Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft
File: 0deIJuFxfsmT62TdEYeHawZej1g.mft (raw, json)
Hash identifier: if6chE0RBe6+VSdfBcXLn7RaOAYcfDoCHF0N72R/HFM=
Subject key identifier: 75:1B:0C:A4:54:F7:C7:87:C5:FA:E0:9C:3C:C1:8F:60:28:80:CA:84
Authority key identifier: D1:D7:88:26:E1:71:7E:C9:93:EB:64:DD:11:87:87:6B:06:5E:8F:58
Certificate issuer: /CN=d1d78826e1717ec993eb64dd1187876b065e8f58
Certificate serial: 019CAA8FBC5178F7623ACA15BFD0E6778B4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft
Manifest number: 100A
Signing time: Sun 01 Mar 2026 18:01:12 +0000
Manifest this update: Sun 01 Mar 2026 18:01:12 +0000
Manifest next update: Mon 02 Mar 2026 18:01:12 +0000
Files and hashes: 1: 0deIJuFxfsmT62TdEYeHawZej1g.crl (hash: 1M/iNTmBg8YctAV/9Yg0oQZ6QfbICYqS4sHVhtrjgeA=)
2: 8zWkLs5MayVp3_SzYbBPRAvFDTs.roa (hash: UellUSwtPKZmjJ1D+Fmg+BloHauGtQEDG+FE5/v9Mm8=)
3: OaKg-lG-pzNmRpP7SDCitTlZaNo.roa (hash: 5+9V4WRdjlkj5ldl1qKFN9pvoMnzM+PUFUtZ5jME0PE=)
4: wA-hfRcLQDeGt5CtIuqae7_R8vk.roa (hash: /Y6WA6ClXm7DeMMUhB/vYFyvxO+T8Bk+qE5LtkXuWg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:bc:51:78:f7:62:3a:ca:15:bf:d0:e6:77:8b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1d78826e1717ec993eb64dd1187876b065e8f58
Validity
Not Before: Mar 1 18:01:12 2026 GMT
Not After : Mar 2 18:01:12 2026 GMT
Subject: CN=751b0ca454f7c787c5fae09c3cc18f602880ca84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f5:eb:71:b3:3e:a1:3f:7c:32:35:55:8a:68:
89:aa:26:d7:10:4f:df:53:90:ab:30:b0:e8:4f:dc:
67:2b:be:9a:6e:6a:5c:33:90:12:e2:56:91:1e:ec:
13:01:32:5d:5a:f9:38:91:61:f8:bd:cb:5c:0c:9c:
1e:b8:9e:3a:94:a8:54:01:87:ac:a5:93:47:41:b7:
fe:03:58:fd:f7:93:6b:35:e3:e5:46:60:b7:ad:e2:
ff:8a:14:24:6d:f0:8c:31:2e:da:22:73:b8:a3:d2:
29:4e:ee:2e:de:78:6f:d0:57:c1:83:6d:a8:86:cc:
96:ca:ff:ad:ec:fa:92:9c:80:a2:21:c8:3b:4c:f8:
1e:47:dc:82:f4:1a:b5:ce:fa:a9:38:de:01:36:45:
71:2f:58:5e:ff:5e:ed:ce:a5:b6:ed:3e:4c:d6:04:
24:6f:ce:c2:b2:36:c3:b5:71:f7:a9:e0:c5:42:a4:
95:b6:c8:fd:6a:8d:82:ea:45:52:5f:bd:8a:02:25:
cb:b3:80:37:15:e4:b2:cd:aa:4a:b5:23:56:27:84:
1c:3a:38:e1:ad:a0:8f:d3:dd:65:6f:a4:fd:36:30:
cd:3a:78:e0:f8:6a:7b:a4:20:5b:db:25:53:df:72:
c4:e2:d5:cf:42:4b:e0:da:0c:0b:54:dd:4f:92:f8:
cf:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1B:0C:A4:54:F7:C7:87:C5:FA:E0:9C:3C:C1:8F:60:28:80:CA:84
X509v3 Authority Key Identifier:
keyid:D1:D7:88:26:E1:71:7E:C9:93:EB:64:DD:11:87:87:6B:06:5E:8F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:e7:3f:2b:de:5d:5c:db:db:f2:54:4b:71:c0:af:e4:97:3c:
bd:e0:05:bb:2e:8a:8e:7f:9d:b4:0f:40:8d:26:25:c5:5e:0d:
a9:f4:d0:28:ba:31:61:37:9d:7f:d5:41:e2:63:67:b9:9e:88:
53:10:1d:88:09:a2:36:a1:ad:f5:5d:d7:09:55:2a:c7:31:7a:
56:3e:c3:2e:9d:5d:9b:7f:58:fa:8e:2d:24:1d:cc:cd:c5:15:
ad:40:b9:76:56:ea:34:97:c5:84:a5:68:40:15:18:bd:0b:cb:
54:82:ff:67:99:7e:d5:37:3e:89:d2:fe:2e:e5:ec:7f:fc:8a:
72:21:38:3c:e8:1f:e8:f0:72:77:af:39:35:05:de:c2:df:e3:
6d:da:66:96:f7:c6:ff:03:73:e6:08:31:82:1e:1d:44:2b:a6:
dc:4a:47:18:27:7c:9e:b3:a6:a5:c5:45:68:a0:0c:02:f8:74:
a8:11:e4:a2:34:e9:33:37:0d:8a:af:92:84:2c:75:c1:b0:fd:
3f:52:e7:89:b7:bc:2c:25:2e:46:bc:04:cf:85:e8:32:21:9c:
a2:21:cd:70:09:9b:d0:f9:39:f7:a0:f6:66:ec:83:5c:2d:51:
3b:90:e7:05:85:44:d4:8b:3d:ce:60:bb:9b:9f:51:19:34:08:
76:a6:df:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj7xRePdiOsoVv9Dmd4tKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZDc4ODI2ZTE3MTdlYzk5M2ViNjRkZDExODc4NzZiMDY1
ZThmNTgwHhcNMjYwMzAxMTgwMTEyWhcNMjYwMzAyMTgwMTEyWjAzMTEwLwYDVQQD
Eyg3NTFiMGNhNDU0ZjdjNzg3YzVmYWUwOWMzY2MxOGY2MDI4ODBjYTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPXrcbM+oT98MjVVimiJqibXEE/f
U5CrMLDoT9xnK76abmpcM5AS4laRHuwTATJdWvk4kWH4vctcDJweuJ46lKhUAYes
pZNHQbf+A1j995NrNePlRmC3reL/ihQkbfCMMS7aInO4o9IpTu4u3nhv0FfBg22o
hsyWyv+t7PqSnICiIcg7TPgeR9yC9Bq1zvqpON4BNkVxL1he/17tzqW27T5M1gQk
b87CsjbDtXH3qeDFQqSVtsj9ao2C6kVSX72KAiXLs4A3FeSyzapKtSNWJ4QcOjjh
raCP091lb6T9NjDNOnjg+Gp7pCBb2yVT33LE4tXPQkvg2gwLVN1PkvjP8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUbDKRU98eHxfrgnDzBj2AogMqEMB8GA1UdIwQY
MBaAFNHXiCbhcX7Jk+tk3RGHh2sGXo9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGRlSUp1Rnhmc21UNjJUZEVZZUhhd1plajFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wZWViMmYtMWFhMC00NzYyLWI0ZTgt
YjU5YzJhYzk1MWNiLzEvMGRlSUp1Rnhmc21UNjJUZEVZZUhhd1plajFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8wZWViMmYtMWFhMC00NzYyLWI0ZTgtYjU5YzJhYzk1MWNi
LzEvMGRlSUp1Rnhmc21UNjJUZEVZZUhhd1plajFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuOc/K95d
XNvb8lRLccCv5Jc8veAFuy6Kjn+dtA9AjSYlxV4NqfTQKLoxYTedf9VB4mNnuZ6I
UxAdiAmiNqGt9V3XCVUqxzF6Vj7DLp1dm39Y+o4tJB3MzcUVrUC5dlbqNJfFhKVo
QBUYvQvLVIL/Z5l+1Tc+idL+LuXsf/yKciE4POgf6PByd685NQXewt/jbdpmlvfG
/wNz5ggxgh4dRCum3EpHGCd8nrOmpcVFaKAMAvh0qBHkojTpMzcNiq+ShCx1wbD9
P1Lnibe8LCUuRrwEz4XoMiGcoiHNcAmb0Pk596D2ZuyDXC1RO5DnBYVE1Is9zmC7
m59RGTQIdqbfhQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:48:27 2026 by rpki-client