Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
File: 0vHIhC58-JGyNNOh4OLg73PoQqo.mft (raw, json)
Hash identifier: Qd64vwBdIRSVvFiDLbhb4QvrWEbDLrKFVR9MzkqK4Q0=
Subject key identifier: 7D:9D:7B:CA:21:55:FC:D8:8A:7B:EE:F3:A4:34:F4:B3:DA:1D:7D:AD
Authority key identifier: D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
Certificate issuer: /CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Certificate serial: 019CAC0FE87D599735A192C75A9CB5DADD62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 01:00:49 +0000
Manifest this update: Mon 02 Mar 2026 01:00:49 +0000
Manifest next update: Tue 03 Mar 2026 01:00:49 +0000
Files and hashes: 1: 0vHIhC58-JGyNNOh4OLg73PoQqo.crl (hash: 31RWIgWGGkoBBKYOB215tlFRy4W1HgYOO/8F5HABJBo=)
2: l9fT_tPQilc8kDDpXdmC63EbBTU.roa (hash: e0hhcAS9+zmOEL/7aF5yJ1rOw5m87GlUo2fUEzHI/tc=)
3: zZqdbpX91TjBbrVKBU--OsfsNgs.roa (hash: 5bqwY0fuE7qADoXdmI9CeMVMqqLQteAK+rBOtRg2eMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:e8:7d:59:97:35:a1:92:c7:5a:9c:b5:da:dd:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Validity
Not Before: Mar 2 01:00:49 2026 GMT
Not After : Mar 3 01:00:49 2026 GMT
Subject: CN=7d9d7bca2155fcd88a7beef3a434f4b3da1d7dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d5:21:c6:fb:5c:2a:ef:4e:9e:77:01:ae:81:
95:f8:68:ef:dd:a9:88:4e:97:b2:1a:4e:1a:f6:6f:
f0:10:55:ae:e4:c0:70:2f:35:7e:58:59:8e:ed:cd:
79:17:eb:19:d4:f4:0b:7c:96:04:f4:db:3f:1f:49:
b3:c2:22:eb:6a:92:64:60:2c:40:c4:7b:7b:b1:40:
94:56:65:9a:9b:27:6a:08:9c:0b:7f:47:0f:f8:a9:
2c:bd:21:ea:d0:83:25:d4:92:c7:27:cd:59:57:7f:
8a:2f:d9:2b:04:ad:ff:87:37:e2:88:da:32:d3:f8:
7a:48:9e:6d:01:4a:7c:27:f7:3f:49:13:8a:c1:9b:
1b:56:21:64:7b:0a:b2:bd:5b:8d:03:5d:a9:06:af:
c6:cd:f4:bf:1a:73:82:56:eb:cc:ab:77:29:b3:14:
c7:e7:b3:67:b8:6e:f4:77:09:5d:94:9e:a0:49:8e:
2c:2b:73:29:7e:6c:29:7a:24:0d:d6:42:bf:7b:49:
69:03:71:3b:06:57:ae:c5:30:b0:07:a4:c6:3e:bd:
8f:70:62:d0:17:5f:64:d1:38:70:96:e1:e7:6e:a1:
13:f1:da:74:8e:f4:97:25:79:4f:37:79:0a:29:a9:
fc:d2:a0:3c:69:9f:5d:62:f8:ec:bd:5f:65:ad:00:
54:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9D:7B:CA:21:55:FC:D8:8A:7B:EE:F3:A4:34:F4:B3:DA:1D:7D:AD
X509v3 Authority Key Identifier:
keyid:D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:37:e7:d1:dc:29:5d:a2:46:04:c9:96:1f:fc:8f:8c:5d:8c:
f8:46:c7:5f:cd:2b:d7:52:8b:d6:6e:c5:89:e3:02:b3:1b:e2:
96:7d:5c:cd:04:85:d2:f4:47:31:79:23:b3:7b:40:3c:56:9a:
32:db:e0:b8:9c:14:69:25:80:0b:f4:cf:87:d2:15:de:b6:f9:
60:b7:65:2a:c4:83:f3:d0:45:92:55:e6:c1:53:a8:43:b0:e9:
0e:fc:b4:06:b5:ca:cf:29:90:6d:50:b1:de:e4:ae:99:ce:61:
07:b0:af:28:ee:d4:38:b7:a6:1b:0c:7d:99:9d:33:bc:38:44:
c0:c6:5e:bc:37:19:be:73:ad:0f:9a:ad:a8:44:e7:8a:fa:d2:
62:11:37:ed:40:4e:d1:b4:d0:86:f2:8b:81:95:d7:d0:54:b9:
99:3d:ad:ea:51:04:ff:94:84:37:28:83:f3:22:00:6a:08:c2:
17:bc:af:f7:d4:1b:95:0b:18:a3:31:18:48:0e:d9:bf:49:33:
f1:aa:d8:bc:65:99:41:da:6f:d5:85:59:28:6f:de:a6:75:74:
28:ad:60:c0:4b:34:3a:e4:6d:32:c9:03:17:6c:77:83:78:18:
74:d6:75:31:ff:2e:85:57:7b:d7:47:f8:4c:cd:dd:a2:49:98:
36:8e:e4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:55:08 2026 by rpki-client