Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
File: 0pigcUzBvyWsfH8c9sKIbIxhkqM.mft (raw, json)
Hash identifier: BxOswP2p071RVmtvJ/xvFXzPGnssXDvdhb0JaYdcy4A=
Subject key identifier: 1B:6B:3E:30:2C:41:E7:21:6D:EE:F5:8F:EA:15:8C:81:99:4E:E6:D2
Authority key identifier: D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3
Certificate issuer: /CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3
Certificate serial: 019CAC7E06683B882CC112760D17A464B825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
Manifest number: 05C2
Signing time: Mon 02 Mar 2026 03:01:06 +0000
Manifest this update: Mon 02 Mar 2026 03:01:06 +0000
Manifest next update: Tue 03 Mar 2026 03:01:06 +0000
Files and hashes: 1: 0pigcUzBvyWsfH8c9sKIbIxhkqM.crl (hash: 6twp9Pm0L1j/lmlaqnYkPLAOj6Zasa9wSsLNoviWpOY=)
2: cMXu7WrvsmC-lThLKVR5Js2GYXY.roa (hash: EpVFpanfzZyTV+MCY5Rt4j7mVt0TS3sr2EacwZSVOVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:06:68:3b:88:2c:c1:12:76:0d:17:a4:64:b8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d298a0714cc1bf25ac7c7f1cf6c2886c8c6192a3
Validity
Not Before: Mar 2 03:01:06 2026 GMT
Not After : Mar 3 03:01:06 2026 GMT
Subject: CN=1b6b3e302c41e7216deef58fea158c81994ee6d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:30:f0:01:23:ba:f4:9b:fd:35:ae:6d:eb:35:
c5:24:b3:fa:db:17:7f:c1:3f:08:58:ea:aa:d4:4f:
ba:18:47:96:f1:77:aa:5b:7e:c1:3a:c4:23:fd:94:
33:5a:30:47:33:d2:94:6a:62:c1:12:94:df:ba:99:
4d:be:95:3f:87:36:f0:d7:ea:06:76:02:5b:58:80:
e1:e3:dc:e9:c8:da:3f:ab:d8:39:7a:0d:1f:ee:bf:
3d:5d:88:1a:44:c1:9b:e3:46:c6:1b:c7:51:0d:4b:
d8:86:e5:2b:4e:30:1c:52:08:d8:99:d1:c1:bb:7d:
2d:1d:c8:41:83:73:ab:51:7c:d0:ea:e6:7a:d2:37:
43:0e:ed:a7:a5:05:11:fe:98:6b:cb:3c:6a:62:d5:
23:86:e4:da:b1:57:83:4a:24:52:6c:37:7b:a1:85:
a7:a0:7b:2d:ab:13:f0:72:60:b1:a0:b1:84:59:ce:
9c:31:ab:9c:b1:e8:90:f8:90:21:06:55:9b:e9:ab:
a3:3b:91:38:db:09:3d:57:e2:d8:aa:09:b5:52:1c:
71:4a:36:98:5a:67:88:49:fa:7a:1d:69:d7:27:56:
ac:7f:82:1f:a6:e8:ce:7b:e1:64:64:4e:78:81:cb:
f2:f7:59:ed:4f:3d:b9:c5:29:ac:48:cc:f6:a7:f8:
a4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6B:3E:30:2C:41:E7:21:6D:EE:F5:8F:EA:15:8C:81:99:4E:E6:D2
X509v3 Authority Key Identifier:
keyid:D2:98:A0:71:4C:C1:BF:25:AC:7C:7F:1C:F6:C2:88:6C:8C:61:92:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0pigcUzBvyWsfH8c9sKIbIxhkqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d97aea-fa32-46da-851e-75a4725aa6fd/1/0pigcUzBvyWsfH8c9sKIbIxhkqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:fc:29:e9:e1:a8:2c:dd:64:e1:64:ef:ed:a0:35:9a:b2:88:
53:1b:9a:9e:2a:1c:18:73:df:df:93:cb:8e:5f:3b:10:ff:df:
56:1c:cf:ff:4b:24:a7:43:fc:0e:ae:a1:7f:46:fc:e5:59:ab:
fe:e7:0b:f3:f1:66:c1:c1:2b:ca:79:e5:4d:31:24:a2:47:5f:
2c:00:ef:58:f3:46:b8:f7:b1:b3:0d:c9:48:6b:5c:49:65:9e:
9c:fa:91:4e:09:b5:4e:32:66:8c:03:3c:6f:2b:fa:83:33:f0:
b3:65:f4:97:8b:d0:e3:f9:95:ac:82:95:c7:ca:5a:13:b9:a2:
38:d8:38:43:ab:f4:b2:59:3b:8e:b9:96:b2:19:a9:30:2c:15:
57:35:c9:2f:b8:75:64:89:56:64:a6:95:5e:eb:5e:38:89:3d:
e7:38:1e:07:b1:d4:3a:67:83:ec:dc:36:bd:ff:ec:36:41:46:
bd:26:e8:8b:fe:7e:b5:82:ca:30:df:46:03:6a:6f:b2:2b:e3:
76:fa:ab:78:e3:51:25:81:ab:a3:b8:b8:42:84:fe:e7:3a:b9:
47:ef:0b:78:cd:5d:cb:41:4b:d5:62:d4:01:48:96:fa:3c:de:
43:a6:75:03:b2:14:c2:20:b6:34:04:1f:cb:b2:d3:29:a0:76:
71:53:ac:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:44:48 2026 by rpki-client