Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
File: 0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft (raw, json)
Hash identifier: ZcV8dsLuGabJHv+cfzdRoEQLISQNQaSC+/fywLM7giE=
Subject key identifier: 10:88:BE:8E:E8:CA:AE:74:DD:63:0A:1B:5B:E9:44:32:98:A3:E4:CF
Authority key identifier: D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08
Certificate issuer: /CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
Certificate serial: 019CA9EB304C0DEA476EAC1779049F75A448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
Manifest number: 15F9
Signing time: Sun 01 Mar 2026 15:01:28 +0000
Manifest this update: Sun 01 Mar 2026 15:01:28 +0000
Manifest next update: Mon 02 Mar 2026 15:01:28 +0000
Files and hashes: 1: 0NhTEIhVVHGuhHppc2WhR24nfps.roa (hash: UAiJiA/nFpUR+80xJrPSC3HfZCrrUkoKtrqsQ8RFQsc=)
2: 0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl (hash: 3Ty8wAIQN1vLlX3+KHxb3C5iCcE+Q56vDZzbUR4EkzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:30:4c:0d:ea:47:6e:ac:17:79:04:9f:75:a4:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
Validity
Not Before: Mar 1 15:01:28 2026 GMT
Not After : Mar 2 15:01:28 2026 GMT
Subject: CN=1088be8ee8caae74dd630a1b5be9443298a3e4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d5:c7:6f:c4:80:3b:db:1e:2a:59:d1:33:75:
5d:cb:32:d0:a1:86:63:16:4c:54:f3:e7:b7:18:1c:
c3:28:dd:46:e3:8a:9c:d9:86:da:7a:16:e6:ff:45:
18:0f:2a:b9:0f:b3:bf:86:c8:54:29:ad:2d:c8:f5:
40:35:74:78:31:e2:3e:65:01:83:39:46:c3:5b:20:
3e:39:63:b7:74:71:d7:f0:e5:9b:44:3d:ca:2d:58:
ea:e9:b4:c3:be:e1:f9:2b:db:42:77:04:b1:fc:28:
f8:3e:f6:d6:48:bd:52:2e:ec:b7:37:c5:d9:f3:3f:
92:88:b0:ec:d9:02:f8:8d:f4:f8:74:18:84:4b:f9:
4e:e8:01:79:a4:af:36:53:a2:e7:06:37:3d:6b:67:
89:a0:16:d2:a0:dd:d2:35:67:7f:f0:57:7a:d4:e3:
81:5e:77:f0:10:93:86:9c:16:44:a7:33:01:fe:f0:
90:39:de:b5:ba:c0:0f:43:f7:70:55:f4:bc:6f:78:
73:39:40:b3:bc:c8:fa:82:58:64:6f:e2:6d:69:7d:
6f:f1:79:85:cf:a2:df:5c:09:4f:e0:04:01:d1:06:
a5:c3:4a:26:0b:e0:69:91:22:57:39:7b:e3:89:99:
2f:1f:15:56:3e:f8:f2:dc:b5:ee:f7:78:fe:2e:10:
3c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:88:BE:8E:E8:CA:AE:74:DD:63:0A:1B:5B:E9:44:32:98:A3:E4:CF
X509v3 Authority Key Identifier:
keyid:D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:2e:80:11:b7:45:cd:42:83:ab:53:ff:a8:c5:67:a9:4f:1d:
53:9c:2d:39:c7:2f:7d:9d:54:03:17:41:9d:9f:1b:2d:a5:02:
99:57:3c:61:5e:d2:24:d4:d2:41:27:83:18:8f:8a:c9:89:01:
b0:83:f5:a1:05:71:f7:28:bc:3d:c2:c7:ed:48:96:91:0c:c8:
57:62:6e:42:3e:81:c2:33:5d:36:5b:24:59:3c:bf:86:2e:f6:
75:de:a2:0d:17:2c:36:94:f8:2e:2d:07:ef:e5:ab:ca:97:ee:
0a:43:b4:bd:bf:19:14:49:8a:63:24:80:4a:c9:41:8b:a1:2b:
72:e0:8b:57:7c:68:9a:7b:c9:32:03:18:50:1a:9c:46:19:e1:
2b:4e:d1:f7:66:4b:c1:10:cb:75:09:7b:75:55:a8:d4:1b:c2:
5f:cc:cc:00:fc:c7:1e:7f:35:8a:80:a0:aa:fd:d1:2d:42:34:
7d:27:b7:7d:f2:3d:8f:61:8b:d5:dd:2f:ab:7b:9a:11:5d:f2:
9b:3e:41:4d:f8:91:8c:8f:ae:7c:8b:ed:e7:4f:85:32:84:f0:
8d:ee:ea:eb:47:f8:2e:ec:6e:69:bc:52:9a:22:2b:ae:0d:5a:
3f:d7:3f:9e:ec:ca:c7:b0:c1:54:6b:50:05:66:ac:5d:11:fc:
d1:62:ba:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:43:10 2026 by rpki-client