Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
File: 0gVCphNVJBQhlMqnCOfbLMprTmM.mft (raw, json)
Hash identifier: hK02Kvfcshxug01HVohWk+NweADhPHBBr4JKu6o3Z9g=
Subject key identifier: 44:BA:2F:1C:C7:BC:61:58:8E:FA:ED:F9:CD:49:4F:CD:41:3B:CF:E0
Authority key identifier: D2:05:42:A6:13:55:24:14:21:94:CA:A7:08:E7:DB:2C:CA:6B:4E:63
Certificate issuer: /CN=d20542a6135524142194caa708e7db2cca6b4e63
Certificate serial: 019CAA8F6E139399B4D276781183E261DFD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
Manifest number: 111E
Signing time: Sun 01 Mar 2026 18:00:52 +0000
Manifest this update: Sun 01 Mar 2026 18:00:52 +0000
Manifest next update: Mon 02 Mar 2026 18:00:52 +0000
Files and hashes: 1: 0gVCphNVJBQhlMqnCOfbLMprTmM.crl (hash: VAoDpeZn6msEdLDwUv2ZQiD+PYsZJWUK2s9dYd3ovSo=)
2: W-WGisgg-jdHv8TOeMHyK0ABKKM.roa (hash: AOrzg/e6GHv0wl5jj9rXhlmu6Xrpu+wHeWmnEnYMw/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:6e:13:93:99:b4:d2:76:78:11:83:e2:61:df:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d20542a6135524142194caa708e7db2cca6b4e63
Validity
Not Before: Mar 1 18:00:52 2026 GMT
Not After : Mar 2 18:00:52 2026 GMT
Subject: CN=44ba2f1cc7bc61588efaedf9cd494fcd413bcfe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ea:9b:c5:5d:eb:de:3a:4c:96:20:e9:8d:3a:
ce:fc:d9:b8:d0:4a:00:e4:53:e4:08:46:ab:21:92:
2b:fd:fd:9e:c2:75:74:91:c1:7b:48:74:3a:45:79:
cb:33:65:98:d6:5a:29:d4:28:9b:fc:5d:60:e8:15:
4e:a1:80:c7:74:a3:56:7c:38:65:23:2b:61:2f:bb:
e2:a9:63:6e:b4:c5:e8:ae:1c:0c:66:ef:b4:8a:8b:
9d:df:96:0a:97:55:1f:ad:a8:37:da:a5:f1:0f:ea:
c4:52:f8:ab:80:e8:0e:2b:7e:93:78:29:93:a1:9d:
b6:8a:90:6d:97:16:6d:ac:5e:00:ac:50:5f:16:7a:
62:98:0d:91:21:42:38:60:c5:89:05:36:8f:29:95:
dd:92:ed:19:02:0e:84:f6:1d:e7:68:7b:30:b2:cf:
bf:a2:d0:fa:87:8b:8f:25:45:8f:e9:e2:e0:59:f4:
6c:f6:0c:46:ec:ce:66:74:92:d8:8b:c7:39:41:af:
3b:c8:89:75:55:e9:f2:75:8a:35:2f:c0:03:d9:6d:
d3:6e:35:b3:95:c3:cb:f5:c6:91:0b:c1:e9:6e:4f:
a5:4c:54:1b:e3:58:bd:30:08:50:d4:2f:c3:9a:45:
5f:02:b8:db:ef:ef:50:0f:85:81:ca:ce:c9:d7:ab:
ec:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:BA:2F:1C:C7:BC:61:58:8E:FA:ED:F9:CD:49:4F:CD:41:3B:CF:E0
X509v3 Authority Key Identifier:
keyid:D2:05:42:A6:13:55:24:14:21:94:CA:A7:08:E7:DB:2C:CA:6B:4E:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:59:12:ce:e8:57:a7:20:55:69:07:ce:32:86:9d:9e:8a:73:
e3:f2:ad:e7:21:51:e4:65:66:92:16:57:88:32:64:de:00:47:
d4:23:b3:e9:10:c4:50:0f:29:3f:e8:6f:f9:4f:25:a6:99:8c:
44:0c:f0:74:b5:6b:c9:2f:42:d2:92:cd:dd:03:ef:8c:e2:ad:
c9:a6:0f:ef:29:b9:c6:e4:bd:c0:89:77:08:e6:ad:dc:62:9d:
1d:25:68:37:e2:bb:a1:8d:a8:ca:e3:49:de:9d:ce:e3:02:48:
d8:b7:7c:56:17:7f:62:b6:1f:cb:25:e4:47:c9:a1:d3:da:85:
78:04:46:79:b5:51:8f:6b:4a:47:38:49:67:9f:52:6d:62:44:
3c:6d:97:03:41:0c:20:bb:03:34:a2:cb:8c:41:56:dc:70:7e:
bb:e3:2f:b2:f4:50:6a:d2:53:9c:52:e9:5d:e9:fe:a5:8b:2c:
f6:fa:b1:b7:50:e1:4e:44:40:34:61:cb:e2:d8:17:3c:d2:a5:
8f:17:36:cc:7b:a9:6e:9f:eb:6f:33:dc:0c:b6:cf:58:f8:01:
4e:95:32:48:de:66:85:99:ef:fa:b9:5c:b9:55:8d:b6:b4:95:
8e:96:b2:0b:17:df:86:97:05:33:75:10:e1:e2:90:7c:7b:a4:
a6:b1:1c:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj24Tk5m00nZ4EYPiYd/UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMDU0MmE2MTM1NTI0MTQyMTk0Y2FhNzA4ZTdkYjJjY2E2
YjRlNjMwHhcNMjYwMzAxMTgwMDUyWhcNMjYwMzAyMTgwMDUyWjAzMTEwLwYDVQQD
Eyg0NGJhMmYxY2M3YmM2MTU4OGVmYWVkZjljZDQ5NGZjZDQxM2JjZmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOqbxV3r3jpMliDpjTrO/Nm40EoA
5FPkCEarIZIr/f2ewnV0kcF7SHQ6RXnLM2WY1lop1Cib/F1g6BVOoYDHdKNWfDhl
IythL7viqWNutMXorhwMZu+0ioud35YKl1Ufrag32qXxD+rEUvirgOgOK36TeCmT
oZ22ipBtlxZtrF4ArFBfFnpimA2RIUI4YMWJBTaPKZXdku0ZAg6E9h3naHswss+/
otD6h4uPJUWP6eLgWfRs9gxG7M5mdJLYi8c5Qa87yIl1VenydYo1L8AD2W3TbjWz
lcPL9caRC8Hpbk+lTFQb41i9MAhQ1C/DmkVfArjb7+9QD4WBys7J16vswwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFES6LxzHvGFYjvrt+c1JT81BO8/gMB8GA1UdIwQY
MBaAFNIFQqYTVSQUIZTKpwjn2yzKa05jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGdWQ3BoTlZKQlFobE1xbkNPZmJMTXByVG1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9jMzA5ZWMtMzI1NC00MjAwLTlhNWUt
YWI0MmI0YzkzZWQ5LzEvMGdWQ3BoTlZKQlFobE1xbkNPZmJMTXByVG1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9jMzA5ZWMtMzI1NC00MjAwLTlhNWUtYWI0MmI0YzkzZWQ5
LzEvMGdWQ3BoTlZKQlFobE1xbkNPZmJMTXByVG1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd1kSzuhX
pyBVaQfOMoadnopz4/Kt5yFR5GVmkhZXiDJk3gBH1COz6RDEUA8pP+hv+U8lppmM
RAzwdLVryS9C0pLN3QPvjOKtyaYP7ym5xuS9wIl3COat3GKdHSVoN+K7oY2oyuNJ
3p3O4wJI2Ld8Vhd/YrYfyyXkR8mh09qFeARGebVRj2tKRzhJZ59SbWJEPG2XA0EM
ILsDNKLLjEFW3HB+u+MvsvRQatJTnFLpXen+pYss9vqxt1DhTkRANGHL4tgXPNKl
jxc2zHupbp/rbzPcDLbPWPgBTpUySN5mhZnv+rlcuVWNtrSVjpayCxffhpcFM3UQ
4eKQfHukprEc9A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:49:51 2026 by rpki-client