Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
File: 0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft (raw, json)
Hash identifier: 3J+HCH6LC1iWz5dpD/8l+9598hKHcuQjWMZhPOlYrys=
Subject key identifier: EF:72:A5:8B:BF:60:6F:A3:B5:FA:8F:8E:C9:67:29:3A:37:93:2D:B6
Authority key identifier: D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9
Certificate issuer: /CN=d29dc792adfcfe88c79e7958fbfec525630b62f9
Certificate serial: 019E1CEBFD268D348F2169858C6849EB2C34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
Manifest number: 0D0A
Signing time: Tue 12 May 2026 16:01:28 +0000
Manifest this update: Tue 12 May 2026 16:01:28 +0000
Manifest next update: Wed 13 May 2026 16:01:28 +0000
Files and hashes: 1: 0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl (hash: MofX0V0pSVro017dokfbl0At3u06zD3/skQ2fq+CW1w=)
2: 1KnU7H_UVe-XpNapFYFQEn0LJJQ.roa (hash: cUtUMg5M4fjhGoVm34BuVn+17rIs5yEOOCki02p10ww=)
3: j5hpz0Ky4wyZsfB5ISUjvlPvrQ8.roa (hash: eXsNvI5c0yl1gppo8mH8F57qlB2x5VSSClL68a+AJ/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:fd:26:8d:34:8f:21:69:85:8c:68:49:eb:2c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d29dc792adfcfe88c79e7958fbfec525630b62f9
Validity
Not Before: May 12 16:01:28 2026 GMT
Not After : May 13 16:01:28 2026 GMT
Subject: CN=ef72a58bbf606fa3b5fa8f8ec967293a37932db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7a:9d:48:71:c4:01:2d:ff:4f:ee:c8:0b:19:
6d:14:c5:6c:8a:31:1e:11:f8:ab:e3:c8:29:67:84:
2d:d2:c4:fe:61:8f:45:70:2d:29:be:0a:8c:69:3d:
7e:ff:49:68:42:15:69:bd:be:b5:8b:78:2c:d0:f9:
18:de:c7:92:98:a8:2d:55:62:e8:ba:dd:a5:5d:47:
bb:ad:51:e2:91:b2:51:c8:99:00:5e:6f:07:26:70:
54:73:62:05:98:5a:3c:b5:13:1a:8c:76:23:aa:42:
b0:96:a1:eb:2c:9c:32:d8:1c:60:c4:17:77:89:53:
74:0b:d7:9e:5e:ae:17:f3:57:87:96:4f:fe:59:7a:
7f:e9:38:25:51:b9:8e:89:65:ee:06:48:3d:52:22:
51:2d:ea:c0:8d:d3:41:e6:56:b5:9c:05:f0:cc:a9:
82:b5:33:a0:ef:8a:89:d0:fe:9d:f4:83:e3:d6:13:
f2:97:3a:27:04:b5:17:19:d3:ba:98:27:e1:28:54:
c0:bb:14:c7:e9:61:eb:0a:8b:2a:53:28:3b:7d:14:
74:cc:06:f2:1b:85:10:af:0c:cd:71:7c:9e:2f:b0:
fe:2e:82:23:9c:ce:94:5b:dd:0a:21:87:cf:11:0f:
2c:c5:ae:4b:0c:b2:ff:fb:a6:25:7f:64:8c:14:e1:
dc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:72:A5:8B:BF:60:6F:A3:B5:FA:8F:8E:C9:67:29:3A:37:93:2D:B6
X509v3 Authority Key Identifier:
keyid:D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:0d:b2:3a:c4:e0:cd:f5:fe:ed:52:8b:96:f6:9f:e8:c1:85:
1e:79:12:b5:25:b2:5a:da:68:37:f0:78:d0:0e:c0:45:1e:1c:
bf:9a:55:da:2a:0d:f5:94:ed:9e:68:29:dd:1d:f9:f3:74:e2:
d3:e0:45:8e:63:3e:18:15:01:e2:7d:9a:e4:ee:83:43:6a:db:
5e:e8:b8:56:b0:3e:a6:9f:47:dc:f1:45:3f:18:97:d3:c2:3a:
8e:1b:ca:02:22:51:12:eb:3e:92:2e:1c:6b:6d:dd:82:c6:be:
f1:2a:8e:96:62:4b:43:e4:a3:56:d7:43:85:52:e2:b4:af:36:
10:aa:b8:ed:09:b3:76:f7:5f:5e:fc:d9:18:e0:26:3c:61:39:
50:d0:40:0c:35:78:88:43:0e:52:e3:81:50:bf:61:68:3d:18:
c4:f5:bb:a1:eb:78:e9:78:a8:d8:58:6f:35:0e:62:25:48:79:
70:d6:0a:36:59:83:54:cf:e9:f7:19:3f:cb:73:14:1f:8a:92:
76:6c:8b:0d:1f:9a:dc:e8:98:cf:60:94:6a:25:79:29:f1:0f:
4e:9e:81:15:83:32:ce:e8:6b:85:54:df:1a:b4:1a:fd:cb:37:
0c:a0:34:88:40:e7:44:ba:69:37:25:cb:9c:e0:81:61:29:00:
43:bd:df:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:23:11 2026 by rpki-client