Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
File: 0RaDXQN3hmIKnp96DjYEmLtlQSc.mft (raw, json)
Hash identifier: 3V912gQgkGEBoW8wqzGRMgJl2tpk8u/T8JLf8y9rQc8=
Subject key identifier: 10:3B:A9:AB:E6:BD:E5:53:FA:47:3F:AE:CC:44:C9:12:5D:85:92:2B
Authority key identifier: D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
Certificate issuer: /CN=d116835d037786620a9e9f7a0e360498bb654127
Certificate serial: 019CAC47784A0D244E421B3EEEACF6E73E9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
Manifest number: 0C5E
Signing time: Mon 02 Mar 2026 02:01:30 +0000
Manifest this update: Mon 02 Mar 2026 02:01:30 +0000
Manifest next update: Tue 03 Mar 2026 02:01:30 +0000
Files and hashes: 1: 0RaDXQN3hmIKnp96DjYEmLtlQSc.crl (hash: JZUvkp91qV4TprjIMOjNKJ2BcKIaa2kCC4vwqIQ4Eto=)
2: GxXxtmytTeePZFqMmjKewv0phDk.roa (hash: DQNMt4Qmq5pWK/m+65wngsoZgA7+I6etgVuEFLBf9P8=)
3: hrfVvtnK2yUD8q8kqhgwgxBrIWA.roa (hash: knPxWaldCF2NZQN6BPLTcSuiJLTa63/Ehra1OYIbZUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:78:4a:0d:24:4e:42:1b:3e:ee:ac:f6:e7:3e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d116835d037786620a9e9f7a0e360498bb654127
Validity
Not Before: Mar 2 02:01:30 2026 GMT
Not After : Mar 3 02:01:30 2026 GMT
Subject: CN=103ba9abe6bde553fa473faecc44c9125d85922b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:dc:59:77:d6:f6:7f:a8:19:28:0a:32:46:71:
75:7e:e7:6a:2d:9b:65:58:a3:92:27:40:6f:7f:15:
4f:9f:e2:a0:b8:74:5f:b4:1e:cd:8f:3e:96:d3:c1:
c1:ce:6b:ed:7b:83:fb:cc:ac:66:39:3c:2e:d7:da:
43:e1:23:ed:4e:f9:d5:7c:36:61:d9:e5:dd:8e:42:
90:8e:4b:56:2a:40:48:c2:5e:fe:5d:87:5d:22:07:
8f:46:2d:b6:fc:d9:e4:29:c5:9f:8c:59:5d:66:e9:
d6:e6:29:d9:8a:dd:18:12:60:a6:16:78:ed:02:2c:
41:cf:d8:6d:3f:5f:77:31:b7:4f:e2:fa:96:08:aa:
38:2c:28:1d:ad:96:01:5d:ba:f4:6f:5a:9e:76:7b:
f2:90:47:b5:c9:c2:4b:b0:8d:9b:76:0f:96:7c:83:
c0:46:1f:6c:92:a2:82:b1:01:a5:97:c9:5f:fd:c3:
05:3c:1c:fd:d9:7d:15:e9:12:c9:83:6c:e3:af:e2:
a8:57:b6:5d:a2:1a:c4:64:aa:12:f1:d5:a6:a9:78:
c1:d9:f6:d4:7a:55:e3:16:4b:61:b5:69:29:25:79:
f2:df:61:83:e4:6b:2a:af:e1:80:81:9e:63:53:86:
50:9f:fc:ad:a6:fa:d0:ed:46:71:18:53:e9:18:c8:
93:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3B:A9:AB:E6:BD:E5:53:FA:47:3F:AE:CC:44:C9:12:5D:85:92:2B
X509v3 Authority Key Identifier:
keyid:D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:85:12:ba:64:8b:8a:ea:be:77:5d:be:17:25:70:c7:eb:ac:
70:be:80:f1:f3:e1:cb:fc:f3:75:b9:9d:1d:0c:7a:4c:41:33:
e9:7a:0f:d7:bb:7d:6e:cc:dc:dc:e1:ab:cb:93:1c:12:ce:3b:
84:f9:b5:25:61:85:ec:65:f5:a6:a5:6c:45:84:c4:a8:93:64:
5e:23:93:a0:51:2c:4c:ea:e5:e4:d1:8d:8a:c9:73:fc:7d:29:
a2:45:2e:5f:7b:e0:6f:3b:1c:71:5a:a8:19:34:25:27:a1:ad:
96:e3:59:5c:46:e7:72:11:21:83:e5:8d:12:1c:e0:76:e1:0a:
77:24:b0:0f:89:d7:f4:83:d5:9d:7a:f7:df:49:ca:ff:f0:8b:
6e:db:d7:ed:8a:bc:94:90:a8:09:ef:f6:02:79:18:2c:59:88:
02:9b:c3:68:dc:17:a2:51:53:d3:5e:20:8f:f0:b3:b0:35:a5:
63:20:d1:c9:04:a6:0f:0a:e6:47:73:67:b3:7e:36:9f:d5:5b:
1e:16:dd:b2:97:4b:e1:14:db:5d:2e:07:a4:f9:f2:a5:b6:b2:
bd:6b:2a:b2:8e:6f:d4:a4:1e:d6:11:7b:7e:94:f4:28:62:ee:
5d:95:6d:c0:1a:7e:39:e5:f7:e4:89:dd:32:5b:52:31:ec:7d:
b4:77:6a:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysR3hKDSROQhs+7qz25z6eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMTY4MzVkMDM3Nzg2NjIwYTllOWY3YTBlMzYwNDk4YmI2
NTQxMjcwHhcNMjYwMzAyMDIwMTMwWhcNMjYwMzAzMDIwMTMwWjAzMTEwLwYDVQQD
EygxMDNiYTlhYmU2YmRlNTUzZmE0NzNmYWVjYzQ0YzkxMjVkODU5MjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdxZd9b2f6gZKAoyRnF1fudqLZtl
WKOSJ0BvfxVPn+KguHRftB7Njz6W08HBzmvte4P7zKxmOTwu19pD4SPtTvnVfDZh
2eXdjkKQjktWKkBIwl7+XYddIgePRi22/NnkKcWfjFldZunW5inZit0YEmCmFnjt
AixBz9htP193MbdP4vqWCKo4LCgdrZYBXbr0b1qednvykEe1ycJLsI2bdg+WfIPA
Rh9skqKCsQGll8lf/cMFPBz92X0V6RLJg2zjr+KoV7ZdohrEZKoS8dWmqXjB2fbU
elXjFkthtWkpJXny32GD5Gsqr+GAgZ5jU4ZQn/ytpvrQ7UZxGFPpGMiTRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBA7qavmveVT+kc/rsxEyRJdhZIrMB8GA1UdIwQY
MBaAFNEWg10Dd4ZiCp6feg42BJi7ZUEnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFJhRFhRTjNobUlLbnA5NkRqWUVtTHRsUVNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9mNTA3Y2ItNzM3MS00YWQxLWI3ZTMt
MTZhN2Q2MGQ1YmVhLzEvMFJhRFhRTjNobUlLbnA5NkRqWUVtTHRsUVNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9mNTA3Y2ItNzM3MS00YWQxLWI3ZTMtMTZhN2Q2MGQ1YmVh
LzEvMFJhRFhRTjNobUlLbnA5NkRqWUVtTHRsUVNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd4USumSL
iuq+d12+FyVwx+uscL6A8fPhy/zzdbmdHQx6TEEz6XoP17t9bszc3OGry5McEs47
hPm1JWGF7GX1pqVsRYTEqJNkXiOToFEsTOrl5NGNislz/H0pokUuX3vgbzsccVqo
GTQlJ6GtluNZXEbnchEhg+WNEhzgduEKdySwD4nX9IPVnXr330nK//CLbtvX7Yq8
lJCoCe/2AnkYLFmIApvDaNwXolFT014gj/CzsDWlYyDRyQSmDwrmR3Nns342n9Vb
HhbdspdL4RTbXS4HpPnypbayvWsqso5v1KQe1hF7fpT0KGLuXZVtwBp+OeX35Ind
MltSMex9tHdq6w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:01:02 2026 by rpki-client