Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
File: 0hNMcoigwXozuLX-jFgGa0RC8YM.mft (raw, json)
Hash identifier: e0pMf2PEbE0+vMqJQ7iPXjg43E5h8NtUFH0IT7pxH28=
Subject key identifier: F0:71:1F:B0:0C:02:36:9E:A2:38:84:70:53:60:2A:77:C2:EF:54:BD
Authority key identifier: D2:13:4C:72:88:A0:C1:7A:33:B8:B5:FE:8C:58:06:6B:44:42:F1:83
Certificate issuer: /CN=d2134c7288a0c17a33b8b5fe8c58066b4442f183
Certificate serial: 019CAC0FA15FCB8268247A5C69A961E20ED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
Manifest number: 0678
Signing time: Mon 02 Mar 2026 01:00:31 +0000
Manifest this update: Mon 02 Mar 2026 01:00:31 +0000
Manifest next update: Tue 03 Mar 2026 01:00:31 +0000
Files and hashes: 1: 0hNMcoigwXozuLX-jFgGa0RC8YM.crl (hash: n5r0pAVPAnTKP9AOXcwI6cxUDD7xHaNybfqfloXniSk=)
2: snrfUjBn7hs_JXI-JDADVPqBfu0.roa (hash: chl5WtQulq1NJ8dnVwRq5DKzxSTQgdztVrgONAQmO1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:a1:5f:cb:82:68:24:7a:5c:69:a9:61:e2:0e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2134c7288a0c17a33b8b5fe8c58066b4442f183
Validity
Not Before: Mar 2 01:00:31 2026 GMT
Not After : Mar 3 01:00:31 2026 GMT
Subject: CN=f0711fb00c02369ea238847053602a77c2ef54bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:49:64:e5:1e:9c:6c:be:0f:dd:de:7f:d9:66:
38:cd:b8:c6:26:82:a2:bf:55:c9:9a:09:61:db:8d:
f2:ba:05:d5:bd:b3:e1:8c:2c:a6:3c:0c:4e:01:5d:
23:8c:29:39:6d:21:b3:f4:89:b5:9f:bc:fb:95:10:
8a:28:ad:13:a0:cd:c4:53:6f:f7:58:9e:3d:da:08:
60:0e:75:ab:67:79:04:d6:f0:f3:9d:31:63:bf:f7:
10:0b:7d:4b:11:fe:c1:94:cd:76:3f:b0:b0:6d:d9:
76:42:4a:ca:91:24:f8:fb:10:6d:cd:7d:6c:91:bc:
a5:c1:33:d5:d2:32:b5:9b:b6:39:23:17:ef:e1:83:
98:21:e9:a6:79:e6:e4:7b:3b:73:8c:bf:53:23:86:
53:fa:22:5f:d0:39:19:b5:6e:a2:f6:f8:35:3e:fd:
25:c2:d3:7b:5e:a5:2f:b9:a0:a0:fe:71:40:70:9e:
50:e3:78:49:bb:6a:06:fc:da:40:d2:bc:81:f2:fb:
e9:b9:02:a1:d1:f1:ea:05:4d:4c:e6:32:d0:03:66:
dd:46:92:5b:47:20:aa:a9:88:e5:36:84:96:b9:ec:
ae:90:dc:8e:b8:e9:ca:01:ae:72:ca:cb:ef:df:19:
36:9a:9a:b2:7a:ef:bd:a6:97:da:bc:7e:6f:3b:69:
25:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:71:1F:B0:0C:02:36:9E:A2:38:84:70:53:60:2A:77:C2:EF:54:BD
X509v3 Authority Key Identifier:
keyid:D2:13:4C:72:88:A0:C1:7A:33:B8:B5:FE:8C:58:06:6B:44:42:F1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:38:ab:36:75:b6:80:49:36:18:61:01:50:36:54:88:c6:39:
e3:5a:8d:70:6b:c6:46:e4:d8:77:e0:4c:14:2e:1d:e3:2d:70:
69:1c:99:f1:67:6d:c7:98:a9:44:a2:dc:6c:eb:53:21:c1:12:
de:f4:90:11:b3:7a:01:a0:d3:a6:b5:03:17:8e:a4:21:d0:83:
6e:36:d7:e6:5d:16:1d:f7:56:5b:21:5e:54:cf:fc:2e:70:63:
ce:0e:49:48:16:98:c2:f5:da:09:69:ee:9f:0a:49:a6:c9:76:
41:41:00:ed:98:2e:1a:84:01:ae:70:91:07:30:eb:d8:0f:81:
6e:d1:bf:50:be:bb:5d:ed:11:49:4e:cd:b5:57:93:f4:a8:58:
21:80:09:a6:fd:56:79:6e:b6:bd:42:be:59:0d:d7:f4:db:2c:
02:43:68:9f:da:90:b9:de:15:59:3a:31:90:f5:84:70:69:c8:
2d:1c:ec:b3:8a:bf:a6:d4:69:f5:2f:b8:45:5f:1e:f2:e4:e8:
f0:5a:57:fe:e3:c3:41:0e:ac:24:1f:cd:e1:2c:5a:c1:13:4e:
3a:ed:0d:be:6f:ed:01:59:73:87:bf:a1:e1:91:f5:2c:52:66:
d8:d4:32:f0:dc:3d:96:9d:70:e9:2f:2b:70:05:78:26:e3:f9:
93:37:ef:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:32 2026 by rpki-client