Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
File: 0d4HoaH2W9EW4R-fEQhgS26VzP0.mft (raw, json)
Hash identifier: VqRjfVrH+7u7ua4LZ2GoOt4tadg0hT5CnNaiVg1oOO8=
Subject key identifier: 18:84:85:C0:A1:49:2A:39:10:2E:6D:19:B6:E3:AA:88:78:21:D6:A4
Authority key identifier: D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
Certificate issuer: /CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Certificate serial: 019E1C0FC60410B8972537CFB7870BF64495
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
Manifest number: 149B
Signing time: Tue 12 May 2026 12:00:56 +0000
Manifest this update: Tue 12 May 2026 12:00:56 +0000
Manifest next update: Wed 13 May 2026 12:00:56 +0000
Files and hashes: 1: 0d4HoaH2W9EW4R-fEQhgS26VzP0.crl (hash: jeum8vkJBfXXv5/jutsiN/qjlKinVNQV4bDNNfJoxps=)
2: 6AcW6a22cinoLIymW2byGAd7uWo.roa (hash: RoxEP6kBPzD8q8xHwCRknSTvIS7/SOyyVCFWMK8wKF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:c6:04:10:b8:97:25:37:cf:b7:87:0b:f6:44:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Validity
Not Before: May 12 12:00:56 2026 GMT
Not After : May 13 12:00:56 2026 GMT
Subject: CN=188485c0a1492a39102e6d19b6e3aa887821d6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:77:5f:44:e8:0f:a5:73:fd:d9:03:ac:93:fc:
62:fe:ca:2d:87:8b:28:ea:34:36:86:b7:3d:3b:f4:
d1:6e:94:c8:16:1a:63:2f:e7:31:ef:3f:5f:03:5d:
a9:e0:d0:c8:bb:8e:e1:01:f8:b1:62:12:eb:5c:fc:
61:6b:b5:f9:db:55:cb:09:dc:fe:04:96:af:59:9c:
d3:74:05:40:d0:9f:7e:a4:12:a7:62:56:8f:ca:0b:
93:22:6d:4c:86:b7:19:4f:50:40:17:a0:9a:45:d7:
d4:30:4f:25:d5:0c:4f:3b:88:71:7b:d9:be:d0:83:
ff:1b:5e:36:5c:71:6e:59:96:cf:bf:88:18:e4:19:
02:6c:c0:04:1a:c6:ef:42:45:2b:14:77:13:47:03:
29:f9:14:ec:47:7b:74:f9:fe:27:5a:21:0e:8f:fa:
c3:1b:d2:f9:fa:c4:22:9d:88:f1:23:2b:f5:70:b4:
a4:a2:9f:27:e5:91:7c:8c:3a:e4:52:be:ca:25:6f:
fe:2f:ca:69:95:4c:1b:e9:71:c7:cc:93:b2:ef:e5:
d1:96:be:80:e1:ff:52:be:e9:ba:20:aa:76:92:07:
56:92:78:06:67:2a:55:23:f9:2f:1f:31:a1:0b:35:
61:c4:c4:7b:2b:e8:7c:11:d2:d0:39:25:a6:46:07:
a9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:84:85:C0:A1:49:2A:39:10:2E:6D:19:B6:E3:AA:88:78:21:D6:A4
X509v3 Authority Key Identifier:
keyid:D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:e2:6a:f6:41:2c:ef:1b:3e:a4:26:50:16:ea:29:13:4c:0e:
68:ea:c6:7e:a4:54:1b:fe:9c:b4:94:89:1d:42:51:31:ef:cc:
c0:31:16:d6:01:46:e4:3d:4c:c9:83:12:3c:89:1c:a1:f8:0a:
bf:89:09:47:77:9d:af:d3:87:af:ed:90:e4:78:d8:02:59:40:
a1:06:3a:98:59:bb:15:51:42:d2:53:d4:79:d2:6f:61:ca:fd:
bf:77:09:cc:a7:e3:52:6c:4d:8f:35:4a:5d:09:f2:10:18:fb:
51:b2:a6:6b:2b:c4:e8:26:c0:04:3f:2e:63:b9:fd:97:75:e1:
bb:ed:52:8b:fc:90:73:21:de:10:40:f8:d8:3a:ff:8b:17:6f:
21:ed:22:3e:85:81:13:92:71:4f:15:a6:22:0a:a7:1b:b6:f0:
ae:62:93:25:2e:ee:7c:a5:cd:bb:c4:d3:5d:5a:e7:04:d7:87:
ec:e3:03:4a:14:92:4c:ac:10:42:85:8d:6e:c9:8d:b3:c0:0a:
35:cb:cd:87:11:78:6d:d1:09:cf:35:7c:f2:08:18:5e:57:42:
24:ec:8a:bb:22:9e:24:ff:5a:48:d1:81:a3:14:8f:0c:e6:98:
69:4b:92:cb:f4:2c:b3:65:1b:78:66:ba:a4:84:34:3b:1e:1a:
2f:f2:55:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:24 2026 by rpki-client