Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
File: 0mKOBpte2LRVk0O1tn9atPkiUf4.mft (raw, json)
Hash identifier: 2v0qREfXACNqBNdfdFDhhMs97TadZjhtiLVpmWMc5NQ=
Subject key identifier: FB:75:BD:43:A5:DE:BD:84:F6:9C:FF:09:63:5E:3B:E4:41:BA:FE:18
Authority key identifier: D2:62:8E:06:9B:5E:D8:B4:55:93:43:B5:B6:7F:5A:B4:F9:22:51:FE
Certificate issuer: /CN=d2628e069b5ed8b4559343b5b67f5ab4f92251fe
Certificate serial: 019CAD903B5FD8B7783C23FDBC986A49AB2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
Manifest number: 0393
Signing time: Mon 02 Mar 2026 08:00:36 +0000
Manifest this update: Mon 02 Mar 2026 08:00:36 +0000
Manifest next update: Tue 03 Mar 2026 08:00:36 +0000
Files and hashes: 1: 0mKOBpte2LRVk0O1tn9atPkiUf4.crl (hash: wh0r2VosxF00V/KtBn2WQcJwIGzBQq4vDGntWsjqlZ4=)
2: eypU5gakI37ZRxsTjD1X4DoOVfo.roa (hash: hM1K52QM5/jrbLf53wcNduMHGRDz/fwXSTlOlM9cG8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:3b:5f:d8:b7:78:3c:23:fd:bc:98:6a:49:ab:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2628e069b5ed8b4559343b5b67f5ab4f92251fe
Validity
Not Before: Mar 2 08:00:36 2026 GMT
Not After : Mar 3 08:00:36 2026 GMT
Subject: CN=fb75bd43a5debd84f69cff09635e3be441bafe18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d5:02:e0:58:31:f6:3f:d2:60:f0:c4:cf:5d:
12:f2:a7:a4:42:91:bd:3d:1e:0a:3d:03:2e:d5:20:
c8:a3:cf:11:f5:14:b0:3f:ac:96:2c:32:27:e4:d2:
d5:80:9e:95:92:ba:c4:f7:6b:c2:89:49:7e:e1:5a:
12:88:2b:76:b9:b4:38:25:d1:f5:31:f5:b5:2b:51:
58:d9:b6:6d:a4:b7:71:c0:5e:b1:9b:a1:b8:76:e8:
a9:42:dc:58:98:87:2e:59:44:ae:04:27:a0:cc:ab:
5f:7d:71:02:64:a9:3b:36:fd:01:5a:32:7f:b3:78:
22:c6:1b:37:6b:7d:ba:2c:0a:67:41:46:42:85:3a:
23:4e:8c:f0:b2:f8:18:0e:3e:7d:b8:6b:3f:9a:38:
b7:e9:36:3c:2d:7b:3d:a2:01:bd:2e:4b:a1:29:f2:
ff:db:5f:89:ff:c9:10:50:89:49:b5:38:a8:bb:73:
62:ef:cc:45:44:07:f7:20:1b:65:f1:0a:d2:bf:92:
44:5b:09:9c:6b:a1:c2:90:3c:65:ab:55:ef:cb:b7:
61:b8:54:b7:9e:5f:34:01:0c:24:6d:26:0b:28:b2:
cd:98:52:8e:bc:46:f4:1a:14:24:b5:0b:cb:a2:5b:
6f:93:8b:f7:63:f2:31:36:5e:24:b6:a2:d1:3e:89:
66:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:75:BD:43:A5:DE:BD:84:F6:9C:FF:09:63:5E:3B:E4:41:BA:FE:18
X509v3 Authority Key Identifier:
keyid:D2:62:8E:06:9B:5E:D8:B4:55:93:43:B5:B6:7F:5A:B4:F9:22:51:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e0:04:04:d2:c1:c0:7e:9e:de:f3:d7:65:8a:34:6d:04:97:
05:56:69:6c:a1:2e:0c:54:fb:fe:d6:fd:f4:a8:ce:24:cd:8b:
cb:72:b0:93:18:f9:66:26:e4:a9:0c:e7:f6:b5:5b:14:31:8e:
06:a1:b3:92:8b:4a:62:f2:90:3c:b7:73:32:50:5d:0a:2e:29:
e3:8a:ef:b8:23:6b:7c:7e:12:ed:d1:c5:7c:f5:ed:5b:ba:40:
54:93:9d:fa:e2:31:a9:4a:90:e3:e1:8f:0b:19:00:a8:ec:cc:
5b:69:25:33:84:57:57:4f:c9:1e:b2:3f:46:d5:a8:9d:c6:38:
ce:0a:67:1e:25:30:e9:42:85:c5:b2:37:37:f2:36:53:66:30:
42:a4:ea:28:62:f9:5b:d4:73:50:c5:75:e4:d2:38:69:ba:af:
10:88:38:78:f2:2d:70:81:be:b4:26:85:41:cf:95:74:c6:f6:
1e:a0:b6:44:57:c9:9f:4b:b5:d4:e9:5a:14:8e:5f:90:6a:35:
73:fa:d6:d3:b7:89:0f:92:18:aa:47:14:3a:c1:67:09:71:90:
87:c0:f6:bf:96:91:72:59:9d:52:0c:55:f5:d3:14:25:d4:8e:
11:73:10:3c:a2:11:be:8e:bc:23:84:2c:50:a6:d0:03:df:df:
80:c2:5b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:30 2026 by rpki-client