Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
File: 0mHPvAfsMGN33LFql6EWDHptgsw.mft (raw, json)
Hash identifier: bStV4Z38qSzQ1usYb3M2R3EnlCNRrGZbKy5O5M/M0dE=
Subject key identifier: 87:B2:89:64:3C:CD:2E:21:79:04:2E:3A:FD:36:26:4E:AF:E4:DC:E1
Authority key identifier: D2:61:CF:BC:07:EC:30:63:77:DC:B1:6A:97:A1:16:0C:7A:6D:82:CC
Certificate issuer: /CN=d261cfbc07ec306377dcb16a97a1160c7a6d82cc
Certificate serial: 019CAA592F1ACED475A786A0189536F801C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
Manifest number: 0487
Signing time: Sun 01 Mar 2026 17:01:37 +0000
Manifest this update: Sun 01 Mar 2026 17:01:37 +0000
Manifest next update: Mon 02 Mar 2026 17:01:37 +0000
Files and hashes: 1: 0mHPvAfsMGN33LFql6EWDHptgsw.crl (hash: Ppy3i3MWAna8pfj7d2DEs1C55bjXne6oitjpyeBOl5w=)
2: p0fL_-s25OijH9UglPLyGf3hQ3k.roa (hash: sp4Y+8h1IocJtG1a3SfrXHCpPOK9+n80lPdEb2+Nl4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:2f:1a:ce:d4:75:a7:86:a0:18:95:36:f8:01:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d261cfbc07ec306377dcb16a97a1160c7a6d82cc
Validity
Not Before: Mar 1 17:01:37 2026 GMT
Not After : Mar 2 17:01:37 2026 GMT
Subject: CN=87b289643ccd2e2179042e3afd36264eafe4dce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9c:41:0f:30:fd:bc:c8:ec:e2:44:40:3d:19:
e7:8f:1b:70:47:30:80:de:85:e2:96:96:ae:23:d0:
6b:33:5d:5e:1b:e7:a8:74:f2:a8:5a:c5:b7:49:f5:
4c:d4:3f:6a:e9:2b:5b:d5:b0:85:37:7a:6f:fe:eb:
58:62:88:54:9d:15:9c:ae:c6:59:b8:5f:98:0c:a6:
29:ac:7a:b6:1a:df:86:14:9e:57:d9:dc:6b:90:a2:
28:63:1a:f7:39:c0:ee:59:d6:8f:b6:8d:45:4d:e4:
c9:df:42:a1:cb:7c:f9:54:7a:37:00:a8:fc:69:a2:
8f:3b:09:d3:23:d4:2b:e0:6c:af:d0:8a:07:3c:62:
6c:ec:d4:c3:99:41:79:32:44:0b:19:3b:c3:f3:ce:
49:3c:8c:d5:67:44:5e:a4:31:20:ee:4f:4d:19:07:
23:fb:65:e7:e1:3e:ed:41:78:b5:eb:2d:c8:a6:d2:
e0:32:ba:8f:c1:24:50:4b:0a:3e:2b:e2:d9:f7:4b:
e4:3f:af:78:84:e2:fb:67:bc:5b:20:2c:07:39:0c:
7f:c7:b0:cb:2e:6d:99:10:8c:b1:99:23:b1:17:6a:
ea:09:02:48:ae:da:87:b1:d6:8f:e1:0e:01:7f:1c:
30:d1:b9:bd:4b:26:62:2c:1e:85:a0:24:6c:98:26:
e5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B2:89:64:3C:CD:2E:21:79:04:2E:3A:FD:36:26:4E:AF:E4:DC:E1
X509v3 Authority Key Identifier:
keyid:D2:61:CF:BC:07:EC:30:63:77:DC:B1:6A:97:A1:16:0C:7A:6D:82:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:b0:2e:71:fc:f5:19:3c:37:a3:91:cf:be:90:e5:03:2e:9d:
28:97:b6:eb:6a:27:2d:8c:88:45:b4:39:5a:42:16:79:b3:ba:
84:3d:8e:5f:15:8c:a2:1b:cb:6f:f3:d0:96:ec:5b:a3:7a:35:
1e:4c:c0:f3:b8:b6:e9:5f:43:55:40:6c:ae:22:40:73:be:59:
25:1e:49:7f:a1:4d:20:a6:7e:96:d4:71:90:51:01:34:fc:e9:
08:47:68:27:68:12:17:14:13:da:af:80:12:78:78:c7:24:82:
cd:69:ac:c3:41:8e:b5:96:95:bb:05:85:e4:a0:51:d4:bb:4f:
2a:27:92:78:5e:a2:9e:82:de:8f:85:b3:a3:8a:fe:8e:42:67:
64:cd:a3:6e:f0:25:b5:80:4d:5b:23:05:ed:72:21:00:11:20:
d5:5e:94:e8:62:71:5b:3c:5c:e4:44:ac:d1:74:e4:bd:6d:ad:
41:5b:9d:77:ea:32:12:78:4f:69:00:da:de:18:37:cd:a0:78:
92:46:00:a7:f2:0e:b3:aa:3b:68:61:79:6f:66:12:83:5d:1d:
68:74:ac:74:96:ed:a7:d4:a6:88:d9:5d:f4:88:0d:f9:92:57:
d3:06:2e:8e:5e:91:28:58:2f:e6:d9:82:dd:46:90:69:4f:fc:
9c:04:ea:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:56:48 2026 by rpki-client