Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft
File: 0Mv2ugl6drYQyFYDW8GN55fCpnc.mft (raw, json)
Hash identifier: /56UsT2x3Y54ebdRyznaDkzBg3d5Va+zl8lT0FVoJ/A=
Subject key identifier: 5A:80:37:01:E2:C2:FD:74:96:93:1A:D6:C4:CC:BB:7C:20:0D:C4:23
Authority key identifier: D0:CB:F6:BA:09:7A:76:B6:10:C8:56:03:5B:C1:8D:E7:97:C2:A6:77
Certificate issuer: /CN=d0cbf6ba097a76b610c856035bc18de797c2a677
Certificate serial: 019CAC7DED7E8367A2389A4791A9A67CDB50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft
Manifest number: 0A30
Signing time: Mon 02 Mar 2026 03:00:59 +0000
Manifest this update: Mon 02 Mar 2026 03:00:59 +0000
Manifest next update: Tue 03 Mar 2026 03:00:59 +0000
Files and hashes: 1: 0Mv2ugl6drYQyFYDW8GN55fCpnc.crl (hash: X8KLujvsiqaEYhUKa9WOKJNEtUKONX4IH4nKXXcyCbc=)
2: DqXib1Ly2xFoTm2bjcxnicthk1w.roa (hash: g/TBWWlwOSVO9LY7Rp7QlLHadW83dAk0kFgZL+CVZlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:ed:7e:83:67:a2:38:9a:47:91:a9:a6:7c:db:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0cbf6ba097a76b610c856035bc18de797c2a677
Validity
Not Before: Mar 2 03:00:59 2026 GMT
Not After : Mar 3 03:00:59 2026 GMT
Subject: CN=5a803701e2c2fd7496931ad6c4ccbb7c200dc423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c5:b2:e1:a4:45:9e:38:f0:4a:59:db:c6:ec:
23:f0:4b:4d:00:69:ed:13:98:85:af:6c:8e:3b:7c:
13:0b:16:27:8f:29:f8:aa:38:67:0d:db:c0:27:19:
4a:72:e6:2e:cd:ac:71:57:0c:3b:34:21:fc:bb:c7:
68:01:f2:a3:53:42:f2:35:a7:f6:43:da:31:6b:25:
f5:e0:88:b4:96:da:a9:01:4a:a1:3d:9f:17:4d:b6:
d9:76:f2:88:8b:66:0b:e4:bc:7b:dd:13:51:b7:2b:
19:9c:86:80:a0:68:72:93:6e:13:51:95:12:a9:04:
2b:9f:66:a1:9c:fd:d1:3a:04:c6:94:31:c0:6e:7c:
41:5f:40:73:06:1e:2a:0b:4d:cf:62:7b:77:ee:1a:
2b:67:a3:c9:c1:03:1c:d7:a6:23:88:ba:d0:ba:e2:
36:4c:7d:66:44:9c:f3:44:73:09:fa:d2:46:96:d9:
c2:b9:87:90:ad:f3:69:b6:a7:25:1d:89:f0:ee:f3:
4e:5d:d2:06:43:22:4b:f4:4e:8d:fd:81:13:ab:14:
6c:f8:12:f8:99:f9:11:ca:33:c6:f0:78:4c:56:bc:
a6:b4:f8:b4:20:62:b0:39:e0:d2:91:70:b4:9e:58:
67:8e:71:72:2f:a7:9e:6e:7a:d8:02:c4:74:ad:d1:
29:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:80:37:01:E2:C2:FD:74:96:93:1A:D6:C4:CC:BB:7C:20:0D:C4:23
X509v3 Authority Key Identifier:
keyid:D0:CB:F6:BA:09:7A:76:B6:10:C8:56:03:5B:C1:8D:E7:97:C2:A6:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a4:52:09:3d:58:55:c6:f8:22:29:bc:71:0e:91:6d:27:39:
45:df:d0:fb:26:f5:d8:f1:3e:cc:be:a7:fa:9c:2f:e0:b2:16:
99:aa:9c:e6:05:10:dd:d8:b0:03:94:1a:9b:a8:e4:70:fe:32:
db:ca:5f:a3:69:23:2c:ef:83:9d:0b:a7:34:fe:77:58:11:a5:
02:b8:e7:13:ab:90:81:c8:3c:7a:72:fe:e0:f2:e5:7c:49:ff:
0c:f2:de:46:2f:c0:43:7a:8a:81:ae:00:0c:86:8f:0b:2f:95:
59:1f:f0:fa:ca:1b:53:ab:bc:9b:11:d8:44:69:d0:79:a1:eb:
d6:82:b1:aa:38:06:57:60:21:a9:60:36:b6:4b:19:21:35:c4:
cd:38:59:29:b4:c4:13:d4:3b:e7:86:5c:3b:52:7b:c1:57:fd:
22:0f:d6:23:8f:a4:88:4a:17:98:bb:14:b5:32:83:28:96:3c:
ad:ce:ed:26:95:69:5f:63:92:49:e8:30:be:19:a3:11:27:d9:
3c:b5:7a:6b:2a:6a:5d:68:e0:98:c3:15:d3:51:9b:52:cb:5b:
1f:6d:7b:27:ff:38:5b:8e:ef:d7:ae:94:a4:99:4b:ae:ba:29:
c5:61:b1:f7:4b:89:d3:15:b7:58:49:8c:3d:17:18:f3:51:a4:
40:7d:7d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:00:38 2026 by rpki-client