Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/217726-2df2-47af-a0ea-d94131da861d/1/0PDiyMFKgktU4AvZR5pIXXG_5HQ.mft
File: 0PDiyMFKgktU4AvZR5pIXXG_5HQ.mft (raw, json)
Hash identifier: X6H7yn7x1Wh0iY6TxGKDD99kuJfpaiTTRssSTveQ8uU=
Subject key identifier: 04:C5:9A:16:F8:FD:D7:86:EA:7B:7F:50:8F:8A:6C:8E:1C:F1:0A:88
Authority key identifier: D0:F0:E2:C8:C1:4A:82:4B:54:E0:0B:D9:47:9A:48:5D:71:BF:E4:74
Certificate issuer: /CN=d0f0e2c8c14a824b54e00bd9479a485d71bfe474
Certificate serial: 019E1CEBD1156DBC23CB70F7E2127E51D3BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PDiyMFKgktU4AvZR5pIXXG_5HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/217726-2df2-47af-a0ea-d94131da861d/1/0PDiyMFKgktU4AvZR5pIXXG_5HQ.mft
Manifest number: C0
Signing time: Tue 12 May 2026 16:01:16 +0000
Manifest this update: Tue 12 May 2026 16:01:16 +0000
Manifest next update: Wed 13 May 2026 16:01:16 +0000
Files and hashes: 1: 0PDiyMFKgktU4AvZR5pIXXG_5HQ.crl (hash: F2kjF0uiz5j+WFM4MwHNI/h9eyrrbrv33fPuyUDVM6g=)
2: vz9xDUONTQdNGh2H7pR1j8DJb4U.roa (hash: wQlmjv0wxtwfgnsZbxR6Yv1Bicu90n9KXilxDJKClFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/217726-2df2-47af-a0ea-d94131da861d/1/0PDiyMFKgktU4AvZR5pIXXG_5HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/217726-2df2-47af-a0ea-d94131da861d/1/0PDiyMFKgktU4AvZR5pIXXG_5HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PDiyMFKgktU4AvZR5pIXXG_5HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:d1:15:6d:bc:23:cb:70:f7:e2:12:7e:51:d3:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f0e2c8c14a824b54e00bd9479a485d71bfe474
Validity
Not Before: May 12 16:01:16 2026 GMT
Not After : May 13 16:01:16 2026 GMT
Subject: CN=04c59a16f8fdd786ea7b7f508f8a6c8e1cf10a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b5:01:ba:88:8c:52:f8:37:78:0d:ad:12:2c:
bf:22:03:48:bd:2c:0e:26:b6:ea:27:85:8b:96:a8:
9a:17:da:39:9a:8c:a9:de:0e:30:a9:03:00:fe:59:
da:15:60:60:fe:ff:19:c2:ea:39:48:25:40:7a:45:
bf:22:7f:35:87:35:8d:8c:97:3e:e8:e6:5e:10:2f:
52:a8:17:2a:5b:5d:75:d9:c7:7f:94:f9:4f:19:ee:
48:74:14:92:48:da:72:17:00:a8:e4:fc:fd:f4:05:
cd:f4:b7:5f:16:3f:04:ae:02:48:ad:0d:f1:72:80:
39:ba:e5:bf:c1:73:f5:00:10:cd:df:1d:33:4b:08:
cc:48:cb:d0:cb:0b:1f:50:86:d5:94:27:4e:d6:b6:
5c:6c:f6:ab:eb:70:10:de:85:22:9f:7a:2a:a7:11:
b3:97:f0:71:ee:43:ea:b3:37:4b:b2:e8:4f:3d:33:
50:29:95:c2:4f:02:f9:3e:5c:84:38:b1:c8:62:d0:
a8:bd:d1:ec:5d:4a:ff:66:1c:59:ba:50:55:3b:90:
37:f5:91:bf:e6:f3:fd:fb:cb:ad:4d:51:91:30:1c:
e4:7c:44:4a:a2:36:27:a7:96:1b:03:4c:20:8f:e7:
66:f6:ee:50:bf:66:0e:b8:a8:49:a6:d2:70:68:a2:
f1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C5:9A:16:F8:FD:D7:86:EA:7B:7F:50:8F:8A:6C:8E:1C:F1:0A:88
X509v3 Authority Key Identifier:
keyid:D0:F0:E2:C8:C1:4A:82:4B:54:E0:0B:D9:47:9A:48:5D:71:BF:E4:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PDiyMFKgktU4AvZR5pIXXG_5HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/217726-2df2-47af-a0ea-d94131da861d/1/0PDiyMFKgktU4AvZR5pIXXG_5HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/217726-2df2-47af-a0ea-d94131da861d/1/0PDiyMFKgktU4AvZR5pIXXG_5HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:c7:93:38:6a:1b:e3:a8:2b:b5:fc:35:89:6a:6b:9b:62:80:
11:4c:72:7c:c0:55:9e:56:4a:ee:07:0a:c1:1c:eb:2a:bb:04:
8b:15:9a:92:e5:9e:15:ae:b3:9c:c3:89:2c:3f:28:2b:8b:63:
0f:34:bf:e0:62:33:00:a0:75:2f:28:7d:b3:63:7f:ee:c7:bd:
7a:af:0b:9f:bc:46:91:ed:50:c0:bd:62:c7:a5:70:c8:05:1e:
83:88:31:8c:43:32:6c:06:11:05:5b:6f:7d:0e:38:23:08:8b:
4c:82:dc:98:20:13:c1:a1:af:9d:b5:5b:1b:34:9d:86:b5:46:
85:13:7f:f3:02:07:4a:54:45:1a:fe:32:8a:7f:d9:ea:53:f3:
f9:e6:11:92:32:c1:f8:be:88:c6:89:a2:32:cc:81:29:b6:00:
ee:27:61:05:ca:a4:66:10:a4:a8:67:6f:d6:18:61:fd:34:3a:
73:53:bb:df:73:15:fe:69:1e:55:af:4f:ec:c2:a3:3c:50:90:
6a:51:5d:e3:ec:64:eb:e8:d1:1b:46:8a:bf:ad:cc:70:5a:bd:
f8:cd:e5:c6:c3:72:3e:d2:79:df:52:86:51:5a:2f:07:4e:07:
fd:27:51:02:ff:39:7b:22:51:68:b8:37:ec:8e:b8:ce:a5:a0:
f2:dd:dc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:56:57 2026 by rpki-client