Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
File: 0vHIhC58-JGyNNOh4OLg73PoQqo.mft (raw, json)
Hash identifier: LylWFZUv21z2/MQPuFBSVzbD1fzHA0UMavWpqOaFZn0=
Subject key identifier: DC:E9:0E:D4:7C:AB:AE:93:3A:2C:FB:2D:09:47:7E:CE:36:A8:04:84
Authority key identifier: D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
Certificate issuer: /CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Certificate serial: 019E1CEB4DE6B4E3C9F8A76A68269ADB91FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 16:00:43 +0000
Manifest this update: Tue 12 May 2026 16:00:43 +0000
Manifest next update: Wed 13 May 2026 16:00:43 +0000
Files and hashes: 1: 0vHIhC58-JGyNNOh4OLg73PoQqo.crl (hash: tLaXveVCxfxUqizV3HQFmIB3YlCOtpUJGBX4CU1uqls=)
2: l9fT_tPQilc8kDDpXdmC63EbBTU.roa (hash: e0hhcAS9+zmOEL/7aF5yJ1rOw5m87GlUo2fUEzHI/tc=)
3: zZqdbpX91TjBbrVKBU--OsfsNgs.roa (hash: 5bqwY0fuE7qADoXdmI9CeMVMqqLQteAK+rBOtRg2eMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:4d:e6:b4:e3:c9:f8:a7:6a:68:26:9a:db:91:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Validity
Not Before: May 12 16:00:43 2026 GMT
Not After : May 13 16:00:43 2026 GMT
Subject: CN=dce90ed47cabae933a2cfb2d09477ece36a80484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1f:5b:bb:87:68:c7:ba:ca:22:4a:40:79:b4:
83:bc:46:e7:2f:93:af:c9:45:f9:c7:88:c0:be:58:
07:e3:1e:f0:65:41:36:3e:dd:34:46:72:c0:6b:ed:
55:dc:17:87:64:3d:3c:37:2b:bd:99:88:3f:44:b1:
3b:c6:29:ab:cd:96:d3:ed:3d:25:5d:4a:1b:5e:5f:
40:39:28:23:8b:98:34:5a:80:d8:ec:8b:0d:9b:4f:
74:3f:b1:ba:5d:9b:5a:ae:60:e9:cd:1f:ef:61:e4:
c5:2c:26:77:51:48:f3:ac:15:57:bc:88:a8:a2:e9:
85:74:91:2f:fd:81:22:f5:e0:bc:c3:9b:ee:c7:c3:
fe:bb:04:59:b7:5f:67:a4:90:c4:88:c5:a7:1e:33:
1c:27:cb:e6:66:71:15:00:53:34:8a:67:7c:2d:6d:
bf:61:fe:16:34:2e:fb:3b:2a:84:71:68:dd:b2:da:
ed:ac:86:71:7d:06:02:4c:ff:b5:6e:f3:92:3e:21:
94:7d:44:78:91:e4:56:2d:5e:fe:c8:48:cb:39:22:
ee:e4:ae:d2:e8:f5:a4:f7:4c:6e:a9:50:ad:3a:fd:
69:42:35:8f:2d:d9:27:d7:6b:66:4a:bf:05:b1:ea:
a9:39:c6:9f:a2:61:5a:2d:84:80:a4:0f:52:6f:10:
d4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E9:0E:D4:7C:AB:AE:93:3A:2C:FB:2D:09:47:7E:CE:36:A8:04:84
X509v3 Authority Key Identifier:
keyid:D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:22:26:7c:86:1d:ef:97:a3:43:5a:20:06:fb:d5:d5:ed:2f:
ae:ef:f0:99:fc:c5:19:5e:ba:88:e3:00:ae:08:61:c5:dc:eb:
57:a9:dd:f6:e8:e5:2c:a9:f7:d2:89:d3:3f:ab:9f:9a:cb:22:
a9:7f:6e:c3:6f:4f:da:96:a4:50:80:f7:94:fd:8d:37:43:eb:
2d:ce:b1:7a:d3:a0:be:1a:d6:b9:cc:37:d5:39:d4:fa:9c:95:
b8:f6:38:1b:d3:3c:6f:a6:f9:e3:ee:26:79:d8:02:23:b1:7c:
c0:10:e1:94:65:a0:80:19:30:ba:33:b2:52:bb:f5:cb:ce:8c:
81:70:eb:b7:1e:b9:d9:08:03:06:5a:31:40:52:d5:31:85:29:
a1:ee:77:16:10:1f:1c:3b:e3:c5:02:e8:00:86:39:d6:40:fd:
c3:a0:18:d2:e5:34:f8:56:75:ff:69:53:38:3a:fc:0a:22:e7:
a0:4d:fa:6c:49:a1:b9:25:ee:a1:92:95:5a:a0:ca:86:cf:9c:
d2:ad:cf:f3:a5:55:9f:94:ec:29:ab:78:30:8d:51:ee:4f:8d:
ce:94:54:8e:ea:56:f5:05:f6:55:95:0a:ac:61:31:3c:22:35:
26:9e:9e:db:3a:3f:dd:00:de:57:15:11:76:a2:f2:ca:c3:0d:
e9:1c:c6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:24:42 2026 by rpki-client