Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
File: 0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft (raw, json)
Hash identifier: 4vikHIlvn0hp1bQSi5mBZO+QjIOexXFr+/QRJCaWYQw=
Subject key identifier: FF:52:CB:42:9A:24:7E:1A:4C:D9:B0:78:AA:E6:74:3F:67:0B:D8:1D
Authority key identifier: D2:76:C4:1A:21:76:25:4F:23:6D:23:D3:91:FD:56:09:06:19:67:0D
Certificate issuer: /CN=d276c41a2176254f236d23d391fd56090619670d
Certificate serial: 019E1D9137D829DE1A408D94BCCE42237975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
Manifest number: 0404
Signing time: Tue 12 May 2026 19:01:56 +0000
Manifest this update: Tue 12 May 2026 19:01:56 +0000
Manifest next update: Wed 13 May 2026 19:01:56 +0000
Files and hashes: 1: 0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl (hash: OmDQnvVZm+3ETcpW5f9mQ2MSlPYaEOXkpZpqF6h7dDU=)
2: W4cImxro0S1Oqpe5aOmc9Zk1to0.roa (hash: 2C5FiGId1eEcbsSAENT53ABjs4YVPjHtZepjzsteNl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:91:37:d8:29:de:1a:40:8d:94:bc:ce:42:23:79:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d276c41a2176254f236d23d391fd56090619670d
Validity
Not Before: May 12 19:01:56 2026 GMT
Not After : May 13 19:01:56 2026 GMT
Subject: CN=ff52cb429a247e1a4cd9b078aae6743f670bd81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d1:9d:a2:00:43:b0:a1:87:37:4c:11:f7:f7:
4f:6c:b0:42:57:8e:da:eb:3f:75:ff:34:d5:ee:cd:
21:46:f4:f7:e0:05:c6:02:c3:b2:f5:66:37:4f:cd:
e0:73:b9:d2:59:14:68:a2:a2:80:d9:fd:a5:f2:24:
1b:62:58:58:3b:78:b5:e6:21:f4:e3:80:b8:da:3f:
7a:d5:7e:f9:42:57:9a:d8:3d:86:f2:d9:50:c8:2e:
08:c5:3c:7e:1a:95:40:8b:2a:dc:b9:64:07:18:e7:
c2:17:f4:3e:c4:80:e7:5e:69:27:81:c6:60:72:41:
3c:57:e2:2c:3f:c8:1d:16:38:57:83:34:48:70:ca:
f3:1c:0b:83:db:ad:be:e7:97:75:dd:f9:94:a2:e9:
1a:d2:ae:2f:2e:18:92:55:7b:df:1e:d5:9c:d9:82:
8d:38:18:dd:1c:ae:68:be:72:36:96:92:99:e7:92:
84:b8:bf:87:e8:bf:36:19:c1:97:5e:b4:7d:1f:7b:
81:24:34:63:99:84:9f:71:42:b0:53:e5:74:00:25:
f5:77:87:12:fb:49:fc:de:76:c1:31:ab:18:89:97:
c0:db:95:d8:8f:32:fb:a7:4e:38:12:bf:c2:18:24:
bd:09:15:f7:15:c2:8e:ac:be:b9:a1:4a:0e:29:39:
1b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:52:CB:42:9A:24:7E:1A:4C:D9:B0:78:AA:E6:74:3F:67:0B:D8:1D
X509v3 Authority Key Identifier:
keyid:D2:76:C4:1A:21:76:25:4F:23:6D:23:D3:91:FD:56:09:06:19:67:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:44:c4:35:a1:a1:cd:26:1f:40:21:4b:6e:72:7a:2a:91:cc:
9a:b4:1e:de:27:2d:91:8a:92:3c:b7:f7:8b:b5:e5:0d:64:54:
42:cb:b7:5f:d0:df:6c:a5:99:98:83:14:50:e7:84:0f:19:20:
0b:2a:81:28:9e:2f:98:fe:f6:18:90:89:4c:8e:e9:29:96:fd:
b2:a1:21:a0:ec:0a:c0:80:8d:c1:82:ea:ca:f5:88:ac:cf:d1:
7c:1c:f7:ae:e4:6c:7b:11:e9:65:7c:09:5d:f6:d9:38:cb:d2:
cf:88:64:22:0e:0d:cc:8b:cf:7e:28:cd:88:fb:b0:d7:66:3c:
32:82:22:c6:5c:a7:b2:cc:d6:f4:a2:07:1a:14:30:d0:f2:09:
cd:c9:d2:8b:64:a6:6f:35:5e:6f:40:25:c9:fb:eb:07:20:da:
31:f0:fd:67:10:99:d2:8e:4f:d4:c0:bf:25:71:66:24:c7:c0:
d3:fc:16:ff:05:12:25:69:9a:24:fc:31:8c:bc:6e:eb:08:8f:
77:3a:ae:cd:d6:78:29:9a:8a:01:4d:72:04:cf:17:2c:00:4a:
65:b5:85:c5:c2:84:e1:bf:ae:66:06:ab:79:c2:27:95:92:07:
b2:ca:9e:55:f7:79:53:8d:14:b4:ca:9c:50:07:49:75:64:25:
cc:2e:8d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:32:43 2026 by rpki-client