Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/41dd00-b57b-4638-a08b-6853c41ca03e/1/0tS9caQ9jN1GKmHu4NlHAMfmQl8.mft
File: 0tS9caQ9jN1GKmHu4NlHAMfmQl8.mft (raw, json)
Hash identifier: +7iHeb6JHzJfUtb9/48f2R9t3qtXcetL7Gf6XnTS9UI=
Subject key identifier: F7:98:2E:5D:40:FE:45:8C:4E:00:12:F0:64:40:00:A7:D8:6F:0E:D1
Authority key identifier: D2:D4:BD:71:A4:3D:8C:DD:46:2A:61:EE:E0:D9:47:00:C7:E6:42:5F
Certificate issuer: /CN=d2d4bd71a43d8cdd462a61eee0d94700c7e6425f
Certificate serial: 019E1BD9215A26D1246AC2D7933CA95F16A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0tS9caQ9jN1GKmHu4NlHAMfmQl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/41dd00-b57b-4638-a08b-6853c41ca03e/1/0tS9caQ9jN1GKmHu4NlHAMfmQl8.mft
Manifest number: 0280
Signing time: Tue 12 May 2026 11:01:15 +0000
Manifest this update: Tue 12 May 2026 11:01:15 +0000
Manifest next update: Wed 13 May 2026 11:01:15 +0000
Files and hashes: 1: 0tS9caQ9jN1GKmHu4NlHAMfmQl8.crl (hash: K+KsDNVLFUB9/7a8YPVMjF5hmvGbPn3x6tVfCB5GSZw=)
2: 7y2-JyJSBLPzJ1F-GfRB9L2A1lc.roa (hash: Je64415GY9BUK++a0MLtgLPvf9KrlsWdU946uIXLKos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/41dd00-b57b-4638-a08b-6853c41ca03e/1/0tS9caQ9jN1GKmHu4NlHAMfmQl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/41dd00-b57b-4638-a08b-6853c41ca03e/1/0tS9caQ9jN1GKmHu4NlHAMfmQl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0tS9caQ9jN1GKmHu4NlHAMfmQl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d9:21:5a:26:d1:24:6a:c2:d7:93:3c:a9:5f:16:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2d4bd71a43d8cdd462a61eee0d94700c7e6425f
Validity
Not Before: May 12 11:01:15 2026 GMT
Not After : May 13 11:01:15 2026 GMT
Subject: CN=f7982e5d40fe458c4e0012f0644000a7d86f0ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5f:7a:f0:9f:ae:fb:39:ec:5a:37:ea:e4:18:
5a:b1:ea:98:ea:cd:f8:6a:85:b5:8f:6c:da:ba:bb:
f3:8a:12:36:d7:10:6a:b6:0a:2e:d8:87:1c:96:c2:
3a:dc:c0:be:45:e5:a1:c2:f2:2e:e0:c7:65:8a:57:
b1:58:c5:e4:75:26:ce:70:e8:8a:df:93:7f:7a:6f:
1a:a7:e7:e3:7c:2a:ed:e3:79:39:3d:d0:6c:aa:72:
1f:79:9b:76:b6:e3:49:5e:ec:94:f5:75:58:c1:a6:
a7:b7:c2:e8:16:a3:82:ee:2b:0e:6e:02:e0:6d:be:
f2:30:d4:6a:54:05:43:9d:a0:91:f5:67:7c:51:bb:
83:62:fc:7a:47:c5:dc:63:38:bb:bc:ae:a6:fe:f5:
5c:8c:48:d8:d6:77:30:d8:1d:31:5f:50:b2:f0:11:
3b:2c:63:2d:81:52:36:a0:ea:06:56:04:b4:5a:4c:
64:cb:ae:2b:5b:08:bf:4f:b2:a6:35:5a:22:cc:f8:
1c:36:98:96:c7:72:18:a8:af:66:a4:d4:57:3a:81:
97:0a:8b:f1:52:3f:1a:b9:04:e4:3b:36:72:2c:0a:
77:7a:08:01:d1:8c:34:75:61:7e:fe:17:b3:1d:1c:
cd:a2:82:c8:2f:76:4d:d4:ba:18:7a:77:98:22:db:
57:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:98:2E:5D:40:FE:45:8C:4E:00:12:F0:64:40:00:A7:D8:6F:0E:D1
X509v3 Authority Key Identifier:
keyid:D2:D4:BD:71:A4:3D:8C:DD:46:2A:61:EE:E0:D9:47:00:C7:E6:42:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tS9caQ9jN1GKmHu4NlHAMfmQl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/41dd00-b57b-4638-a08b-6853c41ca03e/1/0tS9caQ9jN1GKmHu4NlHAMfmQl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/41dd00-b57b-4638-a08b-6853c41ca03e/1/0tS9caQ9jN1GKmHu4NlHAMfmQl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:17:e5:ce:bd:7e:09:95:80:35:33:65:68:d8:db:75:27:a9:
00:01:18:03:06:70:8f:db:6a:93:92:e7:3e:d6:fe:53:76:fd:
84:2d:5f:0e:71:c6:30:52:68:c0:7b:f1:45:53:4e:2d:b9:be:
e9:d1:34:81:51:cb:fe:8c:22:60:f2:5c:32:d6:99:89:b1:37:
30:6d:9e:da:92:8f:02:0a:54:68:0a:20:bc:b7:44:d9:a9:1a:
1e:ae:6e:16:72:79:5b:47:f9:27:56:ff:d3:e5:cd:46:da:a9:
18:9c:1d:66:71:1a:bf:22:0b:4c:20:e1:5c:77:d7:e9:5c:c3:
28:59:29:c7:b6:c2:49:a8:43:7c:d2:c4:49:a2:43:dd:79:b2:
36:9e:ef:0e:9b:dc:ac:92:c1:06:a5:93:65:16:51:ee:e6:bb:
03:06:e7:f5:aa:ac:cc:70:22:da:92:e8:ce:77:f9:28:a4:b4:
db:67:86:a9:64:b5:24:19:89:51:08:10:e5:41:53:6d:6d:91:
45:22:90:ba:26:6b:88:67:16:4f:4c:c1:a7:4e:21:5a:46:4e:
88:48:48:9c:c6:44:be:6f:44:a7:2b:60:9a:16:87:cf:d5:c6:
d4:d3:e8:3c:13:5a:02:07:8b:d4:8c:bc:56:d2:64:f2:b1:6e:
48:43:c4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:14:57 2026 by rpki-client