Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
File: 0TAReuHNwt8cWIFuAOVFH4fvs3A.mft (raw, json)
Hash identifier: bkaD4Rc7qq+Vbo1eSE0UFJOvhTykWefRG/T6ZrNlisE=
Subject key identifier: 80:BD:B3:FE:3B:29:73:10:43:ED:18:A3:E5:E2:4A:9D:86:59:1E:E3
Authority key identifier: D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70
Certificate issuer: /CN=d130117ae1cdc2df1c58816e00e5451f87efb370
Certificate serial: 019CA9EA951A90072584CE756263B0042A7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
Manifest number: 08D4
Signing time: Sun 01 Mar 2026 15:00:48 +0000
Manifest this update: Sun 01 Mar 2026 15:00:48 +0000
Manifest next update: Mon 02 Mar 2026 15:00:48 +0000
Files and hashes: 1: 0TAReuHNwt8cWIFuAOVFH4fvs3A.crl (hash: ELWiOWbxUb359DmMM5PzMz5/y+THLuZdqf063tIz7kQ=)
2: p9tR_YPIsnjcSaCfQzqt0nEYrrM.roa (hash: ELI33Gpd5gDnI+1hXpA3k3XALmGCvJJlHqj3mPxtk9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:95:1a:90:07:25:84:ce:75:62:63:b0:04:2a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d130117ae1cdc2df1c58816e00e5451f87efb370
Validity
Not Before: Mar 1 15:00:48 2026 GMT
Not After : Mar 2 15:00:48 2026 GMT
Subject: CN=80bdb3fe3b29731043ed18a3e5e24a9d86591ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c4:b6:84:8f:57:59:86:3c:bd:bd:4a:6a:d0:
52:40:97:61:80:80:70:38:96:ab:64:90:22:e8:5f:
5a:67:9b:a6:a0:91:51:a3:34:7b:da:3c:28:6c:87:
60:bc:ed:c8:80:62:31:38:6d:4d:12:e7:03:e4:c0:
5a:12:05:c9:44:cb:1b:88:43:62:a0:5b:6e:b9:dd:
a8:c9:96:49:51:4f:6d:84:92:6e:dc:e8:3e:ad:b1:
02:00:82:88:de:f3:f3:05:7f:33:1b:12:9d:6d:6d:
aa:73:86:b2:07:a6:02:bd:0b:5f:cc:a6:dd:0e:e1:
4a:7d:5b:7a:33:a8:2d:47:d2:13:08:d8:20:ad:31:
f8:73:b5:90:fb:fa:f0:9c:eb:bd:13:47:37:0e:36:
28:41:6b:35:a0:07:50:f6:cf:94:d0:32:f2:87:b0:
a7:c4:29:71:28:ec:ad:92:f4:0f:1f:e3:26:34:78:
90:be:81:94:fe:1a:bd:e0:5d:92:c1:6f:9d:f8:57:
f6:4e:21:dd:3a:89:9d:d2:ee:f9:7f:16:47:db:fd:
cb:f2:fb:eb:9a:fa:d2:4b:ef:62:85:65:8e:eb:d3:
f2:84:ed:bc:bf:a4:09:2f:11:0d:62:35:48:b5:66:
aa:42:db:e6:62:61:1c:4e:5b:f5:a6:a8:ae:3e:c0:
a2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BD:B3:FE:3B:29:73:10:43:ED:18:A3:E5:E2:4A:9D:86:59:1E:E3
X509v3 Authority Key Identifier:
keyid:D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:69:59:68:96:94:a4:f0:f4:7d:3f:75:55:b3:1b:61:c0:73:
84:90:16:80:ba:da:bd:07:47:a0:9a:ae:f6:c1:b8:ed:37:ca:
18:64:54:e8:fc:36:ae:62:61:f1:12:51:b7:c9:cb:8f:a5:56:
e6:f2:5e:24:66:de:2b:24:84:f2:53:b9:83:7a:d4:02:bf:bd:
6f:fd:ba:59:45:e6:21:cc:93:3c:87:4a:72:d3:e0:a0:b5:7d:
8d:97:5f:b8:17:bd:4f:cb:40:9b:d7:fb:c8:bf:01:12:43:10:
af:12:f4:38:66:87:6a:33:dc:4d:16:3f:8b:15:18:c6:30:23:
80:ed:9d:d2:bd:92:aa:b7:6f:c1:7c:2c:c1:c7:e9:16:c0:88:
bf:79:58:e4:83:83:6b:c8:3f:3e:8c:14:bc:69:06:9e:6d:72:
fe:06:cc:ab:73:6d:32:41:76:0d:60:17:38:d3:0a:9e:c9:c1:
7d:6a:76:be:99:51:9f:b1:d3:aa:1d:d0:b7:49:42:61:25:69:
42:4b:ef:f1:55:43:f1:83:29:9b:8c:59:d0:fe:e6:2d:57:b4:
a5:9b:57:ad:22:db:83:6f:65:f1:c9:f4:22:4d:a2:20:ca:95:
cf:9a:31:57:3a:bb:a3:33:6c:36:9c:cd:66:f6:41:73:67:80:
ca:34:63:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:04:08 2026 by rpki-client