Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
File: 0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft (raw, json)
Hash identifier: N1UAMpiJ1SRM+68a0IYkYQjf2HQmRH70e6OMI89Rl70=
Subject key identifier: 59:4E:61:31:59:F5:96:D7:28:FA:F0:F1:76:37:09:DC:81:0E:67:88
Authority key identifier: D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A
Certificate issuer: /CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a
Certificate serial: 019DCED0460BD7EDEC75BE96BD19FA52E629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
Manifest number: 18DD
Signing time: Mon 27 Apr 2026 12:00:49 +0000
Manifest this update: Mon 27 Apr 2026 12:00:49 +0000
Manifest next update: Tue 28 Apr 2026 12:00:49 +0000
Files and hashes: 1: 0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl (hash: 2v47czouThJdpKG7baH1L21mJDvCOIeqbHnaRRtmdC4=)
2: 18LvMJbaobz9RVoG3KwWtt6oPsk.roa (hash: U928xEWQEvSL1IP/0rVvcpbAEWqlTfBez50gOZPkoHY=)
3: 5jCnir6W6gAd6_EDtQEmsCT7w14.roa (hash: 0wvxGHojLuaQ4hENlIsY48YCfJ44p5EM0SkFd7dB+g4=)
4: bQqTZ3ArgViLCoqi3gs3VHHEcM8.roa (hash: aWk0i4GB/D7KkQJxNXNTSQ961hAd3k/+4U2XwwZMILk=)
5: vW2RW7QY1hflVRyn1_CDLNIOZtQ.roa (hash: M4ZBHT4dK/BF7Hs2UlU9Rb4uebu3FER628aOLG71DV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:46:0b:d7:ed:ec:75:be:96:bd:19:fa:52:e6:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a
Validity
Not Before: Apr 27 12:00:49 2026 GMT
Not After : Apr 28 12:00:49 2026 GMT
Subject: CN=594e613159f596d728faf0f1763709dc810e6788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:71:9e:f4:c7:c6:5f:c8:cc:ea:cd:04:14:df:
01:73:59:aa:84:35:3c:1a:7c:e8:12:9e:32:b0:9a:
7e:a4:ad:c4:d4:78:a5:ef:cd:5d:0e:3c:b5:3c:37:
dc:e1:c6:fb:79:0c:e6:50:d3:56:db:c8:d1:d3:d5:
9a:9d:43:ee:8d:f4:09:e9:3f:dc:1b:ac:c4:ce:4d:
ca:ba:1e:cf:ac:87:ad:33:89:ec:a0:0c:17:85:96:
6f:41:47:52:be:d2:98:fa:c4:1c:00:1c:6d:c6:fa:
52:dc:d0:be:8e:eb:62:c1:08:9d:8f:f7:c9:7c:b9:
ee:04:ae:5f:87:37:d7:8c:9a:0b:72:19:73:89:f3:
39:61:b4:37:0c:76:95:bc:f6:f2:62:f4:0e:76:86:
5a:80:1c:c0:96:7c:bf:b5:20:2d:88:0d:b0:60:41:
c7:a8:24:cb:ea:9a:21:1b:3c:6d:25:a4:75:69:8f:
66:0c:cb:ae:7f:3a:cd:a3:3f:c7:a9:11:aa:8b:5c:
e5:92:ff:19:3c:20:92:f6:25:d8:b8:6f:a4:83:08:
a8:6c:e3:59:d2:13:ff:8f:8b:e2:77:dc:24:91:1a:
3b:e3:e2:92:93:c7:69:95:62:48:95:7f:e0:44:34:
9a:68:fe:e6:82:30:aa:5f:da:b5:63:35:59:89:4b:
09:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4E:61:31:59:F5:96:D7:28:FA:F0:F1:76:37:09:DC:81:0E:67:88
X509v3 Authority Key Identifier:
keyid:D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:7b:37:2d:fa:b7:be:b3:91:3f:04:63:af:bf:26:fe:ea:fd:
06:b5:c1:76:29:3c:52:ec:3b:7b:c0:05:d5:7e:38:f4:59:44:
29:bb:8f:7c:fb:5a:e6:65:d2:ac:d0:1e:30:ca:22:06:6f:e1:
fe:19:9f:3d:f3:1c:30:a7:80:4d:10:63:49:a0:84:98:e5:11:
c8:ac:c6:20:fd:a0:13:20:d8:c1:03:9a:3c:36:18:83:a7:ef:
de:96:c4:2b:fb:31:99:e8:b6:bd:a4:f9:24:cf:4c:57:af:21:
0a:e3:20:c4:08:a2:af:f9:36:7f:6e:8c:e2:74:d7:98:55:a0:
27:ab:c4:ae:fc:87:ae:b1:2e:f0:ac:69:ac:33:78:1e:ab:ff:
12:bf:fb:41:e7:ec:48:36:e7:da:76:62:78:22:e3:57:09:ea:
4b:9c:a0:28:40:ab:ca:7c:c9:f2:6d:30:5b:d2:0e:7a:07:78:
a1:8d:48:eb:9e:cc:16:69:83:64:8d:ed:8e:35:06:59:55:8c:
61:df:3a:8f:6f:f2:1f:2e:ce:2b:f6:cf:e7:05:4c:71:f9:ab:
3c:56:e6:10:71:27:26:ab:2a:22:3c:fd:dd:10:a5:46:e6:08:
84:d3:ed:d2:92:a8:72:15:eb:94:d9:fa:48:88:c1:32:c2:17:
cd:52:d5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:39:53 2026 by rpki-client