Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
File: _0cFo2PcHY0OpRybmh7L04B70FQ.mft (raw, json)
Hash identifier: /5Zbs6T1cWaUvZ33V01dgqtC1WQl3BUtdAZaSC94+j8=
Subject key identifier: 31:59:7E:B4:A4:E1:47:D8:73:B3:AC:4D:24:74:F3:BB:18:50:74:EE
Authority key identifier: FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
Certificate issuer: /CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Certificate serial: 019CAC7E2E18090A6C2487F752B9334F8E7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
Manifest number: 184B
Signing time: Mon 02 Mar 2026 03:01:16 +0000
Manifest this update: Mon 02 Mar 2026 03:01:16 +0000
Manifest next update: Tue 03 Mar 2026 03:01:16 +0000
Files and hashes: 1: DJeUFnamTZ95ip1wqQB6GBsmyiQ.roa (hash: MVnppoj2mz3TnYvjg2uHh/9JjoQIHJwR2BBiRIQrPeE=)
2: GHjJjwBpoAdhz9IMpI8-MFbmhXg.roa (hash: Yg81SKjjSUrf7wcCQo3l8C3jEm5E2w8HUv9yWnStEig=)
3: _0cFo2PcHY0OpRybmh7L04B70FQ.crl (hash: q7V3/80EfX9qj/WZjZNQ8m1OdxnsN5rhv94HQO0Wfg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:2e:18:09:0a:6c:24:87:f7:52:b9:33:4f:8e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Validity
Not Before: Mar 2 03:01:16 2026 GMT
Not After : Mar 3 03:01:16 2026 GMT
Subject: CN=31597eb4a4e147d873b3ac4d2474f3bb185074ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6a:81:5c:21:fe:da:51:15:4a:16:f8:df:48:
b2:7e:0d:ef:f3:05:5d:c1:37:ba:8b:e5:ba:bb:fc:
dd:db:bd:3e:76:2f:28:44:ce:02:b7:8c:7c:14:f4:
7f:42:20:07:5d:ce:79:02:52:f5:66:51:00:d6:3d:
69:ad:7f:f5:50:75:30:53:57:8a:0d:fa:24:01:21:
36:e6:72:60:6c:b1:a4:64:d9:49:97:e0:d0:4b:47:
b0:b6:af:70:2f:f1:30:a5:43:bf:f2:65:9a:f3:70:
d9:6f:b1:88:af:8c:6c:ff:6d:5c:0d:b0:8b:12:f3:
11:7b:fa:8f:9a:9c:41:9e:6b:c5:60:4d:48:1a:46:
67:98:a5:4d:04:7f:7c:70:06:22:d5:46:f4:fc:f2:
d2:0a:94:f3:77:0c:dd:f9:51:be:cf:f4:75:24:f1:
63:2f:6f:92:cb:41:3d:81:86:42:4e:43:76:83:9f:
61:fb:c9:e7:45:57:bb:19:e7:51:ca:71:4d:c8:40:
72:06:09:ee:16:06:c2:e7:ad:c0:a4:7a:b0:f1:e9:
5e:54:fd:07:fe:79:31:09:61:4d:38:d8:a0:7c:fa:
66:c5:2e:ac:1d:5b:a8:a9:5f:42:cc:df:2d:84:60:
39:24:7e:8a:c4:f5:00:8a:50:ce:40:c4:4d:41:5d:
00:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:59:7E:B4:A4:E1:47:D8:73:B3:AC:4D:24:74:F3:BB:18:50:74:EE
X509v3 Authority Key Identifier:
keyid:FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e5:2f:c9:38:90:cb:c6:e2:a9:2e:75:13:09:6a:0d:32:6f:
a6:50:4f:f1:3f:16:18:b0:98:1c:cd:bc:6a:69:a3:5e:22:95:
66:ce:e9:0c:1a:59:93:84:de:3e:f4:98:d7:d5:64:c0:95:b0:
bb:8a:5b:92:70:97:e0:1a:0d:14:f7:f7:da:f8:11:02:83:a2:
58:49:fa:93:25:9c:3b:de:51:da:c5:17:cc:b9:c3:5f:f0:52:
2a:8d:e7:9b:d9:8c:9f:36:c0:66:6f:56:88:f8:fd:32:a4:e6:
82:f8:da:c7:e3:80:ce:0b:d7:ec:fd:76:4f:ca:2d:21:74:e0:
f8:60:ab:c0:b1:6f:fd:93:34:a6:2f:91:80:63:b2:68:d2:30:
ad:88:46:3b:7b:c2:9e:17:40:26:33:cb:7a:26:d2:d9:d0:e4:
89:94:c4:fc:99:ca:32:cf:af:1d:e6:5d:23:0b:4a:a4:98:2f:
f8:d1:70:f8:82:d3:88:7b:bd:e0:a8:77:c0:57:75:b6:e8:31:
b0:da:e4:2c:8b:6b:50:a5:f6:48:1b:c8:71:94:89:87:c0:aa:
eb:a7:bb:e3:4a:7b:eb:18:16:a2:9d:78:43:e8:31:e3:7c:ca:
89:a3:78:6d:93:e8:aa:da:cb:32:a1:fe:56:d0:4b:45:23:5b:
a7:fd:eb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:11 2026 by rpki-client