Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft
File: 0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft (raw, json)
Hash identifier: SxQy0ORGQgmyG/ZupUYK/cQGuJAkxsll/g7aE7p7fcI=
Subject key identifier: 69:06:B4:F6:5E:63:5F:CF:18:18:06:1A:DD:32:86:0D:9A:82:20:DF
Authority key identifier: D2:B3:6A:D2:8E:52:1E:DA:B4:B4:DE:A3:49:A2:77:72:D4:B2:A7:BE
Certificate issuer: /CN=d2b36ad28e521edab4b4dea349a27772d4b2a7be
Certificate serial: 019CADC849B9A12B7FA91E4EBCEB2FF45753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rNq0o5SHtq0tN6jSaJ3ctSyp74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft
Manifest number: 158C
Signing time: Mon 02 Mar 2026 09:01:50 +0000
Manifest this update: Mon 02 Mar 2026 09:01:50 +0000
Manifest next update: Tue 03 Mar 2026 09:01:50 +0000
Files and hashes: 1: 0rNq0o5SHtq0tN6jSaJ3ctSyp74.crl (hash: EKS+iGGVLjbrZiKPq4YtjKw1Y9VK8cyfy+qtjt/KZv0=)
2: t0X5t_3y1eMrgSVfnROrir2IJb4.roa (hash: BPcyM2IeAIooAh+FVKFVf4qaLxjgFOkdsiFt2kQ2Eag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rNq0o5SHtq0tN6jSaJ3ctSyp74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:49:b9:a1:2b:7f:a9:1e:4e:bc:eb:2f:f4:57:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2b36ad28e521edab4b4dea349a27772d4b2a7be
Validity
Not Before: Mar 2 09:01:50 2026 GMT
Not After : Mar 3 09:01:50 2026 GMT
Subject: CN=6906b4f65e635fcf1818061add32860d9a8220df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e0:89:18:07:60:f5:d2:f3:81:81:01:6d:45:
a1:a8:9c:67:c6:b9:ad:f0:ca:c6:9b:b5:9d:8a:d5:
24:21:43:fc:a9:b1:8f:64:d5:98:48:c2:6c:a8:11:
cc:d5:17:d6:1b:48:de:2c:61:d6:d2:1c:9b:94:13:
3f:e9:85:0a:05:62:b0:f4:31:e0:40:78:9a:de:95:
41:c0:a8:5b:6c:b8:d8:00:8c:81:bc:3d:e3:ea:fe:
1d:8d:5a:98:02:c7:b0:e9:ab:78:ec:6b:38:9d:e0:
e0:54:2c:32:49:e1:75:03:0e:b4:f4:91:f7:99:51:
d0:7a:e2:a1:2b:01:aa:b6:e6:eb:20:5b:ea:e7:e1:
4f:5b:d4:98:c0:e9:68:63:c5:3b:26:18:18:b3:7f:
4e:62:ba:86:1e:09:ec:bd:95:c5:2f:be:9b:04:7b:
a0:a2:75:47:26:9e:bd:5b:c6:26:f2:71:64:2b:e0:
d4:f1:e0:8e:22:cb:af:7d:18:06:0b:12:a2:65:a9:
7d:9d:eb:14:da:e6:0f:60:99:61:1d:5e:11:80:91:
bf:3c:2b:70:39:e2:f8:d4:23:1c:b0:8f:72:8f:27:
79:c5:f8:1e:26:2b:6e:22:a0:3e:e8:a4:28:55:15:
90:bf:a2:d0:26:d6:12:42:84:19:20:e2:4e:70:fc:
8d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:06:B4:F6:5E:63:5F:CF:18:18:06:1A:DD:32:86:0D:9A:82:20:DF
X509v3 Authority Key Identifier:
keyid:D2:B3:6A:D2:8E:52:1E:DA:B4:B4:DE:A3:49:A2:77:72:D4:B2:A7:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rNq0o5SHtq0tN6jSaJ3ctSyp74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:4b:da:3a:28:c6:b3:1a:53:ee:63:44:e8:7d:7c:84:66:ff:
96:41:70:74:9d:a5:69:f4:1b:93:e5:2e:33:a7:a1:23:88:a0:
dd:99:f1:c1:58:02:39:84:f3:dc:ed:fd:a5:3b:b2:86:38:f1:
e0:67:ae:b4:5d:d6:73:a8:af:c1:a7:0d:d3:02:42:f2:66:df:
aa:94:38:89:5e:cb:0e:2b:f5:9b:93:bd:95:0b:02:f5:0c:27:
ae:4a:98:b6:9d:8c:6b:c4:4e:c0:36:da:33:7c:7b:c9:fb:d1:
3b:de:45:58:ca:09:6f:81:bd:4a:c1:a6:33:4f:56:f7:67:c4:
09:f5:f9:3e:aa:82:06:4e:6c:34:04:c4:e9:2a:d1:c9:9e:72:
87:96:a4:be:5d:be:8b:0e:79:83:20:a6:cb:43:4e:97:fa:65:
61:3c:55:03:23:47:60:f9:5d:94:a9:64:12:e1:51:53:f8:71:
f1:c5:99:6f:85:38:f4:76:61:ea:2f:07:5f:dc:1a:a8:db:40:
95:2e:ba:88:2a:64:b2:d7:5e:ee:87:f0:52:96:b9:24:5d:e2:
ec:6e:a0:0f:ae:4f:62:34:88:d6:45:21:38:5e:06:a8:dd:7b:
28:63:2a:43:66:10:42:61:33:69:f8:8b:26:c0:90:c7:41:2a:
09:6d:99:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:33:07 2026 by rpki-client