Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
File: 0rtm-96q__Q7llCx9svk8p7a9Yw.mft (raw, json)
Hash identifier: RmklEo/uQgkiFUSLQCTwYhEuIuASr6hl0EQOCkP3+Uo=
Subject key identifier: 4A:34:07:5D:3C:18:90:FA:44:97:58:AC:34:44:78:EB:E0:FD:C9:6D
Authority key identifier: D2:BB:66:FB:DE:AA:FF:F4:3B:96:50:B1:F6:CB:E4:F2:9E:DA:F5:8C
Certificate issuer: /CN=d2bb66fbdeaafff43b9650b1f6cbe4f29edaf58c
Certificate serial: 019DB27E02CC845D262495AA85921308AAFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
Manifest number: 18D0
Signing time: Wed 22 Apr 2026 00:01:35 +0000
Manifest this update: Wed 22 Apr 2026 00:01:35 +0000
Manifest next update: Thu 23 Apr 2026 00:01:35 +0000
Files and hashes: 1: 0rtm-96q__Q7llCx9svk8p7a9Yw.crl (hash: wVzNejJv5l/2HZ9xl+xB9AibtBspWqVOUFfISiOyCO0=)
2: eqRZK_JGFaT4pOqnhAyJvjkUCoA.roa (hash: jItvJdxi3E9SOd6i/gjBeEHoNNhvY/8u3V8hrLU5X7c=)
3: pdBEIOtIWrJ0TSk32Jmh_QpJkK8.asa (hash: sxkJU3Q3LaQ8TF/6A6BbBQGeo7WMZ4PLTizqyUpaQgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:7e:02:cc:84:5d:26:24:95:aa:85:92:13:08:aa:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2bb66fbdeaafff43b9650b1f6cbe4f29edaf58c
Validity
Not Before: Apr 22 00:01:35 2026 GMT
Not After : Apr 23 00:01:35 2026 GMT
Subject: CN=4a34075d3c1890fa449758ac344478ebe0fdc96d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d5:bc:bf:5f:a1:10:8d:5e:d5:58:42:51:f2:
91:4e:ba:f8:41:b1:8a:01:83:ab:c0:0f:39:79:05:
26:2b:c6:d7:80:19:fd:64:8e:92:73:cd:84:47:e4:
f2:fe:4b:be:a4:f6:00:7e:22:dd:d9:db:ea:44:5b:
b7:a3:07:08:5c:95:ac:47:ac:09:27:0a:56:50:43:
aa:b1:f3:ce:7a:29:b9:cb:4f:50:fe:f9:52:b9:5a:
b8:e5:01:f3:a7:27:89:db:1c:98:e2:6d:09:92:ec:
d1:b3:11:49:d0:7e:f2:58:fe:6a:4a:b8:f3:be:67:
c3:41:7f:9c:bc:2a:79:04:d7:82:e1:b0:97:fe:d0:
14:d5:a3:d4:29:65:13:39:6c:41:42:68:6a:1c:d1:
b7:31:8a:5c:66:92:fb:36:35:5d:45:26:15:2c:c5:
30:55:90:d1:af:d0:da:0f:63:a8:4e:6f:c2:d2:15:
c9:2d:e6:94:19:18:60:dc:9c:23:64:d5:b2:a1:66:
2a:e5:0f:b7:86:90:80:21:9e:f8:77:c1:18:d1:86:
ff:eb:43:d7:bd:6b:32:a7:9e:93:a5:59:94:fd:0e:
e5:ea:b8:fa:95:84:44:fc:1a:52:16:04:c5:3f:42:
e3:a1:04:87:21:ca:3c:30:c0:5b:68:91:8b:e2:27:
7e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:34:07:5D:3C:18:90:FA:44:97:58:AC:34:44:78:EB:E0:FD:C9:6D
X509v3 Authority Key Identifier:
keyid:D2:BB:66:FB:DE:AA:FF:F4:3B:96:50:B1:F6:CB:E4:F2:9E:DA:F5:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:45:9c:80:65:9e:e2:5a:c8:d1:f6:22:81:23:91:85:9c:c3:
90:49:d3:71:8f:06:ae:b4:85:03:49:ff:c1:7c:3c:17:b5:fd:
9d:26:2e:ec:8d:46:65:e9:66:21:28:54:4a:a2:26:e8:a0:7b:
90:d4:47:6d:6a:58:fb:1c:cb:37:5d:08:3b:97:fe:b2:7e:b5:
fc:61:23:cd:af:b7:05:d9:44:b2:50:7a:79:a6:cb:82:1f:35:
f2:77:8c:9e:d5:9d:f1:a4:8d:37:62:67:50:50:11:07:06:25:
dd:d5:f9:ba:67:a4:8d:42:da:f8:ef:f3:5c:d0:ac:f4:d0:ad:
10:34:3b:83:f7:38:c7:35:91:c6:dc:26:7f:9f:5c:c1:38:68:
ba:dd:b3:79:9e:07:7d:f2:21:e4:04:c1:b9:ff:d6:3e:3f:07:
d2:fc:58:2c:a6:0d:f8:09:54:b8:48:d8:1f:f2:b8:14:87:43:
46:12:36:7f:1c:c4:99:11:42:38:49:e6:c2:fe:1b:37:21:cd:
3c:b3:8b:45:ac:8d:77:ca:4b:ff:08:2a:36:7a:5b:ae:cf:bf:
6c:c0:f7:c2:c7:b3:63:84:1c:d6:e7:0c:59:16:2f:05:03:13:
22:13:30:18:10:a8:2a:9f:58:9d:0f:9f:4b:0b:87:76:9e:7f:
6d:2b:2c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 09:12:08 2026 by rpki-client