Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
File: 0d4HoaH2W9EW4R-fEQhgS26VzP0.mft (raw, json)
Hash identifier: 7gSn5fjSalQEAZh4RZpJKNpRK31OeMd1X/VIaookXAA=
Subject key identifier: 3E:33:F5:68:C5:C9:F6:B0:6E:7C:9A:52:70:2B:43:7A:C0:76:BD:3D
Authority key identifier: D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
Certificate issuer: /CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Certificate serial: 019CAD228371C6216B7AEADA31A88B12B6A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
Manifest number: 13DD
Signing time: Mon 02 Mar 2026 06:00:45 +0000
Manifest this update: Mon 02 Mar 2026 06:00:45 +0000
Manifest next update: Tue 03 Mar 2026 06:00:45 +0000
Files and hashes: 1: 0d4HoaH2W9EW4R-fEQhgS26VzP0.crl (hash: LZfOd7MarGciNnvAAsulIrFLwu5K57itr0MKTRLud/4=)
2: 6AcW6a22cinoLIymW2byGAd7uWo.roa (hash: RoxEP6kBPzD8q8xHwCRknSTvIS7/SOyyVCFWMK8wKF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:83:71:c6:21:6b:7a:ea:da:31:a8:8b:12:b6:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Validity
Not Before: Mar 2 06:00:45 2026 GMT
Not After : Mar 3 06:00:45 2026 GMT
Subject: CN=3e33f568c5c9f6b06e7c9a52702b437ac076bd3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a6:22:83:93:27:88:a6:4a:37:2a:5c:52:e6:
38:c1:f3:ca:9a:e1:c8:20:bf:df:1e:22:78:ea:8d:
51:a0:c0:e0:90:65:8b:ff:18:f9:51:55:ac:f1:62:
8d:14:0c:1b:26:7d:c0:ec:c0:d5:38:3b:14:cf:ac:
89:56:b4:6e:5f:f7:50:2f:e3:8d:bb:29:5d:25:e2:
b2:c0:d0:42:36:16:15:0a:f4:9e:92:8c:a8:c0:25:
ee:dc:45:3f:80:1a:97:42:96:75:52:1b:f5:37:db:
b4:85:da:57:b1:3f:b3:2b:08:6f:dd:72:ca:fd:f9:
41:4b:1c:33:b0:36:0a:6a:e1:2d:84:df:80:3d:9d:
ed:99:67:22:a3:46:ae:64:5a:22:b2:36:d5:15:53:
7a:7e:22:52:a2:72:00:83:bd:27:59:18:03:1b:54:
98:25:be:09:0b:36:bf:eb:cf:90:dd:03:da:e0:ef:
ce:83:48:8e:94:e0:94:36:34:92:68:48:ed:e8:15:
be:fa:b4:f3:9b:5e:16:33:9d:5b:0d:45:0c:6b:ae:
e8:dd:ab:91:ec:ed:7a:d7:74:6d:ad:cb:96:0d:e0:
b7:4d:ed:2d:90:de:a9:a9:1d:76:6a:ef:af:c2:17:
4e:00:f3:9a:8d:b8:25:16:ee:9d:79:df:9e:fd:47:
ed:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:33:F5:68:C5:C9:F6:B0:6E:7C:9A:52:70:2B:43:7A:C0:76:BD:3D
X509v3 Authority Key Identifier:
keyid:D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c5:50:c6:ac:55:c2:f7:7f:48:70:7d:a9:9b:86:48:09:a8:
4c:f5:48:2c:3a:f8:4a:8f:ff:a2:42:fe:4b:5c:03:3b:a7:c8:
fe:16:f5:05:fb:12:e2:4f:11:4c:36:be:27:4b:cd:04:e4:cb:
8e:b2:1d:d2:17:45:7a:7a:78:2a:34:58:15:c4:a0:23:13:1b:
6c:db:3a:7f:d0:4a:67:1c:06:40:83:5d:79:71:b6:25:62:ed:
97:fc:2b:44:4a:28:79:ed:da:e9:54:03:57:7e:a7:d5:69:09:
26:2f:29:69:d1:ba:85:d3:15:73:ad:15:47:ab:46:b1:f4:f6:
8e:04:69:92:6a:f3:35:01:df:6c:36:6c:03:69:05:15:b8:4b:
71:da:ac:c0:45:97:8c:a1:44:e7:17:48:bf:60:8f:c4:64:a9:
2e:d5:b1:7d:4f:48:75:72:e4:3f:67:8e:2f:4f:ce:95:2d:41:
d4:8b:61:4a:bb:f7:d0:bb:18:7b:e0:d2:7c:bc:62:e7:3a:e2:
48:a8:f7:f2:36:8b:a8:f9:86:0c:6e:7a:40:1b:62:6d:9a:c3:
f0:e7:d6:6d:3a:c5:fa:65:27:db:22:71:fb:01:40:de:1e:2b:
9b:c8:54:26:92:c7:a8:1b:8f:43:76:9e:21:7f:75:de:29:79:
5e:0d:d2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:25:06 2026 by rpki-client