
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft
File: 0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft (raw, json)
Hash identifier: Z/vnwwEN3369ypXrUICifxQoz++e7ZN6+r+uoY4oHSE=
Subject key identifier: C7:B7:B2:9A:B6:51:21:0B:FC:85:40:90:81:FB:1D:9E:64:93:2D:55
Authority key identifier: D0:E6:5B:EC:5C:76:5C:85:0E:E8:FF:97:CC:41:B3:80:31:D1:D8:3A
Certificate issuer: /CN=d0e65bec5c765c850ee8ff97cc41b38031d1d83a
Certificate serial: 019CABD90064963DEFDF33FDB5328E40F517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 00:00:51 +0000
Manifest this update: Mon 02 Mar 2026 00:00:51 +0000
Manifest next update: Tue 03 Mar 2026 00:00:51 +0000
Files and hashes: 1: 0OZb7Fx2XIUO6P-XzEGzgDHR2Do.crl (hash: 7RU1JYY3aZaHKkK7rHhQCwpFtLGROwGOZnPsIFgTwV4=)
2: UFUNHcp59zFp-s7epnaBCk3fSDI.roa (hash: 5JNnpeUYOHWtCY7aisWTKc4iY+kJ/fdA3iBaqT6fPPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:00:64:96:3d:ef:df:33:fd:b5:32:8e:40:f5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e65bec5c765c850ee8ff97cc41b38031d1d83a
Validity
Not Before: Mar 2 00:00:51 2026 GMT
Not After : Mar 3 00:00:51 2026 GMT
Subject: CN=c7b7b29ab651210bfc85409081fb1d9e64932d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d5:e3:15:4a:4e:88:4f:16:52:01:56:7f:7b:
8c:c8:76:2d:17:3d:f8:12:05:8a:2e:22:26:3e:40:
e3:25:b8:30:79:99:ac:74:1a:be:4a:dd:17:f7:2a:
53:03:fb:85:bd:06:c3:56:e1:67:45:cd:b9:42:e1:
ec:e1:f5:8b:5e:da:5b:f1:cb:8d:51:b5:79:23:72:
fc:2a:38:68:90:fe:f0:bc:70:2d:ad:85:0d:d4:d8:
e4:03:e6:9d:4d:67:96:6e:66:ac:0e:d8:31:8a:c6:
93:b6:77:6c:da:f3:17:00:80:dd:d9:85:ef:e7:d1:
a9:c4:b9:20:a1:58:d1:65:02:1d:09:97:48:93:84:
b2:5c:be:3c:d9:b3:e2:97:1b:cb:00:9e:fb:31:80:
ca:d4:d0:3b:2f:6a:a2:e8:7a:aa:21:39:f6:84:b9:
4b:16:87:d1:cf:de:4e:b1:82:2a:42:2c:47:af:97:
e5:90:32:06:80:cc:7b:a0:a4:8c:16:c8:76:50:2b:
b4:88:14:4d:c5:9d:2f:4b:51:bc:e1:03:d1:68:46:
82:19:58:92:f8:63:1c:12:43:c4:6c:b3:1f:2e:ae:
aa:54:a6:57:1b:07:4c:b7:a1:4f:44:31:c6:77:79:
2b:9b:89:f3:3a:92:25:f1:3e:5d:ca:e2:39:df:39:
b0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B7:B2:9A:B6:51:21:0B:FC:85:40:90:81:FB:1D:9E:64:93:2D:55
X509v3 Authority Key Identifier:
keyid:D0:E6:5B:EC:5C:76:5C:85:0E:E8:FF:97:CC:41:B3:80:31:D1:D8:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:6f:da:c2:42:62:ff:a0:e9:29:d2:c8:fd:fd:35:5d:50:84:
f4:0f:67:d4:dd:22:36:af:74:aa:a4:b5:99:06:bc:4b:3b:7f:
0b:45:4e:33:88:08:08:e4:18:54:12:06:3e:37:86:82:7a:6f:
e3:5c:4b:f2:52:f3:90:17:6c:ed:2b:88:58:1f:ab:ac:b7:2b:
e3:c1:a3:f3:fd:b2:91:f3:e9:80:a2:58:78:96:32:8c:c0:d9:
b7:d9:0b:88:2e:03:ac:90:fe:82:2d:e4:a6:dd:3b:44:a2:90:
4b:2d:7f:39:b3:99:11:f6:a8:37:f2:8a:a6:11:5e:db:97:fc:
69:64:65:f8:68:fc:c9:16:08:bb:db:58:f5:74:1c:40:1b:6d:
c2:ea:8e:9e:96:a2:e5:dc:16:da:60:b9:42:03:06:54:58:49:
ee:11:59:1f:2d:7d:6f:c6:d2:55:1b:b0:0f:7f:05:65:78:d5:
fb:5c:00:55:b5:64:e4:d7:a2:ae:f7:60:df:ee:35:b1:ba:e8:
5b:59:82:f3:7c:57:9c:db:93:5b:db:44:e0:ed:b3:5f:24:6e:
46:96:ac:0d:0c:44:82:8e:60:52:84:72:c3:eb:ff:b1:9f:03:
8e:dc:5c:cb:8a:ac:bf:ec:9c:9e:f7:dd:f3:14:37:e1:06:a7:
60:00:5d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:21:56 2026 by rpki-client