Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
File: 0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft (raw, json)
Hash identifier: tW9EsSYhjLGBW/59kwzCVpVSs6i+kcdvbU58xAuQ1ak=
Subject key identifier: 68:77:B9:BB:35:3A:18:D6:8B:1D:E0:16:1C:08:9B:9F:B9:06:F5:08
Authority key identifier: D0:5B:26:23:A3:9D:55:6C:50:B7:04:6D:36:44:7F:B6:21:AF:97:4A
Certificate issuer: /CN=d05b2623a39d556c50b7046d36447fb621af974a
Certificate serial: 019CA945B17D820C8CA3A45FC29F2F666603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
Manifest number: 1582
Signing time: Sun 01 Mar 2026 12:00:42 +0000
Manifest this update: Sun 01 Mar 2026 12:00:42 +0000
Manifest next update: Mon 02 Mar 2026 12:00:42 +0000
Files and hashes: 1: 0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl (hash: jlEwdb4xy5rIbKXuw0GvVROKBU/Niaw85Itlgy2BhAs=)
2: pCWS_26lWVBmz3evvhhCPtQ3724.roa (hash: 169W7Abudr//3hW1olxvzVQxe6wwpkcYjx7dbhDz4D4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:b1:7d:82:0c:8c:a3:a4:5f:c2:9f:2f:66:66:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05b2623a39d556c50b7046d36447fb621af974a
Validity
Not Before: Mar 1 12:00:42 2026 GMT
Not After : Mar 2 12:00:42 2026 GMT
Subject: CN=6877b9bb353a18d68b1de0161c089b9fb906f508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bb:98:9f:e4:14:ae:90:60:12:34:10:1a:51:
0c:00:ff:b2:af:48:cd:f2:8c:4f:3a:5c:a6:23:21:
ab:82:39:d1:4c:8b:7e:4c:95:de:fd:67:ea:9f:c7:
ef:e5:2f:17:d0:3f:1d:9d:e8:b5:44:2d:0f:09:1c:
d2:90:49:9d:ce:37:9c:58:13:67:85:f8:d7:24:6c:
81:bc:0c:84:48:01:f3:e0:36:70:a5:a6:c6:3a:8d:
1e:39:99:84:9a:da:8d:57:37:9d:13:d4:e0:d7:f7:
c9:8d:76:97:fc:96:c7:0c:f8:c1:bc:2f:12:91:e0:
74:8e:13:b5:6f:7e:2a:b3:f8:d2:98:bc:ac:2d:2c:
75:88:b8:0a:f3:7d:22:16:a9:9c:4d:e0:5a:42:45:
2a:85:8d:50:25:0b:2b:b2:9d:aa:3d:1c:b9:0d:5c:
c7:c6:27:d6:d8:0f:00:19:9e:93:4f:23:6a:b3:7e:
4d:59:df:28:52:3b:04:dd:d8:1a:69:17:00:03:84:
fb:86:86:72:d6:d7:7a:dc:11:96:2a:87:a8:44:ab:
ba:ab:7d:59:7d:5a:f2:bb:c3:1a:26:25:b2:b0:97:
1d:23:a6:50:14:5f:7f:f1:70:2f:fe:bf:39:4a:e6:
b1:90:49:fc:5a:9b:f9:b3:81:f2:10:b5:4d:17:ff:
d4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:77:B9:BB:35:3A:18:D6:8B:1D:E0:16:1C:08:9B:9F:B9:06:F5:08
X509v3 Authority Key Identifier:
keyid:D0:5B:26:23:A3:9D:55:6C:50:B7:04:6D:36:44:7F:B6:21:AF:97:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:0f:ca:d3:7b:69:c5:56:85:1a:c4:ee:56:fb:27:91:c8:f5:
f3:e7:f5:1b:c5:6c:46:a1:59:c2:fc:c2:67:49:65:64:2d:79:
b8:fb:4f:48:c5:32:e3:56:23:59:fa:c2:14:11:08:b8:2a:3e:
9e:e8:ae:a3:28:a7:a6:6b:8a:97:3e:4e:8e:be:ca:94:59:e8:
6d:aa:58:71:41:8b:bb:53:55:e4:a9:69:9e:11:c2:09:83:dc:
ad:f0:b4:16:d1:5d:08:1f:1c:6e:b3:31:12:dd:ee:80:61:36:
14:50:72:1f:5b:65:87:bf:5e:83:32:83:2f:1b:0c:c3:60:2d:
ac:57:9a:91:19:2e:19:dd:cf:97:54:44:7b:51:0f:2e:65:b8:
11:50:6d:62:5a:70:0d:eb:6c:9c:03:58:92:da:0f:dd:bc:74:
86:c0:e0:64:80:2a:2f:ed:9e:ef:75:7a:80:31:b1:98:69:28:
cb:ec:7a:79:4e:c6:f9:0f:22:60:7a:3d:95:e1:a4:40:ba:9e:
12:bb:2f:84:06:5e:8b:d1:9d:84:27:f3:c5:36:6e:cc:cb:e4:
45:b7:23:65:19:47:dd:ff:0d:49:1d:bb:dc:ba:09:f5:44:d9:
db:6c:06:29:8a:9a:4d:d0:41:03:4f:91:b4:c4:5c:72:62:a4:
44:69:89:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:07:09 2026 by rpki-client