Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
File: 0gsI5gdmjgYFAITuN5KKHAsDVJI.mft (raw, json)
Hash identifier: AYCq2/ZiP1gVbSjPLWKpCyBf9ETbZy3AZm1+63dUczU=
Subject key identifier: 84:F5:26:DD:36:1C:8B:C3:75:A2:F2:22:4B:B6:F4:18:1B:27:85:CE
Authority key identifier: D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
Certificate issuer: /CN=d20b08e607668e06050084ee37928a1c0b035492
Certificate serial: 019CAAC71FA5ED6951C6F1E941B2E18766FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
Manifest number: 0575
Signing time: Sun 01 Mar 2026 19:01:42 +0000
Manifest this update: Sun 01 Mar 2026 19:01:42 +0000
Manifest next update: Mon 02 Mar 2026 19:01:42 +0000
Files and hashes: 1: 0gsI5gdmjgYFAITuN5KKHAsDVJI.crl (hash: y+YMEUchXvtmzKXlr0GMQYqHSh3w48445TG+/6BmJE4=)
2: Gm-t-lh2E0gK3CSrIU-gJkije_Q.roa (hash: Ono4+T4YpgzQm0xFxMzJXZM1mWa8sfDRC5aPTIXlCxg=)
3: HOPT3iuIJW2Ca5RKaQZ_7H8DEUg.roa (hash: Z7lWxJ3V5i6LgJFHNccxxl1xQSA36VYmA9LTVT4CQFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:1f:a5:ed:69:51:c6:f1:e9:41:b2:e1:87:66:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d20b08e607668e06050084ee37928a1c0b035492
Validity
Not Before: Mar 1 19:01:42 2026 GMT
Not After : Mar 2 19:01:42 2026 GMT
Subject: CN=84f526dd361c8bc375a2f2224bb6f4181b2785ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f9:98:bf:e4:3c:f5:4e:10:ca:68:d9:85:66:
75:e9:9e:76:17:de:97:90:3e:ad:38:16:fc:cb:2c:
cf:c9:b6:ff:fe:f0:ba:b5:82:d6:4b:aa:eb:58:70:
55:90:62:06:9a:2f:e4:7f:6d:8b:79:40:27:5c:96:
9f:47:f4:89:4b:fe:1e:78:46:7a:e9:3f:69:aa:ee:
49:a1:b8:19:5e:a8:72:e2:d8:39:ce:76:ba:77:4a:
4b:16:25:e7:13:f2:df:50:72:6b:bb:97:a7:53:28:
80:17:c4:c1:68:ef:13:ac:dc:97:f9:99:90:ff:cc:
d0:63:74:a5:71:cc:c2:97:a1:27:dc:44:e0:00:93:
1d:ce:24:d0:d5:8a:3a:7f:34:66:fc:e4:6d:4d:20:
ef:72:1f:c1:a7:da:c9:46:a6:25:47:66:28:aa:9d:
9a:40:34:f2:25:6a:56:fa:0f:25:99:45:ea:c0:d6:
ad:b1:d5:c5:09:e5:de:a0:63:06:c8:30:56:8f:2f:
a6:89:05:4e:e7:4e:00:52:6a:23:3d:c5:ed:5b:96:
8a:85:2d:71:b0:93:85:5b:25:1d:f7:d9:74:45:08:
1c:50:82:88:d5:f9:4a:a3:5b:f6:e1:07:ca:46:a7:
89:ec:7d:a6:dd:02:ee:e4:53:62:8b:b1:dd:a9:14:
c6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F5:26:DD:36:1C:8B:C3:75:A2:F2:22:4B:B6:F4:18:1B:27:85:CE
X509v3 Authority Key Identifier:
keyid:D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:0a:e1:e4:e4:e4:a9:81:48:ad:2f:f1:9c:1d:0e:8a:8f:6e:
7d:66:cf:8e:ce:34:9c:5d:89:2a:66:52:93:f5:23:e5:d1:1e:
8a:a8:81:cd:89:e3:70:e5:11:9d:ca:0d:14:41:a7:87:bd:a8:
3b:3f:85:50:06:ed:b0:0e:f4:7a:a0:d6:30:38:a0:53:49:5a:
98:98:f3:ec:81:89:50:cb:32:d1:da:e6:bf:83:2d:0c:c3:26:
13:5c:6f:21:26:ff:e2:8e:9a:d5:d9:4d:f0:fe:98:3c:4c:ce:
19:ce:9d:a1:74:9a:91:08:89:78:58:e8:4a:a6:b1:b5:df:22:
f8:4f:fb:b2:34:24:70:82:b4:be:f6:4e:16:e7:58:0b:07:61:
84:73:c5:65:f3:7f:36:b3:3c:3a:2d:3a:4b:84:38:d0:7f:bb:
11:25:1d:2c:96:ac:bf:2f:d3:09:a4:31:2b:10:74:37:f9:bd:
9d:7c:74:a2:0a:62:b6:73:48:94:16:59:4d:15:58:05:cb:a9:
66:a4:89:a6:59:13:47:08:d9:a7:5a:47:55:5a:f7:ac:d9:eb:
c0:9e:72:83:2c:41:6e:f5:0d:1c:28:b7:64:24:c8:79:a3:75:
eb:b5:d3:4e:6e:6a:49:81:be:90:22:95:3a:cb:ae:98:c7:7f:
5e:93:06:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxx+l7WlRxvHpQbLhh2b/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMGIwOGU2MDc2NjhlMDYwNTAwODRlZTM3OTI4YTFjMGIw
MzU0OTIwHhcNMjYwMzAxMTkwMTQyWhcNMjYwMzAyMTkwMTQyWjAzMTEwLwYDVQQD
Eyg4NGY1MjZkZDM2MWM4YmMzNzVhMmYyMjI0YmI2ZjQxODFiMjc4NWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PmYv+Q89U4QymjZhWZ16Z52F96X
kD6tOBb8yyzPybb//vC6tYLWS6rrWHBVkGIGmi/kf22LeUAnXJafR/SJS/4eeEZ6
6T9pqu5JobgZXqhy4tg5zna6d0pLFiXnE/LfUHJru5enUyiAF8TBaO8TrNyX+ZmQ
/8zQY3SlcczCl6En3ETgAJMdziTQ1Yo6fzRm/ORtTSDvch/Bp9rJRqYlR2Yoqp2a
QDTyJWpW+g8lmUXqwNatsdXFCeXeoGMGyDBWjy+miQVO504AUmojPcXtW5aKhS1x
sJOFWyUd99l0RQgcUIKI1flKo1v24QfKRqeJ7H2m3QLu5FNii7HdqRTGvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIT1Jt02HIvDdaLyIku29BgbJ4XOMB8GA1UdIwQY
MBaAFNILCOYHZo4GBQCE7jeSihwLA1SSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGdzSTVnZG1qZ1lGQUlUdU41S0tIQXNEVkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yMTdhYWYtM2IzYi00ZDljLWEyY2Et
MDYyYzg4ODJiYTcxLzEvMGdzSTVnZG1qZ1lGQUlUdU41S0tIQXNEVkpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8yMTdhYWYtM2IzYi00ZDljLWEyY2EtMDYyYzg4ODJiYTcx
LzEvMGdzSTVnZG1qZ1lGQUlUdU41S0tIQXNEVkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdwrh5OTk
qYFIrS/xnB0Oio9ufWbPjs40nF2JKmZSk/Uj5dEeiqiBzYnjcOURncoNFEGnh72o
Oz+FUAbtsA70eqDWMDigU0lamJjz7IGJUMsy0drmv4MtDMMmE1xvISb/4o6a1dlN
8P6YPEzOGc6doXSakQiJeFjoSqaxtd8i+E/7sjQkcIK0vvZOFudYCwdhhHPFZfN/
NrM8Oi06S4Q40H+7ESUdLJasvy/TCaQxKxB0N/m9nXx0ogpitnNIlBZZTRVYBcup
ZqSJplkTRwjZp1pHVVr3rNnrwJ5ygyxBbvUNHCi3ZCTIeaN167XTTm5qSYG+kCKV
OsuumMd/XpMG9A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:14:38 2026 by rpki-client