Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft
File: 0dXq4THDsQiP-wI3mA1u4YiWaMY.mft (raw, json)
Hash identifier: mztW3LFBNVb+jeBizJFy5WJKPRzteHKULGd5604Ov/I=
Subject key identifier: BA:B0:46:81:D5:7C:19:15:64:E7:69:C2:38:75:3F:A3:41:7D:66:73
Authority key identifier: D1:D5:EA:E1:31:C3:B1:08:8F:FB:02:37:98:0D:6E:E1:88:96:68:C6
Certificate issuer: /CN=d1d5eae131c3b1088ffb0237980d6ee1889668c6
Certificate serial: 019D9EC02089795BB66CC0A8C8EEB164A090
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dXq4THDsQiP-wI3mA1u4YiWaMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft
Manifest number: 023F
Signing time: Sat 18 Apr 2026 04:01:24 +0000
Manifest this update: Sat 18 Apr 2026 04:01:24 +0000
Manifest next update: Sun 19 Apr 2026 04:01:24 +0000
Files and hashes: 1: 0dXq4THDsQiP-wI3mA1u4YiWaMY.crl (hash: qpWWxkemhulvUwwrYNYRB3bKlHUBzf6b2mlQmooZBs0=)
2: 0w_3pj-YjXdlGCOQrO5MmHi3QRU.roa (hash: NCRRT15Nw1RlGwpm/ytoJz8CpfLxBA4RH0mKpwLqRd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dXq4THDsQiP-wI3mA1u4YiWaMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:c0:20:89:79:5b:b6:6c:c0:a8:c8:ee:b1:64:a0:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1d5eae131c3b1088ffb0237980d6ee1889668c6
Validity
Not Before: Apr 18 04:01:24 2026 GMT
Not After : Apr 19 04:01:24 2026 GMT
Subject: CN=bab04681d57c191564e769c238753fa3417d6673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b3:65:d9:c6:3f:9d:19:3e:1b:ac:c6:c9:0b:
82:41:ce:95:6c:08:50:08:39:a7:fb:0c:ce:f2:c6:
b8:7e:48:55:3c:14:8d:8b:b2:3a:6c:8b:d2:91:94:
01:aa:11:7c:f3:87:02:c5:b5:c4:de:60:e5:fa:33:
02:fb:5e:66:ce:91:d0:5b:ea:aa:bd:ac:66:de:6f:
18:6e:9c:9f:12:cb:4d:35:50:e5:19:28:25:46:c1:
85:1c:53:45:c8:bb:b2:da:1c:35:eb:bf:93:9e:a9:
d3:7b:6b:30:96:ff:a2:36:72:d5:42:cb:90:98:d9:
06:fe:fb:75:af:55:39:8b:6f:81:6f:ff:9d:f8:74:
af:a6:01:5b:dc:d9:ad:26:bc:cd:02:2f:75:ec:77:
80:31:85:19:a1:b3:fc:c3:76:83:d1:50:0c:2f:f8:
5f:86:02:18:da:c2:7d:b9:1e:4f:cd:a7:03:1b:62:
5c:9c:dd:77:45:5c:97:4b:1e:f4:12:65:e6:78:1c:
a6:0d:5b:42:21:2b:79:54:bc:a3:79:98:74:c8:08:
fc:83:6c:43:c0:ed:76:3b:8c:53:6c:91:0e:ed:50:
13:29:7c:f6:ae:a4:d5:13:ad:1e:c9:de:1c:b7:13:
1f:73:f2:d5:62:1e:e1:80:86:c1:d0:b1:c0:c4:cf:
ad:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B0:46:81:D5:7C:19:15:64:E7:69:C2:38:75:3F:A3:41:7D:66:73
X509v3 Authority Key Identifier:
keyid:D1:D5:EA:E1:31:C3:B1:08:8F:FB:02:37:98:0D:6E:E1:88:96:68:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dXq4THDsQiP-wI3mA1u4YiWaMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:f4:2a:41:8c:96:3d:2d:20:21:fc:07:39:63:8a:84:0e:37:
16:20:c1:c7:b4:24:9d:5c:a6:4f:7b:20:16:a4:23:ae:b4:d9:
9a:c9:36:d3:17:da:1a:bd:fb:40:ef:eb:13:9f:07:b3:66:c0:
ca:67:3d:e9:27:94:0f:9a:bd:24:dd:93:d5:81:17:87:05:22:
b2:85:c2:58:81:a1:fc:86:5f:75:8d:23:c7:ca:9c:9e:c2:b7:
6a:37:6c:95:23:80:1c:71:96:e3:76:ef:9f:39:1f:56:33:1c:
2f:d5:5a:95:5b:d0:ce:85:b4:8a:0a:e2:47:66:08:93:df:07:
a4:a7:9b:2e:3d:67:a4:8a:4e:10:e1:62:9a:40:63:11:4b:ec:
46:eb:d9:f8:9b:fa:8d:c9:60:4a:08:eb:1d:75:a5:fd:2e:85:
9e:04:2f:3d:8d:59:e5:e6:c3:7a:0d:72:e7:3d:de:67:2c:91:
87:df:34:6e:5a:c7:8f:04:6e:0b:77:37:2f:75:6f:d0:f2:0a:
a5:01:72:eb:b3:ce:10:cd:e4:11:f7:9f:2a:e7:1b:02:97:5c:
65:6f:84:fa:1b:e0:22:2e:65:3a:72:be:ea:d4:d6:60:b0:ce:
20:5a:4b:32:3f:f0:a6:b9:a1:77:f5:22:5f:62:c0:3a:e5:a3:
b6:1b:25:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 12:57:54 2026 by rpki-client