Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
File: 0sHV_U4greXxG2avsQpUyP_ksEA.mft (raw, json)
Hash identifier: g9EMTMqj4MUZCIqJNZNOdd8gf17vsSlsLSVkd1c0Ao8=
Subject key identifier: 9F:D5:D4:53:00:6D:4D:D7:1B:A7:AB:4C:C0:C0:AF:F8:EC:ED:9F:48
Authority key identifier: D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40
Certificate issuer: /CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040
Certificate serial: 019CA945BD06681CC88ADFBD39EE66BA9542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
Manifest number: 1706
Signing time: Sun 01 Mar 2026 12:00:45 +0000
Manifest this update: Sun 01 Mar 2026 12:00:45 +0000
Manifest next update: Mon 02 Mar 2026 12:00:45 +0000
Files and hashes: 1: 0sHV_U4greXxG2avsQpUyP_ksEA.crl (hash: q46d3ojHFYA3bmWkcxHa/umgQVOM4eN/qWBtj6sNezA=)
2: HXdTxxWcJtGk43e4sYB_pqFMLTc.roa (hash: RsmEntoDX046XG0OnjFT3g2UwaVd62q2eGZGnABzJrY=)
3: aAz2084YN5AIEG28w26S7CIam4E.roa (hash: aLh2/I7u2RUBoHwMQV1fEF1N56viK2J9i2I4M3Pdo98=)
4: xjT1qO5EWxpQrrhnqAJVt7vBTz4.roa (hash: jjMJpW6iAOXQaad1T6wVanui4hCLnhsX9J2X5epM//8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:bd:06:68:1c:c8:8a:df:bd:39:ee:66:ba:95:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040
Validity
Not Before: Mar 1 12:00:45 2026 GMT
Not After : Mar 2 12:00:45 2026 GMT
Subject: CN=9fd5d453006d4dd71ba7ab4cc0c0aff8eced9f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4c:11:c5:d4:a4:59:d3:87:f9:c7:7e:ed:dc:
ed:fb:f9:0b:e6:c9:ac:5f:a1:77:38:9a:41:1b:e3:
b7:33:32:fa:87:33:c2:38:df:c6:f0:a2:4b:0c:3a:
1f:b2:ef:e8:e8:22:db:46:21:e3:9d:9c:e6:74:a6:
12:a0:2c:af:d9:c8:52:88:44:d0:b0:a0:f6:31:78:
ef:61:93:49:3e:2a:3b:d1:30:bd:f5:54:ec:fa:4b:
6d:c0:9d:bd:ce:bb:c4:38:c6:05:03:32:16:ae:8e:
23:b9:30:cd:fa:61:27:96:b7:b1:c6:c7:b2:2e:d9:
37:49:af:34:d0:e3:aa:ad:59:27:b4:c2:64:a3:ce:
aa:81:9b:f9:42:7a:b2:af:3a:8b:0c:1d:4e:9b:30:
09:9e:d6:9a:2c:eb:3b:74:b0:64:d0:ae:96:dd:0d:
0d:fd:4c:f6:7d:bb:d4:a1:33:54:4a:80:c3:0f:a5:
b0:a7:b0:25:4a:12:a1:6f:5f:ce:bf:29:8a:49:48:
39:dd:34:5a:51:fc:74:6f:b3:ae:8a:48:6b:1e:10:
d2:74:ef:54:4a:62:81:cb:fb:dc:db:7d:9a:3b:4b:
bc:f1:d9:df:4c:fd:e4:df:eb:64:d8:41:36:4e:99:
12:53:92:45:10:5f:ef:9d:8a:ac:22:56:35:18:b8:
42:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D5:D4:53:00:6D:4D:D7:1B:A7:AB:4C:C0:C0:AF:F8:EC:ED:9F:48
X509v3 Authority Key Identifier:
keyid:D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:66:af:04:d8:9e:23:94:f7:b6:36:53:fd:46:92:da:62:14:
cd:f2:9c:80:9a:45:ef:f7:8f:9a:8d:b2:93:0f:2b:65:db:8b:
d7:61:09:10:b0:78:25:52:7a:e6:8d:dc:98:f0:0f:41:d4:69:
b8:9f:01:6a:7c:a6:62:8a:d7:9b:f5:fc:40:77:2a:eb:78:af:
c7:e4:9d:28:03:14:65:b3:f8:a7:8a:93:c0:70:e8:cf:e5:8c:
da:f8:3f:35:87:15:50:59:3f:10:47:b5:2a:38:d4:da:d7:c6:
07:10:46:08:76:42:b7:fb:ae:ca:92:89:e2:35:b8:cf:fa:de:
d9:82:e4:4e:77:20:43:8e:8b:45:56:9b:91:82:8c:a5:7b:92:
a4:e6:73:a9:24:41:a7:67:42:74:ca:4d:fd:79:a2:fd:c7:e6:
88:e5:ee:a2:bb:dd:11:3e:ca:13:21:e8:85:db:55:27:72:ab:
9b:ea:cf:f5:e6:a2:e8:91:86:17:c0:74:bd:32:ad:8a:43:c6:
7b:0b:aa:8a:a4:05:60:fb:e5:ac:e4:7b:a8:30:37:ec:12:0a:
f4:97:b5:2f:22:ab:c1:90:b4:73:18:85:9b:23:ac:4b:27:d5:
63:b4:19:5c:51:58:b1:89:dd:81:57:df:ae:8e:5e:d3:c8:97:
60:46:98:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:00:05 2026 by rpki-client