Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
File: 0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft (raw, json)
Hash identifier: IQnQoKWJYh5vIf3DuOkhZypOmYRRGIC5HTVzaLajIRA=
Subject key identifier: 6A:70:F1:20:D9:B0:31:C0:D4:5B:6D:F6:56:9C:6F:3D:AD:DA:E3:3E
Authority key identifier: D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06
Certificate issuer: /CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06
Certificate serial: 019CADC761633F22260C1D257B7DC1CABF56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 09:00:50 +0000
Manifest this update: Mon 02 Mar 2026 09:00:50 +0000
Manifest next update: Tue 03 Mar 2026 09:00:50 +0000
Files and hashes: 1: 0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl (hash: bWM4E5FoaxT80CEbFLu3r9riYEAu201vPcXm/lf0IpA=)
2: lNZ8b2GqipxFmFvx0Lw_q8EwfSo.roa (hash: qDLpSNqlibtH6zRBXzlD7tUyev4dQUA/1eIb4IG63oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:61:63:3f:22:26:0c:1d:25:7b:7d:c1:ca:bf:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06
Validity
Not Before: Mar 2 09:00:50 2026 GMT
Not After : Mar 3 09:00:50 2026 GMT
Subject: CN=6a70f120d9b031c0d45b6df6569c6f3daddae33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c3:ac:7b:95:70:7f:57:18:57:54:bf:c2:4a:
ed:01:f2:c1:a0:62:ba:66:38:19:de:76:14:07:e7:
69:9e:f2:16:c8:65:69:02:d0:47:6a:88:97:39:d6:
ea:e7:91:3e:7f:0a:38:ed:52:33:2f:65:41:e4:b0:
6b:37:d2:b3:6f:5b:77:d3:f6:58:49:19:bd:f5:38:
44:55:9e:e8:7f:42:d4:b4:be:ee:5a:23:34:a5:2f:
1b:bd:00:83:e9:0c:1b:81:ed:37:c9:55:8b:e6:c9:
11:ef:89:7e:f8:b3:66:9f:50:57:df:c6:4e:c2:80:
07:c1:85:5c:05:e7:3b:eb:2b:f5:e4:ff:89:02:06:
09:51:32:d0:51:8b:fe:47:c5:e0:33:a8:18:80:e8:
b8:a5:2a:6d:cf:c5:8e:40:c4:3e:69:21:2a:67:71:
61:28:aa:7d:63:1d:65:26:27:21:a8:2d:a8:62:b1:
b2:de:83:9c:b3:55:d1:13:1f:78:07:7f:db:fc:90:
ea:ab:04:75:34:5c:04:05:c3:c0:8f:f8:aa:f9:4a:
2b:df:04:f1:26:1b:95:64:22:94:09:2c:5c:e9:f5:
29:6e:60:04:4d:ba:96:e6:1d:1a:8f:dc:ba:07:d6:
c7:1b:d9:d4:78:36:2e:d2:e6:74:d0:9e:d4:ef:0b:
07:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:70:F1:20:D9:B0:31:C0:D4:5B:6D:F6:56:9C:6F:3D:AD:DA:E3:3E
X509v3 Authority Key Identifier:
keyid:D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:1c:c3:ab:a4:68:a6:86:e0:51:49:e8:d3:2b:6b:08:2b:f5:
e5:9c:b6:dc:c9:c4:7d:6a:ff:ee:f6:01:91:24:8a:1e:83:52:
8a:8f:02:a9:47:7a:9f:de:1f:c0:f6:92:4f:95:b0:dd:8d:d5:
47:fe:0b:4d:7a:cb:ca:31:3a:15:ff:e9:a8:e2:3c:26:1a:18:
ab:39:12:ae:c1:e9:4d:86:3a:0d:0a:8f:69:43:67:f6:08:c2:
51:39:7d:02:4d:8d:6b:90:d8:63:f2:ea:7e:f9:ac:c8:e8:1e:
87:50:91:5d:c2:88:c2:1b:1a:c7:66:4a:87:93:fc:56:7e:9a:
87:77:a2:89:6b:06:ae:6e:33:df:0b:d0:cf:50:4c:92:c3:bb:
3e:7a:3b:9d:bc:25:d5:b9:13:ea:a0:6b:ef:6b:b1:9b:84:e3:
80:05:0f:dd:f1:cc:1a:87:a7:05:fc:d9:1e:da:fa:a6:a5:0c:
d6:2c:82:0a:c2:54:9c:8f:a5:ae:6e:02:6d:03:18:50:c2:56:
60:1a:de:f7:75:07:4c:9d:6e:40:6e:fc:a6:34:16:94:7b:01:
f3:d1:b1:1f:01:58:02:94:6f:8d:5f:d3:ce:2f:cb:78:d6:b4:
37:9d:47:aa:4d:eb:88:a0:d3:90:eb:f0:c8:af:3b:09:7d:a6:
5f:b3:68:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:07:27 2026 by rpki-client