Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
File: 0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft (raw, json)
Hash identifier: LiqEj7Hb/2w5FDJngD5tvEUFVCHcfRHN1WxY2kAOOH0=
Subject key identifier: 40:0F:52:79:FB:42:A3:04:28:CC:E5:6C:7F:2D:82:D0:7A:05:C4:91
Authority key identifier: D0:5E:D7:A5:81:47:AA:51:4C:8E:6D:AF:BC:C5:D8:75:7C:7D:32:72
Certificate issuer: /CN=d05ed7a58147aa514c8e6dafbcc5d8757c7d3272
Certificate serial: 019CADC7EFC8A210E30C9FEBED92B4A9E7AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
Manifest number: 0337
Signing time: Mon 02 Mar 2026 09:01:27 +0000
Manifest this update: Mon 02 Mar 2026 09:01:27 +0000
Manifest next update: Tue 03 Mar 2026 09:01:27 +0000
Files and hashes: 1: 0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl (hash: rPaF7DkLLALvBajeNagDBGDkgYm1SfJmalbMXcRvFk0=)
2: RRSohk2nwrUzuw9Rw-D24vHj4iw.roa (hash: cMUbM2/hxrn9h126Zdm7DYzjZuRiajCmosfkit3vk8Y=)
3: c0Owme8MxYD620tsBpkMHThjdrE.roa (hash: Gh6CiZ1DobVHlOo0S4vuXYLdOtBEQiYqATFSpfC1Cik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:ef:c8:a2:10:e3:0c:9f:eb:ed:92:b4:a9:e7:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05ed7a58147aa514c8e6dafbcc5d8757c7d3272
Validity
Not Before: Mar 2 09:01:27 2026 GMT
Not After : Mar 3 09:01:27 2026 GMT
Subject: CN=400f5279fb42a30428cce56c7f2d82d07a05c491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:24:06:45:ce:25:65:5b:95:71:8f:89:da:05:
7c:75:5e:c8:50:e9:8b:51:fd:a0:4d:9e:86:e5:7d:
1d:75:5c:e6:71:f4:a9:70:b3:13:54:c3:01:89:5a:
1c:f8:81:ad:72:53:95:d1:e1:eb:19:a8:b9:71:b3:
c0:ba:5b:0e:aa:1b:33:34:fa:16:51:b6:d3:32:de:
a1:b5:2d:ad:cc:4a:ba:5e:d9:ce:a6:d4:09:cb:e0:
f0:16:18:70:fb:46:9b:db:74:02:75:f5:63:16:82:
75:2f:53:7a:ee:14:bd:11:3e:c5:97:f5:37:c8:2b:
aa:33:13:c9:8f:55:a6:bf:3e:06:28:de:27:e8:8d:
72:46:83:71:41:f2:c3:94:a3:ff:ad:53:9f:a5:13:
ee:d3:7b:96:07:69:44:15:44:0b:67:da:01:01:4d:
b0:87:77:9d:e4:ea:06:8d:e1:de:c8:a3:0c:fa:7e:
2b:d5:fd:cc:ed:76:36:41:c3:2e:98:39:80:88:89:
06:b7:ed:33:e0:34:64:32:b3:6f:31:0e:b8:f5:15:
5b:e9:58:ad:bd:f0:ff:98:fc:9a:53:85:fb:37:a4:
dd:33:e2:33:11:15:a8:fc:c3:22:7b:eb:7b:c9:46:
ee:9e:57:d7:6e:65:87:15:93:ff:3d:50:b7:6e:e4:
28:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0F:52:79:FB:42:A3:04:28:CC:E5:6C:7F:2D:82:D0:7A:05:C4:91
X509v3 Authority Key Identifier:
keyid:D0:5E:D7:A5:81:47:AA:51:4C:8E:6D:AF:BC:C5:D8:75:7C:7D:32:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c2:6f:ce:61:20:86:ec:68:d9:06:00:0f:31:00:05:f0:19:
29:36:9c:22:89:46:5b:5c:fc:6b:1f:28:2e:0c:3b:dc:34:11:
76:40:49:b3:49:4d:38:75:77:67:39:9a:16:37:79:cc:9f:e1:
ee:0d:a3:34:19:33:cb:45:f0:b7:c2:6b:c3:6a:81:34:e3:51:
74:a0:a6:b6:af:c2:d3:ee:7f:36:e1:99:86:f2:ca:a1:12:e8:
b8:9d:fd:ea:9d:03:39:d0:6c:b1:83:1f:71:c9:34:aa:2c:9a:
28:97:e4:aa:b1:08:cc:6f:67:84:15:3e:44:04:7e:c7:ca:88:
af:f2:df:44:0a:f4:99:10:15:4a:77:44:22:01:2a:a1:c1:b1:
51:ae:7e:6f:ab:bf:4f:37:0f:af:d2:d8:f3:55:e4:79:b0:e4:
32:34:77:bd:ff:ae:44:f7:df:9f:90:75:64:1f:d0:ae:47:6c:
b8:6e:02:32:81:86:f1:f3:2c:d7:1b:aa:05:6f:a7:10:f3:4c:
e0:92:e1:33:f3:2d:6a:7d:e0:a4:4f:85:6f:42:8b:ee:82:9d:
18:e4:a9:31:6d:be:20:6b:f4:d8:a0:08:e2:32:81:4e:e0:b8:
51:e0:66:c2:4c:74:43:5b:a0:ee:33:18:6e:44:2e:dc:37:f4:
12:be:6b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:41:04 2026 by rpki-client