Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
File: 0RaDXQN3hmIKnp96DjYEmLtlQSc.mft (raw, json)
Hash identifier: H07CRonWX3s5t6eNN4odIzw5dwP71eXU9P3xSIIVy4s=
Subject key identifier: D6:E9:7B:24:1E:80:1A:A8:C9:8D:E0:33:73:FE:08:E7:F9:E3:A2:F3
Authority key identifier: D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
Certificate issuer: /CN=d116835d037786620a9e9f7a0e360498bb654127
Certificate serial: 019E1D2301F67F65DDFB7EACB8E9613357A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
Manifest number: 0D1D
Signing time: Tue 12 May 2026 17:01:33 +0000
Manifest this update: Tue 12 May 2026 17:01:33 +0000
Manifest next update: Wed 13 May 2026 17:01:33 +0000
Files and hashes: 1: 0RaDXQN3hmIKnp96DjYEmLtlQSc.crl (hash: B4/xxR+eFiu9f8hmZxdPed2H1sWMDBAPQeIQf2MBSxg=)
2: GxXxtmytTeePZFqMmjKewv0phDk.roa (hash: DQNMt4Qmq5pWK/m+65wngsoZgA7+I6etgVuEFLBf9P8=)
3: hrfVvtnK2yUD8q8kqhgwgxBrIWA.roa (hash: knPxWaldCF2NZQN6BPLTcSuiJLTa63/Ehra1OYIbZUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:01:f6:7f:65:dd:fb:7e:ac:b8:e9:61:33:57:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d116835d037786620a9e9f7a0e360498bb654127
Validity
Not Before: May 12 17:01:33 2026 GMT
Not After : May 13 17:01:33 2026 GMT
Subject: CN=d6e97b241e801aa8c98de03373fe08e7f9e3a2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:eb:c1:ce:e3:32:52:c9:05:e2:43:1c:c4:6c:
ab:f0:48:01:61:de:e8:60:fe:0c:3c:01:32:41:5e:
03:73:1b:1f:22:96:74:82:b7:3e:4a:08:a2:8f:fe:
01:83:d6:bf:51:9f:84:31:87:77:3a:f5:5c:0b:14:
17:d1:7e:22:5d:a0:00:ef:5e:77:41:22:95:b0:d3:
20:40:0b:87:e1:f6:da:fc:3d:23:9b:a3:74:0f:e8:
1b:16:e9:7f:61:0f:74:3f:b1:6e:1e:8d:da:b1:11:
da:b9:97:58:91:63:c5:a0:49:dd:db:2e:cc:72:f5:
b7:1e:03:18:4e:8a:96:df:6d:c9:76:f8:80:f4:52:
ed:4f:ef:d1:2e:a6:ee:2d:52:61:02:90:fe:ca:b4:
95:ab:0d:4d:f4:4b:a3:1a:38:3c:ba:4d:4b:ac:0d:
e8:25:c9:8f:7d:17:be:36:2b:4d:b3:d4:9c:29:31:
45:dd:63:28:b9:d6:4f:2d:dc:61:5d:c1:8c:a8:33:
18:76:ed:4c:bf:8d:6c:81:04:f7:1d:14:75:0c:a6:
42:56:b3:31:3b:ee:a1:5a:38:90:c2:c0:9e:da:96:
c5:17:7e:8a:2e:a3:29:cc:55:27:fb:5b:37:b7:39:
4a:42:7f:40:30:78:5d:1b:77:9b:51:81:e1:99:21:
21:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E9:7B:24:1E:80:1A:A8:C9:8D:E0:33:73:FE:08:E7:F9:E3:A2:F3
X509v3 Authority Key Identifier:
keyid:D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:57:31:22:fd:f4:44:c3:d6:9f:55:fa:b6:c3:f4:4b:65:19:
bb:18:27:c1:cf:a6:b6:8c:ce:64:0a:e1:63:af:24:95:75:95:
24:31:8d:b7:d3:63:ac:ce:31:b3:71:a9:d1:e5:00:46:a9:1f:
15:23:c3:b5:10:84:73:64:36:c2:29:e0:33:06:2c:4a:5a:40:
7e:d7:b3:ec:f9:ab:e6:cb:ba:83:6f:b0:fa:d6:c0:81:4d:cb:
08:71:4a:c3:37:b1:01:0e:b2:85:dd:84:b5:04:94:99:27:4c:
c6:3d:6f:d7:3a:5f:d3:c8:09:36:37:5c:82:ab:62:c5:12:eb:
bb:63:1c:38:c9:f0:74:9c:4c:5f:e8:ff:bb:b4:d5:49:74:83:
ab:69:fb:be:23:ec:b6:19:44:1d:fe:49:e9:9c:91:74:01:0b:
71:48:2e:cc:db:70:ac:3f:65:7b:17:dc:6f:f6:86:cf:27:c3:
62:df:98:f8:0a:e5:38:1c:95:02:95:94:5f:86:5e:92:ad:b6:
a5:2d:39:be:72:03:7c:43:3b:a4:7c:60:40:6f:b7:5f:38:d4:
8f:b0:db:cf:71:f7:ad:e2:18:f8:2a:54:08:7a:77:c0:22:d2:
c2:b6:a8:17:8b:a9:e8:6b:ad:b9:c6:36:ef:21:cf:bd:b2:ab:
b7:80:04:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:17:55 2026 by rpki-client