Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
File: rR0qVix9shFRtKCSa41v7qzviFc.mft (raw, json)
Hash identifier: 252SiF/hG+meDob9AtGv9j+wi+AAFzIN7joEI674N5Y=
Subject key identifier: F2:BF:B2:6E:66:D5:7A:04:C3:72:50:6D:AA:AC:0F:20:A1:6B:7C:D1
Authority key identifier: AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
Certificate issuer: /CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Certificate serial: 019DCF7545FFD2F96DE3596F34F717DBD727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
Manifest number: 0DF7
Signing time: Mon 27 Apr 2026 15:01:02 +0000
Manifest this update: Mon 27 Apr 2026 15:01:02 +0000
Manifest next update: Tue 28 Apr 2026 15:01:02 +0000
Files and hashes: 1: SzookzV0kvbV2uV2WuzBzsdzDN0.roa (hash: 305744fYy853yhsc/+Jcw6ozr6ihNDOG9TribOS/z2s=)
2: TWCjy8hYVvxSie77cpH2Pet8J70.roa (hash: UosiAuR+zQzxXxFaYN3sf+bjMmm4ozCxMZtIycUu35w=)
3: rR0qVix9shFRtKCSa41v7qzviFc.crl (hash: EcOuQMgH5Xw/p/W0BVj/DMFRM8bldBBvLJ8dUEGpgog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 15:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:75:45:ff:d2:f9:6d:e3:59:6f:34:f7:17:db:d7:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Validity
Not Before: Apr 27 15:01:02 2026 GMT
Not After : Apr 28 15:01:02 2026 GMT
Subject: CN=f2bfb26e66d57a04c372506daaac0f20a16b7cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ab:7f:05:42:6a:f5:eb:c4:73:d0:69:be:3a:
a4:a9:22:13:33:46:1e:5f:3e:7b:66:f5:18:01:91:
20:14:59:ba:81:fa:d7:b0:57:53:ff:3c:31:16:c6:
4c:aa:bf:71:fc:58:50:25:0b:d2:a0:af:c6:90:a9:
98:02:72:09:40:6f:ab:1d:95:29:26:d7:32:1f:65:
c6:31:73:59:34:a1:64:11:df:c7:6b:35:e4:fe:0c:
b5:83:35:e8:7f:1b:73:1e:3b:ab:10:13:b7:f2:ea:
61:a2:75:f4:fa:68:7c:8f:93:61:ab:7c:82:17:05:
55:15:23:41:f8:ff:12:30:f6:00:99:e9:bf:e0:2d:
ed:35:20:f1:c9:b3:e2:f8:04:97:57:60:06:27:c5:
e3:6c:f7:d3:6f:24:4d:58:ad:97:98:e7:65:2d:3f:
47:7f:5f:53:97:ae:27:fa:d1:89:80:60:84:f5:5b:
c3:98:07:cc:ba:34:9b:d9:4a:9f:9c:c4:28:3c:e3:
c6:ca:3b:6f:3d:37:d1:b2:3e:ae:f4:7d:d4:93:f3:
5f:bf:22:8f:18:db:0b:7c:58:22:52:a6:41:ab:7d:
41:7e:c9:7c:c2:5e:7e:a3:ab:38:7d:5f:88:67:75:
a8:98:7a:4c:89:d7:a4:a4:96:1d:7e:4c:40:cc:ed:
55:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BF:B2:6E:66:D5:7A:04:C3:72:50:6D:AA:AC:0F:20:A1:6B:7C:D1
X509v3 Authority Key Identifier:
keyid:AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:65:84:4a:6c:bd:e2:63:47:8e:62:9d:b6:24:56:84:9a:a5:
8c:71:13:13:30:93:43:6c:a4:f8:8c:31:a5:55:81:f6:f2:96:
35:14:ae:da:51:90:0e:a2:54:50:4c:89:f7:e2:03:04:04:c7:
02:63:29:8d:20:fb:55:93:f4:94:9d:94:e8:c1:c4:a8:f3:14:
24:9f:85:ef:fb:3d:31:e1:b3:ff:c3:1a:03:ab:0f:9f:fe:b3:
40:64:f9:24:bc:39:9e:77:db:9c:dd:3c:37:ed:66:e4:1b:ae:
09:22:d3:6b:ba:5d:dd:13:37:59:d9:39:be:ad:86:38:c9:b0:
8a:81:c3:8d:7f:98:f2:2e:ce:48:09:20:32:97:8e:1b:9f:06:
18:db:33:9a:c5:be:8f:1f:4a:0c:39:9b:80:29:1b:d9:25:4f:
63:fc:75:19:d2:7a:75:e7:6c:df:8d:11:d3:86:79:44:c8:0d:
63:8b:77:ff:85:b8:dc:36:21:5b:77:8a:fd:d5:2f:c2:71:75:
fb:f1:a3:5c:d0:e7:16:5a:80:4e:81:29:24:79:15:cc:87:cb:
3d:e6:c4:27:72:7d:9c:5c:f7:b8:d7:9f:a2:3f:0a:1d:12:bf:
68:bf:d2:b9:ab:e7:bd:57:06:a8:72:1f:e7:09:65:9f:3c:f3:
24:7f:08:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:30:08 2026 by rpki-client