Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
File: 0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft (raw, json)
Hash identifier: FNbLkEhKUchIFtF95FJ6Kzz0SMTdQc0SlN+mvnp7WTk=
Subject key identifier: A7:64:AB:E7:97:8C:08:82:04:18:31:EE:29:34:35:01:A1:D2:31:72
Authority key identifier: D2:76:C4:1A:21:76:25:4F:23:6D:23:D3:91:FD:56:09:06:19:67:0D
Certificate issuer: /CN=d276c41a2176254f236d23d391fd56090619670d
Certificate serial: 019CAEA2C8D453613C5BE3D367A4946A5405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
Manifest number: 0346
Signing time: Mon 02 Mar 2026 13:00:29 +0000
Manifest this update: Mon 02 Mar 2026 13:00:29 +0000
Manifest next update: Tue 03 Mar 2026 13:00:29 +0000
Files and hashes: 1: 0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl (hash: wVWNT8WsQOQLWR/MTLGMgK6glDEQP38qMRyY759CKsI=)
2: W4cImxro0S1Oqpe5aOmc9Zk1to0.roa (hash: 2C5FiGId1eEcbsSAENT53ABjs4YVPjHtZepjzsteNl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a2:c8:d4:53:61:3c:5b:e3:d3:67:a4:94:6a:54:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d276c41a2176254f236d23d391fd56090619670d
Validity
Not Before: Mar 2 13:00:29 2026 GMT
Not After : Mar 3 13:00:29 2026 GMT
Subject: CN=a764abe7978c0882041831ee29343501a1d23172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:85:0b:45:16:af:ce:e6:7f:8a:ce:93:0d:69:
ab:27:9e:54:52:17:c0:ab:10:8a:af:0d:db:80:07:
8c:37:a9:33:df:5f:4e:7f:6a:20:e8:1e:40:a6:6f:
33:2e:a0:16:b1:81:4c:55:7d:0b:24:de:d8:e1:c3:
ff:5a:0e:49:5c:25:52:c2:a8:37:cc:83:c8:36:a5:
11:1f:30:27:65:f3:21:34:f1:c8:78:1e:d6:66:e7:
a1:2c:20:ae:47:db:01:e7:de:44:28:3a:b3:b5:09:
54:b0:d1:5d:77:d5:77:a9:3c:f0:d1:f0:41:f7:2e:
6b:e7:82:6f:88:6f:52:82:15:69:e5:3b:28:16:61:
41:2a:5d:31:18:3d:52:66:58:bd:a7:c1:8e:a7:69:
7b:8b:22:54:fb:ce:37:a9:79:bc:16:4f:68:a7:2c:
32:94:bc:b5:94:d5:65:74:ca:da:b9:61:88:25:aa:
b8:2f:47:19:31:b8:8e:a6:36:c1:0a:84:0c:dd:55:
72:5c:f6:df:1b:6c:1b:18:d1:aa:0c:43:1f:64:ea:
fa:9a:94:8c:cf:37:1e:fe:51:37:e2:a4:31:0d:fc:
34:bd:c6:d4:b4:08:49:f0:3e:68:ca:f6:ba:ca:fe:
f5:16:1f:e2:fb:f7:0e:37:13:e7:eb:a4:ad:a1:59:
a0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:64:AB:E7:97:8C:08:82:04:18:31:EE:29:34:35:01:A1:D2:31:72
X509v3 Authority Key Identifier:
keyid:D2:76:C4:1A:21:76:25:4F:23:6D:23:D3:91:FD:56:09:06:19:67:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:e2:6d:6b:47:19:18:31:ba:05:f5:ce:ae:3c:86:5f:32:c4:
46:cf:ca:0e:30:4e:62:10:b0:ae:39:3b:3f:c8:35:03:cf:84:
cf:37:fd:bf:f5:bc:02:c6:08:b4:42:91:f0:d8:7c:71:ee:44:
cb:2e:d0:9c:c1:ba:27:6a:38:9d:43:a2:ce:80:21:69:cb:b2:
b2:68:7a:37:d7:bf:61:64:9e:2b:53:65:e9:70:7a:0f:55:e3:
64:f0:16:90:91:d4:08:43:a8:e6:3b:12:d7:3f:83:e0:f5:b9:
a9:e4:96:0e:13:9e:5a:e0:c7:7d:da:51:fd:82:2c:62:f1:72:
1c:81:83:56:0f:33:2e:f6:61:14:12:8a:5a:4a:e5:e0:08:68:
a4:5d:6f:72:99:75:2f:ff:80:ee:37:99:13:23:88:b0:f3:13:
41:82:a6:7f:bf:3e:c0:1d:a2:f2:69:16:6b:26:7d:a5:09:e4:
1f:00:ec:c7:db:5b:38:2f:83:4d:29:f8:44:ca:30:8d:3d:ad:
dd:ac:a2:98:cf:9e:7f:0b:2d:a4:71:49:61:54:29:fe:05:fc:
a4:6e:4f:b5:fc:1d:e5:4b:34:b0:2e:f5:b6:1c:4f:c5:66:94:
2c:a3:70:37:3b:45:a2:68:7d:e8:cc:ff:cb:27:a6:ba:ff:ba:
c3:16:ad:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:36:50 2026 by rpki-client