Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
File: D0OG59TvxHLBH-nP7z0zCXSzP2E.mft (raw, json)
Hash identifier: PEy1x92rsoqPTV62faf6WPja9MPASOT9vMvCJ7Sxyqw=
Subject key identifier: BC:23:75:0B:4B:4A:DD:2F:88:0B:AA:3F:B2:AA:B8:7B:F1:53:FC:79
Authority key identifier: 0F:43:86:E7:D4:EF:C4:72:C1:1F:E9:CF:EF:3D:33:09:74:B3:3F:61
Certificate issuer: /CN=0f4386e7d4efc472c11fe9cfef3d330974b33f61
Certificate serial: 019CAB6B60812C7B75EFEF071045713F91B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
Manifest number: 0AE7
Signing time: Sun 01 Mar 2026 22:01:06 +0000
Manifest this update: Sun 01 Mar 2026 22:01:06 +0000
Manifest next update: Mon 02 Mar 2026 22:01:06 +0000
Files and hashes: 1: D0OG59TvxHLBH-nP7z0zCXSzP2E.crl (hash: oSS07z77op0xeMBCSuTYMNUoGTD/hPCDeozg8FMRHso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:60:81:2c:7b:75:ef:ef:07:10:45:71:3f:91:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f4386e7d4efc472c11fe9cfef3d330974b33f61
Validity
Not Before: Mar 1 22:01:06 2026 GMT
Not After : Mar 2 22:01:06 2026 GMT
Subject: CN=bc23750b4b4add2f880baa3fb2aab87bf153fc79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:47:aa:a4:5f:48:b1:18:51:8c:ca:95:14:bd:
55:eb:1f:70:13:3b:8f:bd:13:ea:43:72:58:17:1b:
ff:f7:f2:72:af:54:2e:86:15:c1:95:08:c8:16:98:
d3:4e:15:1a:f5:4d:0f:24:76:f2:5c:2f:78:08:4c:
95:c7:0f:b4:7e:71:0e:75:2d:b5:55:58:24:f8:1a:
b8:80:7e:cc:32:a9:dd:d2:7a:81:bb:f8:5c:af:dd:
45:e2:92:5a:e2:18:ac:af:83:3d:22:f6:79:17:66:
7f:c5:9c:cb:42:3d:bc:6b:a5:14:20:1c:20:b7:02:
9b:1e:ee:7c:67:c3:43:01:42:57:a0:53:96:40:e4:
b1:dd:1c:3e:ad:73:2e:37:ad:aa:75:8f:19:4f:b0:
b7:8a:25:bf:d3:3c:55:e9:7a:a8:6b:fe:34:f3:11:
2e:af:df:3f:b5:29:6f:7a:1d:95:7b:e3:bd:e9:c6:
22:3e:30:98:ca:2c:0c:c0:15:46:f1:bf:68:52:8a:
af:18:47:13:6a:93:0a:d1:35:67:18:48:a0:c4:b1:
37:fc:d2:c5:d1:9b:08:1e:c4:ba:d8:2f:d8:83:bf:
cc:b1:46:bc:ef:56:69:4f:54:d1:5a:3b:0a:63:f0:
42:a4:6b:3c:b4:d7:a8:a1:71:33:c1:c2:87:31:be:
03:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:23:75:0B:4B:4A:DD:2F:88:0B:AA:3F:B2:AA:B8:7B:F1:53:FC:79
X509v3 Authority Key Identifier:
keyid:0F:43:86:E7:D4:EF:C4:72:C1:1F:E9:CF:EF:3D:33:09:74:B3:3F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b7:15:47:03:8d:ce:c9:5c:3f:41:08:e2:cf:32:b5:1d:0c:
13:1d:8a:cc:c3:88:1f:6c:38:d8:b6:05:0e:bf:bd:1a:de:27:
11:5d:4b:cb:f0:8f:ab:af:54:c6:8f:06:13:21:01:ac:37:24:
cb:e7:9f:12:aa:9b:5f:08:cc:f9:2c:45:16:35:39:83:27:23:
cf:1f:e8:a4:69:7c:00:6a:91:91:e6:5c:8c:3d:6a:0c:d9:a7:
67:6b:11:12:8a:c0:65:ea:71:c2:c4:61:da:2d:24:54:74:26:
55:78:eb:7d:1a:b7:d8:b1:c0:f4:26:a6:fa:06:7b:73:d2:ce:
21:89:9e:34:b3:4c:ec:84:8a:4c:21:4b:ee:7e:ab:6e:21:e0:
20:1b:58:10:f4:cb:35:b7:be:44:da:2d:db:d0:eb:fe:e1:de:
fa:c8:4e:71:7b:22:27:68:fd:1d:eb:93:e6:43:41:07:1e:05:
c7:42:62:be:c8:80:14:82:02:37:e6:b6:b2:96:7d:5f:78:2f:
3f:c0:8d:12:02:89:59:b9:ad:e3:c0:aa:70:00:d9:f0:4f:8b:
85:c4:a1:08:79:a2:0d:c9:02:db:0d:5b:09:ea:37:67:88:de:
3e:ae:73:d2:27:1f:e7:42:d3:f8:11:ef:90:a3:be:66:a8:5e:
d1:dc:24:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:29 2026 by rpki-client