Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
File: 0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft (raw, json)
Hash identifier: AFNdKYqtIPGSzOcAkW2tci4X31m1IJnefgpHf6QEx7g=
Subject key identifier: B4:46:C6:63:5B:22:13:96:0D:F3:D7:52:86:1A:94:CC:E9:7E:35:F5
Authority key identifier: D2:DD:4D:DD:53:6F:18:A8:72:CB:AC:15:E5:89:54:2A:ED:CD:07:37
Certificate issuer: /CN=d2dd4ddd536f18a872cbac15e589542aedcd0737
Certificate serial: 019CADC769463532E1982997D4E11C10F9A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
Manifest number: 0A31
Signing time: Mon 02 Mar 2026 09:00:52 +0000
Manifest this update: Mon 02 Mar 2026 09:00:52 +0000
Manifest next update: Tue 03 Mar 2026 09:00:52 +0000
Files and hashes: 1: 0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl (hash: /XcA7RUlr3qrMQhZHpEzKrE2FhriqtDK8XRIdXhsazE=)
2: X_8Np37khTcPCEtRXHbNQfqvQNE.roa (hash: XNLBBBK7IAMNXci8RcPDaNEkuHX48HSzOY+bMxN50u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:69:46:35:32:e1:98:29:97:d4:e1:1c:10:f9:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2dd4ddd536f18a872cbac15e589542aedcd0737
Validity
Not Before: Mar 2 09:00:52 2026 GMT
Not After : Mar 3 09:00:52 2026 GMT
Subject: CN=b446c6635b2213960df3d752861a94cce97e35f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a9:3a:33:d2:52:e5:e2:72:4f:90:9e:ae:cd:
35:cb:c8:22:ba:89:ec:13:32:24:37:e0:16:a9:59:
4a:fe:79:7c:86:5f:a4:9d:6b:85:29:af:d0:69:56:
6f:39:cf:6e:f7:62:18:3d:45:2c:c5:da:c8:72:d1:
81:ab:73:fb:d6:58:19:f6:95:37:ca:2a:dd:cb:f2:
5b:e0:b0:f0:03:19:58:89:9a:ad:08:40:02:98:8f:
d2:5b:93:d6:f5:34:a8:b3:ad:0f:77:3f:21:f3:72:
48:c2:19:3e:fd:0f:fc:93:b6:c4:8d:f7:95:31:00:
99:d4:f3:5b:d4:e4:0d:47:1d:57:4b:40:53:3d:95:
a6:72:41:b3:33:94:ea:9d:f6:b7:ef:1d:18:71:a8:
f5:18:f7:47:36:9c:78:5c:a9:c7:e5:1e:7b:05:f7:
4c:74:ea:b5:56:6f:be:a3:2c:d1:87:80:e0:70:65:
98:21:e5:a8:20:65:35:7a:af:83:30:64:24:de:37:
dd:04:fa:9e:92:52:a2:fa:6f:f1:64:a6:8d:01:0a:
55:9e:24:34:eb:ac:3e:a2:17:19:51:cf:29:fa:34:
64:d2:b0:e8:67:3c:60:38:d1:eb:87:27:c0:a2:b9:
77:78:2c:2d:d4:ef:87:c0:43:f5:f0:28:9d:5c:32:
f6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:46:C6:63:5B:22:13:96:0D:F3:D7:52:86:1A:94:CC:E9:7E:35:F5
X509v3 Authority Key Identifier:
keyid:D2:DD:4D:DD:53:6F:18:A8:72:CB:AC:15:E5:89:54:2A:ED:CD:07:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ce:2d:2f:28:53:3d:1a:68:a0:1f:d1:2a:e0:87:99:45:97:
7a:95:14:51:39:79:66:76:9a:d5:f3:52:54:87:f3:4a:7d:e8:
05:14:6d:76:b1:14:ba:fc:1c:f4:83:f2:f7:e4:82:80:40:3c:
0a:03:70:74:db:8f:a2:04:00:65:42:3c:a3:0a:a0:15:0b:8e:
c1:12:d0:b2:84:2f:eb:91:46:ef:3d:33:25:b7:e4:dc:73:09:
3c:36:14:db:f8:eb:89:5e:7f:30:5e:a6:90:21:44:2e:11:9a:
38:00:cb:f5:34:5a:3f:71:14:90:7d:60:d5:a5:69:2a:a3:af:
52:16:4d:39:f7:46:fb:f3:3a:63:86:c1:36:93:26:08:18:dc:
ee:14:9a:20:f7:0b:60:b9:2c:41:5e:b8:d9:ed:78:b5:bc:10:
cd:ad:b0:d7:d0:7f:fe:9c:a1:92:06:02:74:00:fb:ad:4d:ea:
5a:1b:44:a1:a1:76:0b:30:1a:38:af:b0:f6:39:c7:87:61:36:
96:58:34:72:db:5c:24:e6:d3:10:3a:7f:cc:24:21:30:c4:15:
9b:f4:59:2e:cd:e1:56:a2:8e:fd:51:1c:d4:c2:f1:b3:61:df:
fc:2d:7d:65:b9:09:94:23:4c:f8:a2:74:69:6f:f2:84:f5:93:
b2:19:fb:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:02:48 2026 by rpki-client