Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
File: 0PT6gHWHU7JDohZe3ep12-7oJsQ.mft (raw, json)
Hash identifier: 3b55V9ykc9nalBvVjaTcFzury8z2YhBS2Iu8Yb86VW0=
Subject key identifier: 66:8E:21:01:A7:7C:C2:8D:09:7C:73:4E:02:43:5A:C0:FA:D9:50:E2
Authority key identifier: D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4
Certificate issuer: /CN=d0f4fa80758753b243a2165eddea75dbeee826c4
Certificate serial: 019CA97D70414C1C07D74C83AEF96862DC4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
Manifest number: 1331
Signing time: Sun 01 Mar 2026 13:01:35 +0000
Manifest this update: Sun 01 Mar 2026 13:01:35 +0000
Manifest next update: Mon 02 Mar 2026 13:01:35 +0000
Files and hashes: 1: 0PT6gHWHU7JDohZe3ep12-7oJsQ.crl (hash: oTqK4TIVhlbPdhYGZgr1O6rhllNB6NwvKDH61wE+l74=)
2: pLi1qq2wcSmdgCiUnjjCoQErQdA.roa (hash: 7prO26MADaOtqZ/YBeNHajM4pUEvbdbYtkMA592/T+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:70:41:4c:1c:07:d7:4c:83:ae:f9:68:62:dc:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f4fa80758753b243a2165eddea75dbeee826c4
Validity
Not Before: Mar 1 13:01:35 2026 GMT
Not After : Mar 2 13:01:35 2026 GMT
Subject: CN=668e2101a77cc28d097c734e02435ac0fad950e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:08:5f:14:22:d6:39:98:52:a8:31:d6:05:42:
d6:54:d4:7a:6f:b9:a2:32:b0:ac:d1:ef:cd:7a:d5:
aa:0e:44:e2:46:c3:c5:53:3d:31:9f:c9:9d:6a:c5:
ed:1d:d7:fe:ea:54:b7:14:9c:78:c0:36:4d:e6:94:
0c:ec:2f:80:c8:73:08:4c:80:f5:d4:ae:80:88:41:
43:36:75:df:3e:00:b8:7d:65:08:e0:a3:2f:fd:79:
a8:97:d4:b5:bd:6a:55:c8:c6:ee:7a:e8:30:a9:d1:
f3:e1:ed:08:cf:8a:26:ea:73:81:dd:50:95:fc:86:
12:db:dd:22:63:d8:1b:29:f9:81:3d:10:c5:c8:b0:
2c:74:c0:c9:7b:ea:00:df:19:2f:d7:31:e1:2d:06:
fa:cd:a3:49:10:3c:fb:3f:0b:d3:0e:32:4b:99:cb:
d1:15:e0:13:c2:66:66:d7:f8:a6:1d:c2:37:61:5b:
c2:4d:e9:8f:1e:bd:5b:99:c8:87:aa:55:a7:8f:04:
1e:2a:53:9b:5d:96:f0:7f:0a:57:35:d9:5c:27:63:
f6:1c:d2:27:e8:bf:60:d7:55:ab:da:9a:36:69:29:
82:1c:54:1a:91:a8:4e:3e:30:4f:ea:c6:cf:d1:8b:
72:e5:c4:81:1f:88:b1:48:73:28:51:a6:8f:14:39:
ce:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8E:21:01:A7:7C:C2:8D:09:7C:73:4E:02:43:5A:C0:FA:D9:50:E2
X509v3 Authority Key Identifier:
keyid:D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:46:4d:92:ea:fa:dc:1b:33:66:12:8f:90:2c:83:61:f8:d0:
34:c5:04:d1:dd:02:f4:11:39:ca:c7:21:8f:cb:4f:c8:14:7b:
cf:c0:c6:f3:ab:b5:0f:6f:1f:3a:0a:a1:93:5e:54:a0:01:cd:
52:2f:69:58:c4:d6:7f:2f:f0:2d:07:23:c8:33:f0:4d:76:fc:
87:80:9b:09:2b:df:77:1a:f9:a1:f5:55:bc:41:0f:e7:63:87:
9b:9e:df:4a:be:95:04:10:40:b0:6d:c2:7a:cf:83:5e:4d:80:
7c:20:a2:d4:9b:a8:17:cd:c6:72:98:d6:b2:98:3b:30:18:80:
f0:82:dd:50:d0:90:50:89:52:58:61:01:c1:45:75:ec:b4:3b:
e1:d6:7c:e6:37:59:30:bc:f4:b8:69:40:9c:06:64:53:ce:d2:
45:98:55:85:50:61:db:2e:d0:e8:34:29:1c:ed:b7:1e:0c:2b:
23:98:91:ef:23:1a:15:3c:b2:59:21:aa:7f:36:1a:ae:67:cb:
d5:29:7d:1a:48:25:2f:bc:da:86:61:d5:3f:55:52:6e:18:d0:
ba:61:8e:26:b4:7a:bb:86:07:fa:67:5b:90:22:f1:c3:e2:79:
37:fa:95:fa:8f:d8:6f:cc:47:d8:fa:df:7a:30:d4:83:10:85:
63:59:83:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:14:14 2026 by rpki-client