Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
File: 0KHbRmz4CCBik9B-ZfISH-tJoz4.mft (raw, json)
Hash identifier: 6uXXq2FFj/DgdHDxUqOZbekFMhUqlSBod1xlzOSiy7Y=
Subject key identifier: F9:70:F0:C3:62:6E:8D:1D:F5:8E:8D:B7:DD:12:42:7A:0D:61:38:3D
Authority key identifier: D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E
Certificate issuer: /CN=d0a1db466cf808206293d07e65f2121feb49a33e
Certificate serial: 019CA9458180811D4F005D4BED9804634C1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
Manifest number: 1634
Signing time: Sun 01 Mar 2026 12:00:30 +0000
Manifest this update: Sun 01 Mar 2026 12:00:30 +0000
Manifest next update: Mon 02 Mar 2026 12:00:30 +0000
Files and hashes: 1: 0KHbRmz4CCBik9B-ZfISH-tJoz4.crl (hash: GbyUP0j+7Hi0Lto2bMDbFD1ZYZ9y+Oaf3f6tXLb3tmg=)
2: DhRuJkYL3BPnAOF_5KLHFOS7fEU.asa (hash: sQIfeWLpZ4jVR+U6OfuhrXRMEOMO8X/NhFz0LDGhKGs=)
3: yq5Siwl4i3jmM8YcRC0pxHMIUlk.roa (hash: nGkz7j5CjWTfBWr6c+S9Cs2//HPjWw5q8jEucRFb/jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:81:80:81:1d:4f:00:5d:4b:ed:98:04:63:4c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a1db466cf808206293d07e65f2121feb49a33e
Validity
Not Before: Mar 1 12:00:30 2026 GMT
Not After : Mar 2 12:00:30 2026 GMT
Subject: CN=f970f0c3626e8d1df58e8db7dd12427a0d61383d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a3:93:bb:ff:57:9f:8e:46:f8:b5:8b:19:63:
a5:13:62:b8:0a:8f:3d:e6:06:ca:32:b6:21:b0:90:
37:aa:f6:76:a5:38:94:04:e5:c0:0f:d6:ac:bb:5c:
96:f8:69:fd:49:ce:dd:4c:bf:0c:e2:81:ea:ba:da:
98:f0:80:39:f9:9e:06:b4:da:46:c2:a1:29:9a:7b:
d0:a8:78:a3:a5:7e:c5:f2:be:38:7f:16:dd:75:13:
df:8e:ab:2b:ba:47:91:cd:3f:77:08:fa:7a:be:a0:
cc:e9:45:ab:cf:dd:a7:b4:67:e5:78:ef:6b:92:61:
90:27:b8:3c:4b:55:f5:b0:cd:1c:09:a0:5e:e8:56:
c5:03:f8:6b:d5:19:0d:27:33:5f:0a:64:0a:72:29:
1f:09:aa:f1:e9:27:f9:21:01:96:d3:2d:61:6b:64:
93:4a:85:b1:20:93:5c:fc:6a:16:f1:34:59:26:2b:
5f:9f:dd:6c:13:02:0d:08:93:9a:45:10:43:55:39:
c2:aa:b1:b1:e3:71:ab:cc:9a:28:44:07:26:72:ac:
30:d2:ea:89:2e:ba:f6:ab:51:7b:db:5e:ca:ff:9b:
98:78:3f:82:24:13:ea:ce:74:f2:e7:97:ca:59:66:
bd:fe:e3:61:b3:07:ec:2e:bc:a6:18:10:35:f9:82:
c9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:70:F0:C3:62:6E:8D:1D:F5:8E:8D:B7:DD:12:42:7A:0D:61:38:3D
X509v3 Authority Key Identifier:
keyid:D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:df:02:f9:ab:29:ad:91:97:26:ea:8f:9c:a9:8b:c6:f7:d5:
40:6f:07:c3:5a:26:b4:92:d7:43:d1:47:30:07:e4:fc:fd:6c:
82:7b:68:00:aa:dd:4c:dd:ee:a2:dc:85:47:aa:2d:04:71:fc:
ac:bf:f8:dc:05:52:6e:71:db:25:66:f9:35:99:30:ad:53:9e:
7a:68:fc:eb:17:08:ae:a5:94:bc:b9:34:5e:4f:e1:96:1c:96:
c9:0a:27:a8:e1:fb:d6:d4:11:69:83:a1:f6:99:48:56:8e:7e:
cb:27:20:99:50:51:2f:c7:8a:b7:f5:4e:fa:e9:1e:4b:c4:72:
05:38:e3:01:3b:98:73:bb:40:8a:e1:75:4a:ae:f6:6f:d1:5f:
d4:f8:3f:cb:c6:4e:e4:44:08:10:a7:59:9a:55:aa:eb:48:a3:
ba:29:9c:bd:49:8e:11:3b:19:0f:31:92:aa:cf:7f:65:0a:e4:
75:c6:25:d8:79:e6:2e:d5:97:d2:bb:79:c4:5d:2c:3c:34:27:
a1:55:29:e2:4f:91:c3:ec:24:d6:5f:80:7d:0e:86:34:e1:da:
fd:8b:04:42:cb:66:50:6d:a1:44:7b:56:50:5d:02:9c:7e:b2:
58:22:82:58:4f:96:f3:ca:f9:1b:34:35:1c:5c:0e:ac:dc:33:
6f:81:1a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:30:02 2026 by rpki-client