Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
File: 0QOvGXZFpJQcbNsIZprwCLeRAr4.mft (raw, json)
Hash identifier: XtrbwmCnAVrJNlvX/op6JDjF4p0kqHMNAECrGqpF8Lk=
Subject key identifier: 26:73:3C:EF:42:66:0F:D2:0B:B9:0D:8F:C0:F0:DD:A2:7A:15:52:31
Authority key identifier: D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
Certificate issuer: /CN=d103af197645a4941c6cdb08669af008b79102be
Certificate serial: 019CAA58D0AD0C3C6C96513DB58296B2AC78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
Manifest number: 11B7
Signing time: Sun 01 Mar 2026 17:01:13 +0000
Manifest this update: Sun 01 Mar 2026 17:01:13 +0000
Manifest next update: Mon 02 Mar 2026 17:01:13 +0000
Files and hashes: 1: 0QOvGXZFpJQcbNsIZprwCLeRAr4.crl (hash: lC080+Y8tAP65W3r/VHnay+j1omLDomXA2zR6VOttE0=)
2: IKgcyvSIA45izSMf7tUqa3g6d94.roa (hash: bRbSeQALCJ6vQauwQMiodJiLk0I/cBj0aUju5c7LVIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:d0:ad:0c:3c:6c:96:51:3d:b5:82:96:b2:ac:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d103af197645a4941c6cdb08669af008b79102be
Validity
Not Before: Mar 1 17:01:13 2026 GMT
Not After : Mar 2 17:01:13 2026 GMT
Subject: CN=26733cef42660fd20bb90d8fc0f0dda27a155231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:39:69:97:1e:ca:69:b8:68:a1:b2:c8:15:a6:
4d:d2:5a:66:f1:e8:39:e9:05:9c:51:43:e3:d6:13:
ee:7b:a2:25:e5:f5:63:f9:6e:23:40:9a:39:ac:c0:
bd:a6:de:ca:4a:d8:14:81:4f:d2:2a:0a:e6:a9:4d:
e4:02:97:e6:a4:c2:36:86:58:e3:f8:68:91:68:49:
e6:2c:64:08:ee:18:20:bd:43:7b:24:81:2b:17:a8:
68:7e:7c:69:e0:f2:aa:21:3a:02:85:b8:92:41:cc:
cb:ba:72:e8:e4:2d:c3:dd:7e:a9:cc:a5:0d:f8:51:
02:76:c0:72:d6:ac:44:d0:1f:00:e4:7b:a6:a1:a5:
de:30:68:12:21:e8:40:d1:8f:dc:69:05:68:94:7b:
d8:07:c4:e7:19:5c:44:87:9e:c4:a2:4d:2e:d4:27:
a7:5b:d2:d5:97:3a:19:e0:0b:a4:c7:db:a7:8e:ce:
de:37:18:2b:f9:72:5a:81:c3:74:86:72:79:f4:cd:
ae:f4:8c:61:f6:ef:47:8c:f8:fa:ff:96:e9:5a:bc:
f8:67:12:7b:22:f0:37:f6:b6:5e:e6:5d:24:17:2c:
c1:1d:92:c2:fc:fb:4c:18:f5:0c:f2:43:50:1e:a6:
a2:97:d1:e8:6b:d9:ba:de:a7:f9:3c:82:8f:d9:87:
30:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:73:3C:EF:42:66:0F:D2:0B:B9:0D:8F:C0:F0:DD:A2:7A:15:52:31
X509v3 Authority Key Identifier:
keyid:D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:10:95:75:a6:29:9a:a8:01:a4:9e:00:eb:f0:f4:05:4d:b9:
22:5f:a6:26:ba:5f:a3:a3:e2:83:5f:6d:0e:83:eb:66:bb:0e:
a4:40:73:9e:38:40:8e:1d:0e:1c:08:f7:de:8f:88:f6:b2:1c:
d1:23:34:b8:d8:e2:06:55:f7:da:6c:a9:9d:da:9e:43:db:8c:
85:bb:1f:70:07:63:46:fb:80:c1:30:c2:4c:ff:b9:b2:95:2b:
f7:a4:c0:e8:96:37:c4:b6:40:10:5b:d7:f8:43:51:02:ff:36:
c0:cb:be:71:ce:24:fd:e1:dd:b1:e5:bf:d6:e7:0d:e6:9a:27:
87:49:46:3b:df:35:b8:24:9d:20:57:fb:ad:94:7b:02:ae:83:
6a:bf:7e:d9:94:0d:65:0a:ef:8a:bc:70:22:c7:96:72:a3:32:
c4:f9:e2:0f:b1:ca:73:fa:62:f5:b4:c0:c8:de:02:12:af:a1:
55:15:5e:ed:90:94:a3:3c:9b:fd:37:f4:34:dc:34:a1:1e:a0:
dd:da:30:4d:f9:74:03:f7:9a:de:82:ec:16:8b:61:ec:80:fd:
96:25:b9:c8:32:74:7b:f3:d5:3a:b5:41:8b:8d:09:0c:26:e3:
85:d1:36:a9:4c:ef:c6:81:87:63:f2:70:1a:45:a5:0e:55:4b:
85:9b:85:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:08 2026 by rpki-client