Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ab49f2-301d-4a36-86a3-3f8695d7e4df/1/0vP4aGthfF-Ryb3Blzuimh5KCQY.mft
File: 0vP4aGthfF-Ryb3Blzuimh5KCQY.mft (raw, json)
Hash identifier: 5folmgjTEA8Sf+qcjWY1z5CmgifVD9blixMa1jPYXyc=
Subject key identifier: 36:98:29:63:88:DD:B8:10:7B:26:8F:49:6D:B1:20:18:D4:42:9E:29
Authority key identifier: D2:F3:F8:68:6B:61:7C:5F:91:C9:BD:C1:97:3B:A2:9A:1E:4A:09:06
Certificate issuer: /CN=d2f3f8686b617c5f91c9bdc1973ba29a1e4a0906
Certificate serial: 019E1BD8F133A6B67178D712EAE83AA295DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vP4aGthfF-Ryb3Blzuimh5KCQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ab49f2-301d-4a36-86a3-3f8695d7e4df/1/0vP4aGthfF-Ryb3Blzuimh5KCQY.mft
Manifest number: 23
Signing time: Tue 12 May 2026 11:01:02 +0000
Manifest this update: Tue 12 May 2026 11:01:02 +0000
Manifest next update: Wed 13 May 2026 11:01:02 +0000
Files and hashes: 1: 0vP4aGthfF-Ryb3Blzuimh5KCQY.crl (hash: tkTTpteeCXWE/w85ZY/0bM8Cz/ehHA7XSKTEJDzlqNI=)
2: lU_WZzSGPkN2lCXxCgcT0qQBuOo.roa (hash: tCgmfSIJNiS09xw5Xo1JHjiKnprFuPx/FKkDIUMpTuk=)
3: nTRfa4CEfSEPj4ycmsgCW3AglMw.roa (hash: pESFbqN8pdSMrVdxz/DWJSvAlDHXy+G546a5D6LdrE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ab49f2-301d-4a36-86a3-3f8695d7e4df/1/0vP4aGthfF-Ryb3Blzuimh5KCQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ab49f2-301d-4a36-86a3-3f8695d7e4df/1/0vP4aGthfF-Ryb3Blzuimh5KCQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vP4aGthfF-Ryb3Blzuimh5KCQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:f1:33:a6:b6:71:78:d7:12:ea:e8:3a:a2:95:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f3f8686b617c5f91c9bdc1973ba29a1e4a0906
Validity
Not Before: May 12 11:01:02 2026 GMT
Not After : May 13 11:01:02 2026 GMT
Subject: CN=3698296388ddb8107b268f496db12018d4429e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:39:ea:d9:99:49:e3:84:e1:85:47:f5:31:9d:
08:bc:bc:af:5d:d1:63:e4:a8:65:60:f7:46:d2:0f:
5b:31:c4:dd:34:29:43:2e:99:c0:6e:c8:50:e1:ff:
2a:74:70:c2:df:ca:4d:1d:04:c3:90:fc:ea:70:71:
46:bf:5b:64:a7:4c:48:c0:ea:e1:f1:ce:1b:df:23:
ad:26:cd:de:22:9f:1f:2a:f9:57:ab:8c:cb:fd:2c:
b7:e0:09:12:3e:29:f1:f4:98:fa:b7:22:66:cf:62:
d7:2e:c3:aa:0d:56:3a:3f:a0:03:4b:f4:c8:d3:d5:
6c:aa:a6:4e:b6:52:76:f5:03:a0:45:8a:ec:4d:ef:
c0:0d:01:c3:c5:67:0c:ce:12:d6:38:e5:0b:97:2e:
c5:c8:9f:30:b5:e9:b5:d5:a5:8c:68:55:d4:5e:e2:
53:23:0b:9e:a6:5d:16:60:ff:83:5b:e2:f0:30:c9:
d9:2d:e6:03:c1:43:ad:df:ee:4f:0c:1a:89:e1:00:
c5:b9:d8:bb:42:7f:2d:cb:b4:d9:7a:46:9f:74:8b:
3f:ff:12:74:d5:b3:6b:b7:8b:98:ff:b7:e7:c8:99:
22:32:e2:85:00:87:70:9d:81:bd:38:7f:62:af:63:
b8:6d:7b:1b:ea:04:8c:02:cd:31:cf:31:73:f7:c7:
2f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:98:29:63:88:DD:B8:10:7B:26:8F:49:6D:B1:20:18:D4:42:9E:29
X509v3 Authority Key Identifier:
keyid:D2:F3:F8:68:6B:61:7C:5F:91:C9:BD:C1:97:3B:A2:9A:1E:4A:09:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vP4aGthfF-Ryb3Blzuimh5KCQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ab49f2-301d-4a36-86a3-3f8695d7e4df/1/0vP4aGthfF-Ryb3Blzuimh5KCQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ab49f2-301d-4a36-86a3-3f8695d7e4df/1/0vP4aGthfF-Ryb3Blzuimh5KCQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:61:65:5d:67:35:77:82:04:b2:4a:6d:0b:b0:e2:be:96:c0:
81:0d:ca:eb:67:aa:68:08:3e:41:4b:08:4f:82:b2:30:83:5f:
04:7f:08:ed:b6:e6:e8:65:3d:87:b6:bf:1e:cf:23:63:2c:d7:
99:21:c2:47:af:0a:d3:8d:2b:b6:f2:14:3f:c1:d6:a9:51:31:
b2:4e:60:4b:3b:59:ac:70:08:e6:7d:1f:c7:49:69:5f:3e:d8:
69:22:a2:4d:f9:d6:4e:3e:77:01:db:b4:19:0a:e4:f2:7d:53:
21:20:88:fb:e5:4d:04:57:9e:e1:d0:b9:ff:d7:d4:77:b6:fd:
f5:67:fa:94:96:c9:f1:61:0e:c7:ff:92:29:19:60:a9:37:21:
cf:32:13:ce:98:49:67:dc:68:0b:9f:98:0c:8e:17:d7:49:f2:
f8:23:55:d8:df:b3:10:36:6f:6d:17:dc:59:fd:6d:7d:29:28:
b9:c5:ac:ea:aa:15:17:ea:0b:50:71:f8:c3:65:e2:82:87:bc:
60:22:67:f2:ec:84:5b:20:97:ad:e6:95:df:ed:7e:a0:70:1c:
df:cd:28:f7:31:09:6a:52:63:29:86:54:31:d0:80:e8:4b:26:
16:e9:ed:42:41:9c:5b:01:c7:ec:82:fd:74:8b:5f:7e:a0:84:
36:a4:c2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:15 2026 by rpki-client