Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
File: 0NbmVQW09OT08x2QuLIaOnz7Dr8.mft (raw, json)
Hash identifier: 2Qa5NIlriEqFUpnHw9JdLA6fsBIrMUHrbS/YvVuLjnE=
Subject key identifier: 87:10:06:2D:6B:F5:D7:FE:80:B9:52:D7:85:8B:7A:0C:72:E1:C9:2E
Authority key identifier: D0:D6:E6:55:05:B4:F4:E4:F4:F3:1D:90:B8:B2:1A:3A:7C:FB:0E:BF
Certificate issuer: /CN=d0d6e65505b4f4e4f4f31d90b8b21a3a7cfb0ebf
Certificate serial: 019CAB6ACF2A9ECF8FD28902385567ECAC4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
Manifest number: 0DBB
Signing time: Sun 01 Mar 2026 22:00:29 +0000
Manifest this update: Sun 01 Mar 2026 22:00:29 +0000
Manifest next update: Mon 02 Mar 2026 22:00:29 +0000
Files and hashes: 1: 0NbmVQW09OT08x2QuLIaOnz7Dr8.crl (hash: XAjj8kk2tMq3XRAXcyiRPVLAZDWAUDYfPFUJHakukls=)
2: JB134IM9J5u4LXkvJ4iGFs0HNJ0.roa (hash: LO/2rEaU8NJadCqLNPLOuZLeub0erw3UpacAaLPm6Fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:cf:2a:9e:cf:8f:d2:89:02:38:55:67:ec:ac:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0d6e65505b4f4e4f4f31d90b8b21a3a7cfb0ebf
Validity
Not Before: Mar 1 22:00:29 2026 GMT
Not After : Mar 2 22:00:29 2026 GMT
Subject: CN=8710062d6bf5d7fe80b952d7858b7a0c72e1c92e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7a:6e:5b:e5:98:ee:1f:b2:f6:e0:1a:07:6d:
e4:7c:21:a7:9b:1a:f9:5b:da:d1:66:98:fd:6d:0d:
a8:99:d9:f8:bc:04:cc:1d:8f:af:97:88:0a:0c:ca:
95:41:d4:45:34:65:b1:fd:74:3e:b2:ee:56:be:49:
0c:eb:4a:75:e6:e8:ab:a7:b8:b8:39:ee:44:4a:4a:
18:fa:04:0c:c6:c2:dc:c9:46:c6:78:d7:65:cf:26:
0f:46:e5:82:c1:04:99:c6:01:c2:6d:64:4e:77:bb:
23:03:3f:b0:23:02:76:f6:74:19:e9:a2:6f:4f:03:
5d:70:4b:64:0e:25:d5:44:d7:c9:f1:26:3d:d7:45:
ea:06:e6:6f:0d:6f:4d:72:36:01:d5:74:d8:f1:a3:
50:24:9d:ec:4e:c2:ef:7c:70:7d:2a:1d:2e:63:9d:
f6:be:ff:c9:51:9d:1d:2c:c9:76:f4:ec:82:96:64:
c2:84:29:62:c0:17:95:bc:cc:fe:6f:84:88:30:f1:
ab:ea:3a:93:67:99:c0:24:61:21:f0:30:c0:8d:32:
2c:95:dc:4e:89:46:c1:d1:04:c8:36:cf:37:0e:b0:
79:fc:8d:05:32:9c:48:84:32:b7:67:c0:6c:5f:f7:
2c:44:0f:19:17:30:b0:c7:55:0a:5a:63:e6:08:ce:
5d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:10:06:2D:6B:F5:D7:FE:80:B9:52:D7:85:8B:7A:0C:72:E1:C9:2E
X509v3 Authority Key Identifier:
keyid:D0:D6:E6:55:05:B4:F4:E4:F4:F3:1D:90:B8:B2:1A:3A:7C:FB:0E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:0e:d0:3a:bd:c3:e1:8f:fa:76:45:96:e0:7e:89:9e:fc:66:
14:6c:47:40:9a:63:07:99:f2:b9:b4:30:8c:3c:1e:79:33:c5:
ba:3b:5b:16:fb:0a:c2:bf:f7:2c:59:58:03:41:7b:7f:1d:cb:
14:56:4a:fe:e9:7d:89:2d:6b:a4:ec:9c:e5:95:e4:3d:41:a5:
b8:61:8b:64:6e:3a:9f:7e:40:24:75:f4:b5:78:e2:15:a1:01:
a3:4d:3c:3a:04:f4:43:3f:b6:ec:55:f5:83:a8:fa:51:c5:81:
69:17:04:d4:87:14:ea:15:95:ac:6f:f1:b7:2d:f5:3a:04:e4:
9b:5e:80:1c:3b:10:35:d9:8f:97:0b:8b:be:47:69:04:45:4b:
7e:b4:65:92:b2:38:f4:b3:18:83:db:ba:6d:dc:d7:51:fb:4d:
c2:cb:87:94:04:bb:30:24:20:70:83:3a:d0:b3:d0:80:3c:de:
ed:fc:94:3d:90:29:dd:34:4e:7a:07:f3:46:9a:8f:fa:f4:6e:
58:21:e5:75:9d:d3:92:6b:4e:fa:d3:8e:59:7a:5f:08:f4:ee:
21:3e:41:83:06:de:a3:d4:28:e8:34:4b:59:dd:73:76:26:34:
13:49:d4:f2:bb:63:c8:bf:b4:41:3e:dd:5f:af:0d:38:17:34:
b6:37:36:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:36:29 2026 by rpki-client