client