Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
File: 0gVCphNVJBQhlMqnCOfbLMprTmM.mft (raw, json)
Hash identifier: F5L/oGddn2LFHb2KdM1vCEZ/nt5Hk5ZOwPeUmiLygE8=
Subject key identifier: AE:72:D5:40:CE:66:BD:F2:A1:AA:88:9D:AD:49:F0:0E:6F:89:1C:CF
Authority key identifier: D2:05:42:A6:13:55:24:14:21:94:CA:A7:08:E7:DB:2C:CA:6B:4E:63
Certificate issuer: /CN=d20542a6135524142194caa708e7db2cca6b4e63
Certificate serial: 019E1D59B3A5C44B6281BF2AC12D251525D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
Manifest number: 11DE
Signing time: Tue 12 May 2026 18:01:18 +0000
Manifest this update: Tue 12 May 2026 18:01:18 +0000
Manifest next update: Wed 13 May 2026 18:01:18 +0000
Files and hashes: 1: 0gVCphNVJBQhlMqnCOfbLMprTmM.crl (hash: WRexw9OIyBGYhNac3BqQ9IYHAVOFG0YZrMAsLxK5oXw=)
2: W-WGisgg-jdHv8TOeMHyK0ABKKM.roa (hash: AOrzg/e6GHv0wl5jj9rXhlmu6Xrpu+wHeWmnEnYMw/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:b3:a5:c4:4b:62:81:bf:2a:c1:2d:25:15:25:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d20542a6135524142194caa708e7db2cca6b4e63
Validity
Not Before: May 12 18:01:18 2026 GMT
Not After : May 13 18:01:18 2026 GMT
Subject: CN=ae72d540ce66bdf2a1aa889dad49f00e6f891ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6d:46:88:cf:e0:26:04:f6:39:83:71:5d:dd:
3e:cc:b0:d7:29:f5:0c:94:84:8d:71:09:d9:38:80:
09:d4:ae:84:73:33:d5:a9:2c:f6:d2:f9:31:f3:0e:
a9:3f:dd:2e:82:b2:5c:5c:76:63:de:ca:66:49:8c:
6f:a3:b0:64:2a:f3:b8:89:3e:3a:93:ad:c7:13:f8:
a0:2f:7c:2e:c2:e1:f9:e4:71:5a:74:d1:1b:b5:35:
38:da:d6:09:07:f2:f7:4b:75:53:fc:2b:23:63:0c:
57:ca:f0:b3:35:e9:7a:96:93:40:c6:b1:88:b1:22:
f9:5f:42:d1:9a:bb:23:e0:cb:c7:30:78:4f:21:ff:
7b:07:d7:a7:da:1a:48:bf:2f:ed:35:aa:4e:35:a8:
13:2a:0c:08:23:e5:9f:04:c3:2d:46:86:01:07:9f:
77:a0:3f:c9:5e:23:72:05:c3:f8:a3:16:60:ee:50:
fc:82:1d:95:72:13:27:59:ba:39:dc:89:f8:ae:e9:
06:26:90:d2:37:c0:cf:8b:33:a7:ad:f8:53:ae:f9:
a1:6a:77:76:c5:bd:27:a7:fe:a5:b3:83:8b:67:06:
bb:74:3e:a7:eb:8a:31:6f:5f:88:42:e2:6a:31:28:
d0:17:9d:66:b8:93:2b:b9:64:b6:11:1b:f6:cd:f7:
88:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:72:D5:40:CE:66:BD:F2:A1:AA:88:9D:AD:49:F0:0E:6F:89:1C:CF
X509v3 Authority Key Identifier:
keyid:D2:05:42:A6:13:55:24:14:21:94:CA:A7:08:E7:DB:2C:CA:6B:4E:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a8:b7:7a:b8:b3:6d:b9:99:76:bc:d9:60:25:e0:f7:c4:db:
89:4b:af:31:6b:ef:fd:08:3d:e0:39:04:90:ca:b7:cf:9d:7e:
bd:8e:74:96:9c:cf:52:66:fb:fd:6b:5a:f2:a6:77:cc:f1:82:
3d:16:40:91:3c:87:cb:68:b3:56:e6:cb:7c:76:ee:47:bb:c3:
9e:45:e1:74:7d:4a:84:09:32:13:a2:45:80:fc:c1:54:a7:78:
5b:58:52:3e:56:fd:87:04:56:7c:06:2c:51:c8:0a:39:50:c9:
92:e3:8d:ec:5e:e2:4b:61:16:6a:48:e8:91:f5:75:f3:cf:25:
a6:d9:5f:9d:2f:f8:52:4b:fa:88:a0:9e:c0:02:e1:62:94:5e:
4d:0c:a5:e5:b2:50:54:f7:dc:95:67:0c:80:06:11:e0:c7:c0:
0d:3b:51:e9:d1:60:3e:dc:a9:c6:01:57:0e:c9:fb:62:19:69:
c1:88:fa:1d:c5:71:f8:44:1e:28:8d:9f:00:a4:0a:3d:3e:42:
37:b5:55:6b:10:9d:df:34:02:f9:a4:20:a3:44:a1:04:0c:d2:
fc:60:b1:72:83:0e:af:0b:90:f9:53:9f:67:08:02:b8:ca:64:
84:88:c6:5c:99:a1:de:23:60:b6:7a:46:bb:b7:77:d6:72:bb:
a5:9b:fd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:46:22 2026 by rpki-client