Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft
File: 0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft (raw, json)
Hash identifier: GEGnh7PiSZ04dc6H904sk/09mPZKaYAH9mEx6z4+A8I=
Subject key identifier: 38:65:66:82:40:FF:59:F9:B3:B7:A5:64:98:36:5A:F4:05:04:F1:67
Authority key identifier: D0:BD:40:EF:34:06:64:71:5C:8C:2C:FA:50:E3:D6:1B:A2:86:E0:37
Certificate issuer: /CN=d0bd40ef340664715c8c2cfa50e3d61ba286e037
Certificate serial: 019CABA1FF4F0ED30855693B7551A16B7C1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 23:00:46 +0000
Manifest this update: Sun 01 Mar 2026 23:00:46 +0000
Manifest next update: Mon 02 Mar 2026 23:00:46 +0000
Files and hashes: 1: 0L1A7zQGZHFcjCz6UOPWG6KG4Dc.crl (hash: 1eDpj9SYi/YaFo771H9Xvz5funEhjj4+wezFHtGwgls=)
2: 9Bpiuh903cf2KUyc3B43Sh-h6cU.roa (hash: vOwl8xFJY0duh2VdVAScqH5k4a2xL8x3qVJv4PynVyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:ff:4f:0e:d3:08:55:69:3b:75:51:a1:6b:7c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bd40ef340664715c8c2cfa50e3d61ba286e037
Validity
Not Before: Mar 1 23:00:46 2026 GMT
Not After : Mar 2 23:00:46 2026 GMT
Subject: CN=3865668240ff59f9b3b7a56498365af40504f167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bc:fd:f0:d6:7a:5d:a7:84:a8:52:e4:04:86:
bb:a8:f9:49:ab:34:30:89:0d:a7:31:3a:88:a6:d8:
8b:ef:30:d9:c3:36:c1:fb:41:13:d6:b2:fe:84:26:
91:c0:76:fb:47:6b:1d:af:87:9c:a5:72:52:a3:33:
49:62:16:52:1e:63:d0:8c:50:53:93:da:00:9e:ab:
f9:1c:34:60:eb:f2:91:6d:91:96:82:00:ef:b7:6e:
f6:f0:68:47:7c:cf:84:d8:28:d8:6d:c5:6c:a5:ab:
00:d1:f8:f7:fd:1e:8b:5b:63:e8:3b:a5:41:4a:bc:
86:37:41:c0:84:50:aa:ab:1d:93:fc:84:89:fc:23:
36:21:e7:1b:30:61:4a:5c:ee:b9:2d:e4:32:a6:2b:
a4:a7:22:fa:9a:6b:9b:ce:c1:07:16:2c:53:40:10:
62:60:16:71:ac:a1:1f:e1:c4:16:4e:e2:82:b3:17:
a4:8a:87:be:12:51:25:87:c5:07:1a:e2:56:0a:c9:
bf:f7:86:13:8c:73:cb:d3:b0:aa:10:2f:ac:ff:65:
69:b3:18:1b:31:ff:3a:13:27:a7:3f:ba:fb:a6:bc:
a7:23:e0:78:82:ba:c0:d4:7b:a0:97:2a:ef:12:e6:
c2:13:5f:10:62:c2:33:32:16:84:0a:24:6c:46:b1:
8e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:65:66:82:40:FF:59:F9:B3:B7:A5:64:98:36:5A:F4:05:04:F1:67
X509v3 Authority Key Identifier:
keyid:D0:BD:40:EF:34:06:64:71:5C:8C:2C:FA:50:E3:D6:1B:A2:86:E0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ca:77:4d:8b:0f:70:63:68:0f:2b:0b:55:66:57:9f:dc:dd:
57:0b:f7:96:16:e8:fb:af:dd:38:f8:4f:2b:d5:f4:48:7d:f3:
66:41:f6:f9:4c:a5:ef:78:07:b9:63:58:3d:b8:82:58:0f:ce:
e8:1e:e1:ed:64:2c:bb:3e:8e:c8:34:25:0f:d6:15:97:b4:b9:
ec:13:c0:9d:b1:c2:53:44:31:66:d1:30:b5:fd:1f:db:ad:59:
02:37:18:9a:78:dc:d3:ca:be:11:95:ff:74:bb:66:15:4f:d7:
d2:e6:d2:69:42:5f:ca:f9:62:39:94:83:ab:fa:65:9e:60:eb:
85:37:a3:16:2c:99:fb:11:53:a1:91:0a:df:65:29:15:ba:70:
4f:45:53:f1:f7:df:99:5c:3e:bc:ba:e3:0d:b2:9f:3f:6b:3e:
81:87:e8:1b:0e:c9:22:cb:a0:bf:38:db:41:54:c5:9f:d2:55:
8a:d3:c3:dd:f5:13:99:98:79:12:3f:26:3c:5e:7f:c6:bd:60:
9a:89:03:3f:09:87:43:eb:99:9c:98:af:5d:bc:04:f1:58:92:
ee:45:c4:62:42:a8:46:7f:27:e5:91:9b:a4:0b:bf:f0:e0:0d:
7a:92:ea:70:40:3f:ba:e6:e1:31:bf:93:25:a9:da:a0:41:05:
fe:fe:c8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:44:52 2026 by rpki-client