Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
File: 0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft (raw, json)
Hash identifier: T8ihsNAfhf9SAALIQMXvux8K2ISRHdc1m45qroKp2n8=
Subject key identifier: 25:CC:76:BC:8B:30:DB:99:2D:83:80:2B:70:79:85:F4:BA:40:C6:A4
Authority key identifier: D0:EE:03:89:68:7D:BD:44:5D:E6:F9:23:9C:1D:02:C3:77:0C:F5:74
Certificate issuer: /CN=d0ee0389687dbd445de6f9239c1d02c3770cf574
Certificate serial: 019E1F7F1FA963BE7FDA68544261A6E64361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 04:01:25 +0000
Manifest this update: Wed 13 May 2026 04:01:25 +0000
Manifest next update: Thu 14 May 2026 04:01:25 +0000
Files and hashes: 1: 0O4DiWh9vURd5vkjnB0Cw3cM9XQ.crl (hash: UHv/lhg+2jucWJ3z//ep4q/WRXh2e8XGf7+PGM1xChw=)
2: ufg8Cy-npLiG4EP7oeE-jAY168k.roa (hash: mWJPH552eZGzUsrCNb54v4U4ffZaIGFDBWjHB1EftzA=)
3: ut5dpGeCvxjJRpLmR_ipxil5ZUA.roa (hash: PaeXiU3oIApbKxkYqCqS8/5Z6kGo2lJVdWVbX8L9K5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:1f:a9:63:be:7f:da:68:54:42:61:a6:e6:43:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ee0389687dbd445de6f9239c1d02c3770cf574
Validity
Not Before: May 13 04:01:25 2026 GMT
Not After : May 14 04:01:25 2026 GMT
Subject: CN=25cc76bc8b30db992d83802b707985f4ba40c6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4c:45:fd:94:0d:49:4c:f5:ae:13:85:68:37:
84:13:db:8a:d5:1c:18:91:9c:7b:ee:15:c3:22:4a:
70:3c:68:61:1e:9c:f3:b1:6c:3b:21:1b:5c:b7:c7:
1c:a2:e5:ea:fc:56:98:bb:01:a3:29:4e:bf:74:58:
21:66:4f:9f:9b:a7:eb:08:b6:7a:e6:62:8b:4a:65:
31:f6:2d:73:5c:0f:b9:e7:42:4f:28:3b:74:33:cb:
db:48:0a:d5:a1:e5:e7:d3:8b:a2:7b:20:e9:27:bf:
2b:5c:b9:48:0c:fa:b3:d6:cb:45:06:8e:1b:aa:35:
2b:a8:0f:0f:1b:bb:0a:4b:57:8d:49:71:e6:cc:d9:
66:a3:ae:55:14:f0:31:52:90:ff:be:9c:e1:55:fc:
1b:68:fb:92:dd:5f:06:10:f1:5b:3e:93:18:cb:c2:
d3:eb:b3:3c:4f:8b:6e:1c:57:37:ad:e2:0f:40:5f:
fc:2e:02:5f:69:7f:b8:b2:c2:5d:83:df:5d:3a:ef:
c4:33:54:f8:5a:64:1c:be:91:4e:df:05:7a:19:3d:
b5:2f:06:0f:c0:8c:9b:6f:ae:52:45:39:38:7b:78:
c0:72:60:6f:90:30:c7:ac:92:b5:d8:52:1c:1d:2d:
01:81:34:d9:e9:42:7e:4c:34:72:d8:ed:fb:3c:a1:
f6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CC:76:BC:8B:30:DB:99:2D:83:80:2B:70:79:85:F4:BA:40:C6:A4
X509v3 Authority Key Identifier:
keyid:D0:EE:03:89:68:7D:BD:44:5D:E6:F9:23:9C:1D:02:C3:77:0C:F5:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:59:81:86:75:85:e6:2e:8c:44:18:1c:25:c1:48:85:e8:d4:
b3:4e:cd:de:90:3a:d4:5d:50:28:bb:36:1b:eb:eb:06:3e:03:
cb:be:e0:a3:d4:9f:53:fd:44:0f:ff:33:fb:36:f0:60:dc:22:
1f:6c:58:52:42:21:20:82:87:7b:8f:ba:9e:e3:56:5c:43:ef:
22:96:6f:75:50:7a:41:57:fb:da:8d:f6:47:6c:2e:3e:3e:3c:
a3:7d:68:8d:61:7c:3c:6b:6c:31:e4:aa:c7:02:fc:4c:4c:85:
cf:16:c8:57:e8:bd:c8:b5:49:f6:48:f7:b3:43:d9:29:53:38:
ab:3c:6f:8d:89:8b:69:16:8a:f6:d7:84:08:11:97:11:fa:63:
12:60:4d:5e:38:53:2e:96:92:8d:f4:c3:3f:55:25:f2:61:e7:
f8:34:7e:61:a5:8b:ea:e0:e8:91:1d:4d:46:e9:bd:69:b1:c8:
aa:88:4b:bc:06:d3:5c:d2:58:48:4b:cf:0d:10:0f:25:d2:bf:
4c:f3:28:b9:ed:58:60:99:79:7e:99:76:4c:b2:6b:09:0e:22:
7a:25:19:b3:7e:c5:e4:fd:6b:b2:2f:67:da:ca:f3:0b:da:85:
08:32:6b:18:71:4d:14:ae:9e:71:7f:d0:95:f5:65:17:f2:0a:
a8:d1:6c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:32:58 2026 by rpki-client