Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
File: 0rvJBVXW0NNDK6u5W2DN7upYD1g.mft (raw, json)
Hash identifier: 2tT1cmBbmYSU3/mHlJwnj4Ky5lEp7kz5itKVUhSEl0g=
Subject key identifier: 3B:97:68:F2:0F:8E:C6:57:96:99:D5:8D:12:F3:C2:46:1E:FA:A9:98
Authority key identifier: D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58
Certificate issuer: /CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58
Certificate serial: 019CAED9AF10E2BDFB60626094EF53333E8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
Manifest number: 16DD
Signing time: Mon 02 Mar 2026 14:00:27 +0000
Manifest this update: Mon 02 Mar 2026 14:00:27 +0000
Manifest next update: Tue 03 Mar 2026 14:00:27 +0000
Files and hashes: 1: 0rvJBVXW0NNDK6u5W2DN7upYD1g.crl (hash: FZkcL6jtpXxQvNL0f/RU8gZRdQ8QtkiREEvmb1Cwweg=)
2: CuoNMY7Qq37VOjNaS3NSAgeASU8.roa (hash: oV7Za3ljWN5/ELZ5W0IrtTxHnlCCtRf76iTFx/48w6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:d9:af:10:e2:bd:fb:60:62:60:94:ef:53:33:3e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58
Validity
Not Before: Mar 2 14:00:27 2026 GMT
Not After : Mar 3 14:00:27 2026 GMT
Subject: CN=3b9768f20f8ec6579699d58d12f3c2461efaa998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:67:76:f9:50:ae:c7:83:01:c3:fd:60:f7:e3:
51:35:48:1d:5b:8c:7b:91:44:15:79:97:bf:ec:63:
bf:80:20:1f:3f:ad:f2:e4:4d:69:ea:81:e3:1d:e7:
56:79:ef:20:94:71:c2:85:98:95:d6:f3:52:b8:ab:
35:9f:b2:4d:12:43:51:03:8b:18:f8:df:e1:80:e9:
74:73:8c:bd:96:32:cf:35:97:41:b6:14:e0:a2:cd:
0d:85:e0:c6:f1:c8:e1:e4:0f:f9:96:9e:b6:96:fe:
c4:80:e0:b1:fa:99:94:c1:cb:39:4c:de:0b:ee:cc:
bf:bc:01:4f:14:94:08:ac:10:f4:2a:9b:fb:ed:24:
e8:83:76:0f:e0:95:ea:41:65:74:9c:08:f2:34:a6:
b8:56:56:88:ca:67:05:a1:1f:26:28:15:5c:e1:7c:
dc:d1:4e:77:4c:e4:ce:49:7f:35:18:1b:8f:12:a8:
3f:3a:b2:ea:f9:a1:db:b0:ec:26:a9:5e:c0:84:cb:
7a:8a:d0:76:3f:35:b7:c3:02:00:d1:67:10:8d:b3:
12:e8:d0:93:9b:f5:a1:85:34:cd:bd:4f:81:97:01:
e4:03:e2:cb:d2:40:7c:55:66:3d:46:b4:2b:ee:7c:
86:0a:50:33:6a:30:c0:7a:ca:1c:c9:84:46:cc:80:
f2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:97:68:F2:0F:8E:C6:57:96:99:D5:8D:12:F3:C2:46:1E:FA:A9:98
X509v3 Authority Key Identifier:
keyid:D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:df:1d:bd:16:ca:fa:3a:aa:b8:a2:14:05:77:88:46:ff:b1:
93:21:5b:37:5d:c4:84:2f:6f:c4:15:52:44:64:4b:16:c4:a5:
ec:13:61:f1:fe:68:ad:2c:a7:26:9a:ca:9f:b3:1c:eb:ad:93:
4f:35:10:64:e8:41:b8:55:40:8d:53:d9:3d:f3:08:32:d0:3c:
f0:d6:79:46:72:e4:13:c5:dc:81:78:4b:50:3a:1b:06:ec:14:
98:a8:58:c0:6b:5c:06:b9:25:6d:a5:1d:cd:d5:72:23:3a:1d:
72:27:a9:8c:71:0c:a5:12:63:79:c2:2e:bf:c2:a9:91:c1:b9:
91:dd:73:80:28:02:f3:c5:1c:ed:0a:5e:9e:8b:ee:19:b4:ee:
a4:09:7a:a2:9a:ee:12:a6:66:2a:9a:b1:d9:05:02:fe:4d:cb:
5c:26:f1:2c:e1:00:0c:1e:b0:31:35:80:f0:10:8c:04:c7:6f:
c7:3b:10:30:00:71:07:60:e5:8c:43:28:fb:7f:12:4d:0d:29:
54:51:54:8f:43:8c:85:70:7a:43:05:b3:63:f4:e8:a6:d9:71:
30:5e:ca:01:73:2f:09:0b:a0:c0:be:13:38:7d:79:02:90:b3:
06:64:8a:b7:34:57:b4:fa:af:85:84:4e:4e:55:4a:e3:76:18:
e1:25:b8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:56:43 2026 by rpki-client