Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
File: 0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft (raw, json)
Hash identifier: cqAt5oqa0w6QlT42JnGm/LQBUpHqLcpKkY1MYUnkvTU=
Subject key identifier: 4F:0C:3B:C5:6D:50:65:18:DB:D3:5B:65:AC:AC:47:A8:08:01:41:24
Authority key identifier: D0:EE:03:89:68:7D:BD:44:5D:E6:F9:23:9C:1D:02:C3:77:0C:F5:74
Certificate issuer: /CN=d0ee0389687dbd445de6f9239c1d02c3770cf574
Certificate serial: 019D284D94EC92EA3A792FBAB10DA6856421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 04:01:06 +0000
Manifest this update: Thu 26 Mar 2026 04:01:06 +0000
Manifest next update: Fri 27 Mar 2026 04:01:06 +0000
Files and hashes: 1: 0O4DiWh9vURd5vkjnB0Cw3cM9XQ.crl (hash: XbjyKZFTAfyMxW+eDJxTGRnqaP75QceJ/uNvOgmpCyY=)
2: ufg8Cy-npLiG4EP7oeE-jAY168k.roa (hash: mWJPH552eZGzUsrCNb54v4U4ffZaIGFDBWjHB1EftzA=)
3: ut5dpGeCvxjJRpLmR_ipxil5ZUA.roa (hash: PaeXiU3oIApbKxkYqCqS8/5Z6kGo2lJVdWVbX8L9K5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:94:ec:92:ea:3a:79:2f:ba:b1:0d:a6:85:64:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ee0389687dbd445de6f9239c1d02c3770cf574
Validity
Not Before: Mar 26 04:01:06 2026 GMT
Not After : Mar 27 04:01:06 2026 GMT
Subject: CN=4f0c3bc56d506518dbd35b65acac47a808014124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d2:26:53:4e:2f:61:62:b3:3c:a5:81:87:0b:
f9:70:ab:68:e8:48:f9:5f:c4:c7:93:f8:b6:e6:d3:
38:08:0e:69:9f:2e:b6:7b:09:95:b7:9d:ab:6a:80:
9b:6e:af:29:f4:82:6a:ea:03:9f:56:25:99:a9:50:
8a:c8:1b:be:6b:8d:71:c0:b2:3f:7d:ef:91:22:cd:
29:66:7b:2c:bc:e9:dc:c0:9a:71:c6:51:fe:0f:d3:
54:59:56:18:6b:58:e0:c5:81:e8:df:1f:c5:b1:d2:
0c:94:88:4a:9a:53:77:c5:88:a3:2d:24:db:b9:f1:
aa:fb:2a:9f:35:0e:ab:e9:65:9a:58:91:7f:90:72:
b3:54:5c:c1:e2:cd:f3:bf:a3:b8:63:c5:d0:c0:46:
16:0c:28:35:8a:95:a4:c8:ae:a1:06:f3:e4:f2:45:
4c:35:98:21:f1:01:82:91:6b:15:7e:e3:38:e4:e2:
c8:e4:64:25:76:0f:3e:72:10:be:ec:44:c5:62:80:
02:5a:94:30:7c:79:97:94:4e:75:1e:f9:94:5f:88:
3c:76:2f:cd:13:9a:2e:f3:83:26:62:12:52:74:cd:
a0:25:6d:a3:8d:27:22:6e:b4:af:94:e2:32:28:c1:
ff:44:79:1f:03:de:e8:8a:6e:f9:f8:31:ee:23:1a:
b7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0C:3B:C5:6D:50:65:18:DB:D3:5B:65:AC:AC:47:A8:08:01:41:24
X509v3 Authority Key Identifier:
keyid:D0:EE:03:89:68:7D:BD:44:5D:E6:F9:23:9C:1D:02:C3:77:0C:F5:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e6:91:e9:dd:98:72:7a:52:fd:2c:fb:17:e8:7c:99:9f:ee:
b6:bf:47:f2:48:1b:d6:5f:8a:a9:42:7f:28:47:d8:bf:a5:cf:
e2:dc:65:5b:fc:aa:d9:99:47:3e:7a:0f:6e:df:0b:f6:51:ca:
1c:ad:03:94:c6:87:2b:47:90:66:af:cd:34:28:c4:3a:34:44:
3e:37:2b:17:3b:69:7d:03:2f:38:85:01:df:42:31:25:39:87:
6e:d2:7b:f4:b8:f4:e8:e3:c5:c2:fa:fd:83:a3:77:9a:4c:a1:
5c:18:28:38:02:f9:e2:96:e7:58:f6:7f:52:cb:ea:ce:3d:94:
5f:a4:61:72:a0:6f:8e:3f:54:29:7c:c6:40:35:a1:e7:e1:17:
45:34:a8:68:fa:7a:0d:cf:73:fe:d8:c9:37:b1:8a:35:90:ce:
7d:62:11:88:b1:2c:cf:12:91:3c:28:cd:f1:c2:38:5f:55:95:
09:9d:d6:c2:11:f4:f0:d8:03:38:0a:3f:fd:ac:d1:d0:3f:3f:
bf:47:9a:ae:8f:72:5c:50:65:a4:38:57:53:b9:36:5f:a7:d7:
75:fc:ff:fa:a2:cc:d5:9b:48:db:20:f1:68:4a:8d:72:0c:e4:
cd:d3:e1:e4:08:f8:02:92:31:48:9c:2f:30:63:6f:49:3a:59:
89:54:1a:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTZTskuo6eS+6sQ2mhWQhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZWUwMzg5Njg3ZGJkNDQ1ZGU2ZjkyMzljMWQwMmMzNzcw
Y2Y1NzQwHhcNMjYwMzI2MDQwMTA2WhcNMjYwMzI3MDQwMTA2WjAzMTEwLwYDVQQD
Eyg0ZjBjM2JjNTZkNTA2NTE4ZGJkMzViNjVhY2FjNDdhODA4MDE0MTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNImU04vYWKzPKWBhwv5cKto6Ej5
X8THk/i25tM4CA5pny62ewmVt52raoCbbq8p9IJq6gOfViWZqVCKyBu+a41xwLI/
fe+RIs0pZnssvOncwJpxxlH+D9NUWVYYa1jgxYHo3x/FsdIMlIhKmlN3xYijLSTb
ufGq+yqfNQ6r6WWaWJF/kHKzVFzB4s3zv6O4Y8XQwEYWDCg1ipWkyK6hBvPk8kVM
NZgh8QGCkWsVfuM45OLI5GQldg8+chC+7ETFYoACWpQwfHmXlE51HvmUX4g8di/N
E5ou84MmYhJSdM2gJW2jjScibrSvlOIyKMH/RHkfA97oim75+DHuIxq3rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE8MO8VtUGUY29NbZaysR6gIAUEkMB8GA1UdIwQY
MBaAFNDuA4lofb1EXeb5I5wdAsN3DPV0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME80RGlXaDl2VVJkNXZram5CMEN3M2NNOVhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9hMTE0MTctNmFiYy00YzBkLThhZmEt
MWEyOWE0NDhkMzA5LzEvME80RGlXaDl2VVJkNXZram5CMEN3M2NNOVhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9hMTE0MTctNmFiYy00YzBkLThhZmEtMWEyOWE0NDhkMzA5
LzEvME80RGlXaDl2VVJkNXZram5CMEN3M2NNOVhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI+aR6d2Y
cnpS/Sz7F+h8mZ/utr9H8kgb1l+KqUJ/KEfYv6XP4txlW/yq2ZlHPnoPbt8L9lHK
HK0DlMaHK0eQZq/NNCjEOjREPjcrFztpfQMvOIUB30IxJTmHbtJ79Lj06OPFwvr9
g6N3mkyhXBgoOAL54pbnWPZ/Usvqzj2UX6RhcqBvjj9UKXzGQDWh5+EXRTSoaPp6
Dc9z/tjJN7GKNZDOfWIRiLEszxKRPCjN8cI4X1WVCZ3WwhH08NgDOAo//azR0D8/
v0earo9yXFBlpDhXU7k2X6fXdfz/+qLM1ZtI2yDxaEqNcgzkzdPh5Aj4ApIxSJwv
MGNvSTpZiVQaxw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:16 2026 by rpki-client