Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
File: 0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft (raw, json)
Hash identifier: E9Rc78RhRUmGe11akc4LraIpHpdzgiGmehaR98PIok0=
Subject key identifier: C5:17:A0:47:94:52:04:1B:0F:BD:8A:DD:9B:DC:B3:17:A9:C0:14:66
Authority key identifier: D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9
Certificate issuer: /CN=d29dc792adfcfe88c79e7958fbfec525630b62f9
Certificate serial: 019CAA213AEAF61C4272370995B705E97F6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
Manifest number: 0C4A
Signing time: Sun 01 Mar 2026 16:00:30 +0000
Manifest this update: Sun 01 Mar 2026 16:00:30 +0000
Manifest next update: Mon 02 Mar 2026 16:00:30 +0000
Files and hashes: 1: 0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl (hash: N2nXfZ5KeWaJ5XiI5UfyfOgyK5qCTqlyJGd5P9Tg/iA=)
2: 1KnU7H_UVe-XpNapFYFQEn0LJJQ.roa (hash: cUtUMg5M4fjhGoVm34BuVn+17rIs5yEOOCki02p10ww=)
3: j5hpz0Ky4wyZsfB5ISUjvlPvrQ8.roa (hash: eXsNvI5c0yl1gppo8mH8F57qlB2x5VSSClL68a+AJ/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:3a:ea:f6:1c:42:72:37:09:95:b7:05:e9:7f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d29dc792adfcfe88c79e7958fbfec525630b62f9
Validity
Not Before: Mar 1 16:00:30 2026 GMT
Not After : Mar 2 16:00:30 2026 GMT
Subject: CN=c517a0479452041b0fbd8add9bdcb317a9c01466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7b:8b:c1:bd:70:77:59:f2:90:7e:41:35:cf:
6e:a9:99:95:e2:63:c8:16:3c:a3:03:e3:a1:76:6f:
2f:89:47:4e:a7:78:38:f4:ab:e1:b9:20:51:16:e5:
39:0d:a2:fd:8e:22:bf:c2:b3:75:93:1f:5c:93:66:
ea:0e:c4:1a:36:44:54:fb:5a:43:6a:e0:9f:76:19:
af:0b:a9:75:f2:68:a8:d6:1e:53:cb:65:17:28:43:
f4:d0:4a:0e:08:8f:8a:b2:f8:c5:e2:23:b6:63:25:
56:7e:23:cb:43:f2:b8:a1:85:4a:c7:be:e8:d3:52:
90:89:6c:4c:1e:7f:01:f8:57:63:f7:b0:e1:fa:47:
f9:0c:3b:78:10:6d:88:95:0f:12:76:03:fb:75:67:
09:af:8d:db:44:c4:c2:74:9c:3f:5d:cf:75:db:74:
92:37:54:e3:d9:2b:cb:72:ca:45:21:99:32:9e:f1:
d9:31:2d:b0:84:0d:07:31:51:48:38:71:ab:1e:47:
a7:6a:71:a7:fc:5b:38:74:7a:12:09:9e:5c:fc:fd:
b9:3d:d6:be:a6:a6:45:46:ca:45:0f:13:02:1f:d6:
fe:94:48:01:a8:70:88:1e:57:34:5b:e1:b7:cb:35:
6e:8f:a0:35:45:e0:b1:6b:f3:d0:82:9d:3c:db:ca:
8d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:17:A0:47:94:52:04:1B:0F:BD:8A:DD:9B:DC:B3:17:A9:C0:14:66
X509v3 Authority Key Identifier:
keyid:D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:30:bb:a5:98:95:77:b9:94:6d:30:ad:62:05:44:a5:3e:54:
f3:ae:17:43:da:12:83:dc:7e:29:b6:c7:ba:39:50:2f:49:08:
09:4f:96:c1:ca:5b:a4:5a:8d:ae:05:c4:79:45:79:e7:19:3f:
89:9c:55:56:c6:55:78:99:c6:ba:d4:a7:31:1f:af:31:73:12:
42:d4:d5:3a:98:c8:55:61:83:50:3b:7f:11:7d:7e:27:16:56:
d8:5d:07:e6:96:72:80:80:e6:19:b0:e7:da:4b:4d:31:6c:6e:
49:e8:73:b2:d1:61:4b:4b:b9:e6:d8:96:04:30:83:c4:01:4f:
9c:ae:9d:1c:ff:e1:1c:ab:98:af:89:2f:f0:ff:1c:4f:3a:bb:
c1:e8:f0:cc:fd:7d:4c:96:97:c4:e7:38:2b:8c:cf:c9:a2:45:
b8:ce:35:75:a5:50:f3:dd:c1:80:12:a6:b6:e5:c0:46:49:5b:
6e:53:67:ff:a1:22:af:26:85:fd:44:86:a8:73:73:f3:c8:28:
e8:e2:21:b4:37:81:16:82:15:87:ca:13:2e:30:f0:8a:47:b4:
69:d0:b6:e0:12:ce:15:ea:a1:44:f3:3d:41:cf:5c:64:08:92:
43:12:0a:5f:b1:2c:c2:74:7c:32:9a:23:aa:3b:a6:ee:1b:64:
c2:e5:59:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:05 2026 by rpki-client