Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
File: _0j7nPF97Oat2wju_ZvuhCweK2A.mft (raw, json)
Hash identifier: cGWtdPeznr2JLbIntHu8uhfPIom1eo+jk/xP1mGNrxE=
Subject key identifier: E5:34:99:06:B0:99:7C:B6:33:60:3E:2D:17:C6:50:8E:13:4D:A1:39
Authority key identifier: FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60
Certificate issuer: /CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
Certificate serial: 019CAAC702D36FAD71F8EDF656351CC9BB32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 19:01:34 +0000
Manifest this update: Sun 01 Mar 2026 19:01:34 +0000
Manifest next update: Mon 02 Mar 2026 19:01:34 +0000
Files and hashes: 1: 4XcJfnMEQwRMn36H0whqZmqgRz0.roa (hash: 3cAlArq6y9UICoHc8IZifo9HP9trBfeMANvUPBi0r6k=)
2: _0j7nPF97Oat2wju_ZvuhCweK2A.crl (hash: ixCXjz5LBO3yPCI02RQoak00zp2uhCYiEU39DXWzI30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:02:d3:6f:ad:71:f8:ed:f6:56:35:1c:c9:bb:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
Validity
Not Before: Mar 1 19:01:34 2026 GMT
Not After : Mar 2 19:01:34 2026 GMT
Subject: CN=e5349906b0997cb633603e2d17c6508e134da139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b4:bf:e2:4c:d5:b0:e6:5d:ae:b4:a0:1a:e2:
16:4b:e4:84:53:b3:26:97:17:c5:d9:8a:0d:6b:62:
40:af:11:03:51:84:e6:a4:85:1f:88:38:94:03:b3:
a1:cd:46:e1:09:00:65:ae:b8:2d:28:c8:c3:9a:dd:
33:11:96:df:8a:57:56:b7:e2:1f:30:cd:4c:8e:f4:
26:e9:db:68:77:98:e1:89:7d:56:af:c5:23:23:ba:
b4:7d:a5:47:c8:83:60:cc:49:fe:d8:10:5a:a8:40:
1e:6e:3f:6d:33:f9:14:97:90:03:9f:30:b9:7f:80:
5f:bc:47:88:69:7f:5f:dc:43:8e:11:fa:cf:68:5b:
13:83:2d:52:71:f1:eb:b8:6c:19:7b:e0:45:c8:9b:
a5:75:21:98:c0:72:2a:c8:9b:4c:53:23:51:c0:02:
a3:c5:0b:dd:3e:20:19:7f:98:c7:9b:6a:17:7b:e0:
1b:ee:f4:aa:f6:d4:89:55:c4:52:e1:42:64:bb:a8:
36:13:64:f0:61:ba:1d:22:6b:4d:d0:ec:8f:11:79:
48:8b:38:7a:31:37:b9:d5:34:2c:a0:6b:20:f4:5f:
44:c3:57:d8:0e:a9:13:24:f4:a6:67:d7:96:b6:69:
6b:2f:9a:e6:aa:02:ce:5a:55:47:0b:49:cb:52:c6:
7e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:34:99:06:B0:99:7C:B6:33:60:3E:2D:17:C6:50:8E:13:4D:A1:39
X509v3 Authority Key Identifier:
keyid:FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:25:80:57:e5:48:39:4c:f6:cd:ae:57:74:98:5e:99:85:1a:
f8:41:ca:41:65:f4:78:6b:fe:85:1c:64:18:18:4a:1f:2f:6b:
4d:b9:45:19:9a:36:20:41:94:8c:52:74:ee:2a:05:68:77:b3:
5e:be:b8:13:40:6e:91:4c:0d:0a:47:a3:3c:da:07:4e:47:c1:
b7:d8:88:de:fc:5f:05:c3:68:ee:61:24:d5:94:71:c1:52:fd:
86:66:f5:78:e9:aa:91:4e:e3:55:3a:b9:49:95:75:e4:42:30:
17:97:fc:89:58:f2:da:53:19:d8:03:f4:c9:56:51:5b:7b:33:
b0:93:3c:d0:99:61:ff:ce:4b:d2:97:b6:ea:f5:d5:eb:55:03:
ed:4b:99:fc:42:a8:db:2e:6b:b8:06:39:91:e3:06:5d:37:93:
c0:cc:e4:3c:37:b4:ce:31:f5:13:b0:9a:a1:72:d6:5c:fb:1e:
a0:54:96:c9:c3:24:10:3a:77:c1:32:9a:c3:f7:b5:77:4f:8c:
32:2f:5f:f1:12:95:19:28:07:3e:31:7a:97:79:ce:07:c8:2c:
4c:76:74:ef:87:88:98:80:48:2d:86:3c:76:bb:5d:09:b4:77:
c8:f2:66:f2:1e:d4:35:cd:c1:7e:6d:3b:ee:25:7b:da:2f:fb:
9b:13:ed:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:45:09 2026 by rpki-client