Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft
File: 0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft (raw, json)
Hash identifier: ecM7wzsOCZdyVGRYg78CFsjhweMoUZveJ1c3JjoIHmM=
Subject key identifier: 89:03:8C:E9:42:22:85:F1:52:93:4F:D4:95:F7:17:EF:81:D0:03:9C
Authority key identifier: D1:DB:4A:7D:1E:6A:BF:FB:CD:A7:8B:FC:33:12:50:DD:16:BE:3D:E0
Certificate issuer: /CN=d1db4a7d1e6abffbcda78bfc331250dd16be3de0
Certificate serial: 019CABD9D16909FE3DBDF07B47CA8EB678DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft
Manifest number: 0EF0
Signing time: Mon 02 Mar 2026 00:01:44 +0000
Manifest this update: Mon 02 Mar 2026 00:01:44 +0000
Manifest next update: Tue 03 Mar 2026 00:01:44 +0000
Files and hashes: 1: 0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.crl (hash: cIYWG6NUNFOlw2SDTF3fSYrtbovnPDeUPFnF9gU7ntU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:d1:69:09:fe:3d:bd:f0:7b:47:ca:8e:b6:78:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1db4a7d1e6abffbcda78bfc331250dd16be3de0
Validity
Not Before: Mar 2 00:01:44 2026 GMT
Not After : Mar 3 00:01:44 2026 GMT
Subject: CN=89038ce9422285f152934fd495f717ef81d0039c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:55:dc:76:4e:b4:94:2b:65:09:8a:b7:87:fa:
50:c0:cf:40:fd:fe:d6:d6:d8:e2:1f:5f:e3:b7:28:
b6:30:d8:1b:02:ba:3e:32:8f:b3:03:ad:64:ac:b0:
d7:78:06:ce:e6:d1:52:02:79:c6:b0:6f:17:d1:f8:
8d:39:ad:1e:d9:c5:aa:3d:81:87:f5:cf:c1:c6:33:
5f:be:ad:14:3a:d2:c2:a2:79:5e:04:31:89:91:c1:
98:2e:7b:28:61:36:ec:2e:ab:d7:ba:75:6b:a8:b1:
cd:68:f2:e0:2e:c1:48:ee:a0:7a:1d:ef:ad:fd:bc:
03:3a:de:e7:1d:59:04:aa:b9:38:26:23:dd:2b:eb:
d9:52:62:23:36:88:b6:4b:ad:34:07:79:b8:8d:08:
da:68:a3:29:30:88:25:5e:b9:01:82:06:14:50:c2:
8d:f4:b8:63:f9:38:02:23:c6:24:a5:e3:ff:31:7e:
23:ee:b3:ba:50:db:dc:84:68:b2:bb:d0:ce:cc:a1:
4d:38:e2:88:a3:3a:fb:df:cb:42:7e:1a:c0:39:3d:
35:96:92:93:d8:31:0e:78:dc:29:53:de:f2:ea:42:
d9:2e:a0:8c:29:13:97:ce:e5:4d:23:8e:29:58:a6:
04:d8:45:90:08:ff:ff:b6:c8:e0:19:3b:70:b8:95:
07:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:03:8C:E9:42:22:85:F1:52:93:4F:D4:95:F7:17:EF:81:D0:03:9C
X509v3 Authority Key Identifier:
keyid:D1:DB:4A:7D:1E:6A:BF:FB:CD:A7:8B:FC:33:12:50:DD:16:BE:3D:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a4:bd:26:98:99:48:94:b3:2c:37:ca:23:37:43:dc:65:c3:
aa:b0:b5:4f:cf:ef:82:39:aa:22:82:ba:e1:d9:4f:c2:10:9e:
47:cc:d0:48:5c:00:1c:a6:d3:98:24:d8:d3:4e:13:70:45:9f:
41:f5:15:15:c0:6b:95:28:2b:33:42:20:a1:ed:35:53:3d:86:
47:ab:f0:57:6e:c1:df:d7:a1:22:c8:75:2a:1c:46:13:41:6a:
de:d5:78:3f:3b:a1:9f:ba:f0:b2:ed:38:f2:b3:03:3d:ca:47:
a2:be:5c:8a:aa:31:05:3b:8f:3b:cb:55:5f:7a:01:7c:e9:7e:
51:bb:67:2a:bd:09:e9:40:85:6a:43:b2:24:49:3f:0c:7d:73:
4e:ca:0d:15:c6:67:fa:74:84:a5:1f:dd:72:ab:a5:16:cc:9e:
48:32:f5:e8:ee:49:7f:10:ac:32:45:ae:2b:b0:72:88:89:a3:
c0:be:e3:f3:7e:74:bf:a5:82:32:ef:4a:8e:10:ab:57:67:47:
e1:2b:f5:33:a2:1a:1d:98:a7:7c:a2:12:42:d6:57:48:5a:18:
a4:2e:38:4c:47:d3:cf:3a:98:5b:ce:2a:e1:cd:d9:a1:1e:8d:
dd:eb:76:a5:7a:43:97:3e:9f:0d:49:dc:6e:60:8c:44:82:24:
51:6a:57:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:44:43 2026 by rpki-client