Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
File: 0cSRMJSiEmjHOmdlOjc41z5cWac.mft (raw, json)
Hash identifier: MS7eStWVNozwD2DN22jlpSZycJsAz/XS9bmmUArYRMY=
Subject key identifier: 5D:70:00:1F:01:A2:2E:F2:A4:33:48:CF:2F:60:14:B3:BE:90:07:84
Authority key identifier: D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
Certificate issuer: /CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Certificate serial: 019CAD90C9EE366D06A21A4E828ADEBA53AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
Manifest number: 1721
Signing time: Mon 02 Mar 2026 08:01:13 +0000
Manifest this update: Mon 02 Mar 2026 08:01:13 +0000
Manifest next update: Tue 03 Mar 2026 08:01:13 +0000
Files and hashes: 1: 0cSRMJSiEmjHOmdlOjc41z5cWac.crl (hash: ce0zEN5Y0rUzP2DPsTT9ElXpHlY5VR5Exi5Hbtx7D5U=)
2: ZjZpopADEszQ-pk8iJcM4buK_Vk.roa (hash: kT/wMhqwMSPuX9SvpMfdYohIGO0Je1OedjWoKvA8CNs=)
3: jyVGCyGgEBWJDHp2JEn0ylLOQpw.roa (hash: Z172Tcqn6RnvzWrlqa5fx4IBPek1nFPjcCRMXGw3qXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:c9:ee:36:6d:06:a2:1a:4e:82:8a:de:ba:53:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Validity
Not Before: Mar 2 08:01:13 2026 GMT
Not After : Mar 3 08:01:13 2026 GMT
Subject: CN=5d70001f01a22ef2a43348cf2f6014b3be900784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f2:a9:2a:96:0b:9e:41:b1:06:db:8f:db:ae:
42:21:46:11:b6:d8:f9:b4:40:f8:44:e5:4d:f0:8c:
17:15:30:2b:57:a7:ff:b0:78:fc:5a:c4:6a:34:3e:
b9:c9:14:16:27:c8:8e:7a:b9:5e:ec:0d:cf:f1:5e:
40:e5:33:e0:9a:cd:a6:b5:b8:2d:a4:94:9c:4a:9b:
15:f6:44:c6:31:84:8e:bd:f8:f5:fd:78:c1:02:b2:
ea:25:c7:fe:fb:cb:bc:f1:18:3f:28:cd:38:dc:20:
ad:74:ad:2a:19:18:e6:76:61:9c:b5:ee:5c:d9:77:
57:15:29:4c:57:15:03:8a:92:3f:f7:c1:8a:2e:e9:
5d:3e:9f:ce:c6:43:3b:af:e3:75:a7:a9:af:23:1a:
80:e3:8c:d3:9c:dc:18:4e:18:41:95:db:67:a2:5f:
fe:82:8d:39:d3:57:e1:77:e6:40:a9:2b:83:12:01:
14:34:59:fb:15:34:b2:81:25:19:ae:83:1d:99:b1:
b7:de:44:4e:32:69:d6:7e:64:66:d0:01:11:30:28:
0a:c4:48:7c:49:2a:f3:b8:6d:d1:66:c2:3f:e9:9e:
dc:85:81:ad:49:38:b3:35:e8:97:12:ac:b8:55:0f:
00:32:83:0d:55:2f:9d:55:91:69:10:fa:18:cf:fa:
37:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:70:00:1F:01:A2:2E:F2:A4:33:48:CF:2F:60:14:B3:BE:90:07:84
X509v3 Authority Key Identifier:
keyid:D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:dd:7a:9e:59:9e:c5:93:2a:08:50:db:f2:d4:3f:6e:b0:d4:
67:0e:22:a1:19:32:35:07:76:0e:dc:2b:d0:69:b1:4f:c9:2d:
4a:ee:a0:27:c7:7b:ce:69:ce:74:ae:da:f6:cb:bd:23:d5:e7:
4b:7f:a1:7a:7b:d9:86:41:4b:49:2b:b0:b3:18:55:2c:f7:f3:
16:46:fe:c1:74:6e:5f:08:13:64:4d:94:89:15:10:51:ec:f2:
a1:da:fb:05:31:3a:2d:4e:eb:ab:52:a5:a0:6d:c7:44:74:29:
08:e0:6f:65:fa:e1:5c:9e:92:b8:36:54:5e:2a:f7:19:42:d8:
05:c8:4c:83:f8:e7:b4:69:00:8d:46:4d:7d:cb:98:4c:f0:f5:
7b:41:a3:e7:af:e3:ff:0b:b1:8d:28:bc:77:31:ae:9a:f3:3e:
03:cb:58:a9:d7:c9:1d:09:a3:f9:86:3e:e8:2a:a0:31:93:2b:
05:c6:d0:0b:ca:76:ed:fa:67:50:4d:44:04:c4:aa:d0:ad:fa:
93:ed:45:4e:97:e7:d8:10:96:7f:15:7e:6b:b0:93:b1:92:48:
27:05:13:3b:ed:b9:57:39:7c:a4:ae:01:cd:cb:2a:51:ed:b3:
12:45:6b:f1:41:8f:e5:ab:42:42:12:30:ec:39:76:6d:0f:11:
6d:d0:5a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:10 2026 by rpki-client