Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
File: 0u0bbMpTCR9vkNGllQzrbVOwOq0.mft (raw, json)
Hash identifier: aB6hcoePcqRSUXdOPCDoZ/GP4s52alr3xBoj1hBaLwA=
Subject key identifier: CB:05:F6:26:37:0E:00:01:21:56:86:BB:42:91:76:07:20:6A:5D:77
Authority key identifier: D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD
Certificate issuer: /CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
Certificate serial: 019CAB6B815DFC63B56693D9092CC92EEA90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
Manifest number: 0C52
Signing time: Sun 01 Mar 2026 22:01:15 +0000
Manifest this update: Sun 01 Mar 2026 22:01:15 +0000
Manifest next update: Mon 02 Mar 2026 22:01:15 +0000
Files and hashes: 1: 0u0bbMpTCR9vkNGllQzrbVOwOq0.crl (hash: aRvI2wzyoJLPCed/lkMPJ8MfL8OEzIo9PNtF0MkZYok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:81:5d:fc:63:b5:66:93:d9:09:2c:c9:2e:ea:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
Validity
Not Before: Mar 1 22:01:15 2026 GMT
Not After : Mar 2 22:01:15 2026 GMT
Subject: CN=cb05f626370e0001215686bb42917607206a5d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ee:92:08:16:05:f6:53:a4:11:bf:9a:0d:c0:
13:4e:fc:d5:0e:bb:6e:33:a8:f4:b6:98:0d:5e:56:
2e:b9:ce:0e:35:e2:b1:ec:12:31:5d:f6:9c:ea:8d:
34:29:ec:9b:4f:68:f4:7e:58:1a:58:ab:a6:66:11:
f4:6a:07:3a:9b:5f:72:58:8f:4d:20:27:7b:84:ef:
e1:3c:2f:4f:f6:b5:51:e5:23:f3:b5:52:4a:14:74:
e5:7e:7d:81:ea:7f:4c:9a:40:30:f9:31:70:bd:fe:
10:41:28:1d:5e:4b:95:49:ef:4f:3e:7e:6a:cd:36:
5a:6e:a1:56:74:2f:2a:f0:0a:56:6b:46:76:6e:ea:
5f:90:da:8b:03:eb:a9:ce:1f:1b:47:67:e0:2c:fe:
26:9b:a5:9a:cf:ee:e5:b8:6d:51:c3:5c:59:d5:bd:
7f:a2:a3:d2:a5:3f:bc:1d:b5:cd:48:4d:65:2e:59:
ab:41:9b:10:80:69:8c:5d:09:1b:59:11:76:ba:44:
8b:c1:b0:d7:48:06:a0:fa:bf:bc:09:c1:c2:0e:fd:
4d:4d:92:d0:f4:1f:29:bd:e9:45:40:a9:4c:20:18:
97:d9:d7:7c:a9:94:8a:bc:28:39:43:e3:31:ab:98:
11:80:83:7e:6b:60:1c:a4:93:94:db:37:3e:e3:48:
88:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:05:F6:26:37:0E:00:01:21:56:86:BB:42:91:76:07:20:6A:5D:77
X509v3 Authority Key Identifier:
keyid:D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f1:3a:c0:16:c0:a2:2e:ad:a2:d5:bd:bc:64:05:34:f2:a7:
13:f8:bc:ad:74:60:7a:46:27:98:ec:78:fb:5c:e0:0d:d3:3d:
5d:a8:bf:b8:5f:cd:ad:e8:ab:a7:f6:99:4e:a0:f8:1b:b8:66:
93:9e:32:ca:cc:70:81:3e:94:65:6c:d2:48:6f:f7:19:d7:c5:
84:45:0f:3e:36:22:9e:a5:d9:cd:2f:03:97:51:89:ff:03:8d:
4e:02:41:9a:c7:05:0a:5b:a6:58:2e:0e:8e:3c:dc:50:c2:fe:
9f:aa:2e:35:ee:a4:5f:48:ee:23:9a:a1:4e:d8:0b:42:49:0b:
86:03:16:44:00:7a:1f:df:16:82:3b:a9:09:e5:c5:3e:cf:62:
dc:79:74:bf:38:e3:29:63:ce:cd:d5:aa:3b:e5:83:55:8e:8a:
8b:25:54:f6:19:d6:23:f1:71:75:9b:fd:a5:0d:29:91:ba:90:
11:ae:70:cf:84:a5:5f:07:9d:ac:18:da:e9:2d:30:3c:87:ea:
40:d3:ae:6c:96:7d:f8:e9:81:5f:d6:04:a5:4e:a3:79:79:b8:
67:09:eb:dc:ec:ad:b7:11:81:7f:2e:91:ba:7e:44:20:07:fb:
ba:cc:db:c7:1e:67:35:67:7f:40:96:b4:5a:99:39:7e:9d:f6:
3f:5c:a8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:16:07 2026 by rpki-client