Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
File: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft (raw, json)
Hash identifier: 1s1xnr1WkZh3MeKY/WlkiPuV46Unx7xaqPy/ybfNaDU=
Subject key identifier: 39:E8:B5:CA:E3:6F:84:E7:A3:4B:54:2A:83:59:EB:BC:C4:94:43:C3
Authority key identifier: D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
Certificate issuer: /CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Certificate serial: 019CAAC62FCDF0C717823A09F7E13CEAD77F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
Manifest number: 156C
Signing time: Sun 01 Mar 2026 19:00:40 +0000
Manifest this update: Sun 01 Mar 2026 19:00:40 +0000
Manifest next update: Mon 02 Mar 2026 19:00:40 +0000
Files and hashes: 1: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl (hash: kgqfHdG+yDrW9op/UkGRZtVHehAgNchWqDxl93OSCwM=)
2: 1-fLD9auB23Q-KgYeQIubXO96o4Q.roa (hash: /JJTz3wE1LRLJ7bz0AIRldwzfH3lc1HU/FwtYIJiaSU=)
3: T-8JhhcHQ5cIwEg6IG4tP0d0W4I.roa (hash: 9CdFc+e0Ar1W8fwX0HTyCIb5Mdz7Fe3CEQ/bMI8Efhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:2f:cd:f0:c7:17:82:3a:09:f7:e1:3c:ea:d7:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Validity
Not Before: Mar 1 19:00:40 2026 GMT
Not After : Mar 2 19:00:40 2026 GMT
Subject: CN=39e8b5cae36f84e7a34b542a8359ebbcc49443c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b3:ec:25:ca:10:1a:db:f3:7b:4d:21:83:ee:
17:e8:eb:b7:e8:52:1a:02:53:58:75:3d:ca:ee:27:
23:22:71:28:99:65:11:6e:8d:43:76:fe:98:67:c2:
79:ff:7d:88:53:0d:38:f0:02:6c:e7:93:2a:21:45:
35:4c:af:af:8b:55:63:78:f2:8b:60:6c:3d:3d:87:
70:fd:3d:8a:8e:1a:f0:20:92:aa:2d:04:73:ac:83:
f2:9c:85:d9:5a:8c:3d:61:4c:bd:18:9e:5f:69:5c:
e9:bd:09:6e:22:e7:95:7f:ec:4b:6a:33:2b:f0:20:
0e:b7:a0:4b:5e:55:6d:a9:e7:e6:88:b5:88:d6:f2:
a7:ea:6a:5e:97:92:eb:3d:6e:8a:0d:58:f8:71:75:
ab:c6:d4:eb:d4:78:06:0c:c3:04:dd:c8:2c:d5:19:
12:c0:48:55:38:56:06:ab:c5:bc:fe:d0:bf:ed:97:
eb:30:9f:78:e6:3f:3b:66:0a:c5:bf:ca:1b:33:e5:
ec:ed:f9:9f:77:7d:34:f5:0a:6b:b2:bd:48:1b:c4:
19:0e:76:56:c8:f3:45:8d:e1:01:59:6e:7c:e9:f6:
d4:e0:47:d8:10:41:20:56:84:0d:08:71:21:72:d4:
6f:e9:e7:b0:03:ce:b8:82:0d:2d:89:89:d2:7e:76:
6d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E8:B5:CA:E3:6F:84:E7:A3:4B:54:2A:83:59:EB:BC:C4:94:43:C3
X509v3 Authority Key Identifier:
keyid:D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:4f:bc:54:a1:c3:3f:a9:d2:c7:4f:fc:8f:fe:ab:e5:0d:08:
34:cf:df:d4:96:dd:9f:12:2a:d7:17:08:89:0d:ed:f2:00:05:
be:4c:1b:98:e1:2c:70:72:b6:cd:93:82:55:6c:d9:16:3e:1f:
65:9f:f6:b9:6a:9e:2e:bf:ff:83:9d:0f:da:0c:28:22:70:20:
2d:01:9b:47:8c:d4:e9:fd:ab:f1:39:e9:2a:6f:ab:30:37:dc:
f6:f1:80:03:8a:84:43:56:21:cf:95:cc:ac:e9:3c:c5:cc:4b:
1a:3f:ff:71:3b:1d:dd:4b:84:9b:74:c1:bc:ca:b4:89:5c:d1:
f9:4f:99:77:95:d3:d4:c3:8f:a9:a8:7f:d1:ba:44:6e:a3:29:
35:6b:6d:18:eb:51:60:bc:2c:25:64:6d:a1:fc:9f:d2:17:46:
00:8c:ba:37:03:60:33:fd:88:c6:8d:8a:90:93:1d:5a:8b:ab:
3b:91:7d:c1:07:92:b4:09:23:44:15:5d:33:11:dc:f1:5d:6f:
ba:88:23:84:5b:a2:a0:bd:7f:10:07:b3:04:89:43:58:7a:a4:
d8:a5:26:5a:f1:5a:db:57:ed:fa:54:f8:28:df:70:57:6b:0d:
b6:b0:c5:29:34:60:08:ce:af:5b:39:ff:e1:91:05:75:8e:95:
f0:68:d6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:10 2026 by rpki-client