Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
File: 0SFb_EiHbDZRg1bv1uKAJVod7jw.mft (raw, json)
Hash identifier: b4hwlpsqbsanpnQBmn+anPMFlMVWXeMe2vE80EWbL1U=
Subject key identifier: 5D:F1:DA:DD:62:89:2F:1E:62:5A:07:26:41:28:53:DC:62:E8:5B:06
Authority key identifier: D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
Certificate issuer: /CN=d1215bfc48876c36518356efd6e280255a1dee3c
Certificate serial: 019CAC473C8FFBE2DAD52A3EC1650ECA37DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
Manifest number: 0FC2
Signing time: Mon 02 Mar 2026 02:01:15 +0000
Manifest this update: Mon 02 Mar 2026 02:01:15 +0000
Manifest next update: Tue 03 Mar 2026 02:01:15 +0000
Files and hashes: 1: 0SFb_EiHbDZRg1bv1uKAJVod7jw.crl (hash: rkgZM6mLEHgq8rKLvnV1MghGZT6JolcI6ev+j02qENk=)
2: V85y9LeDqS5T_7Jp3kZ3KBVJA_Q.roa (hash: dqwbGll0ZQp3qCkA8FJVoE9Przjq1Z276l8w8WiwoPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:3c:8f:fb:e2:da:d5:2a:3e:c1:65:0e:ca:37:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1215bfc48876c36518356efd6e280255a1dee3c
Validity
Not Before: Mar 2 02:01:15 2026 GMT
Not After : Mar 3 02:01:15 2026 GMT
Subject: CN=5df1dadd62892f1e625a0726412853dc62e85b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f1:ce:26:29:37:f9:66:03:2f:1e:62:35:f9:
e9:aa:30:f6:bf:21:ad:3e:ae:39:94:80:cf:cc:e9:
c9:c2:7f:fb:0b:04:c4:e1:2d:6f:92:21:54:59:ee:
6b:0a:40:2f:e8:ce:c2:ce:d2:9b:6f:7e:0e:79:9d:
b8:ac:d7:99:5f:6f:e3:e8:05:49:bb:25:6e:90:ea:
54:85:06:db:d0:c2:45:e2:e8:0e:4a:a2:1b:a4:61:
64:56:87:97:9c:3c:93:79:ad:db:75:34:d0:ce:8b:
ae:04:5a:90:13:13:a8:2a:d8:2b:63:c9:47:04:83:
61:2a:f4:b1:be:8b:9b:04:bd:3a:a2:c4:2a:32:ce:
e9:23:b2:44:46:a6:64:55:9e:9f:99:4b:cf:76:4d:
13:19:90:b9:a0:78:11:00:65:3c:21:fc:b5:56:fc:
06:41:07:43:6c:0d:66:6e:d3:e8:e9:08:9a:05:2c:
8b:b5:9a:50:24:91:4c:b9:23:a0:3a:42:3a:f7:54:
f6:8c:2b:6e:97:38:59:63:fd:9c:65:97:e6:ed:aa:
95:ab:54:e8:d3:4b:9e:1f:9d:08:b9:6b:74:80:ea:
1e:3b:f7:9e:bf:8f:18:a9:53:59:d3:f0:71:da:f0:
4f:11:aa:09:95:16:9d:65:28:5a:73:80:45:a2:d2:
48:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F1:DA:DD:62:89:2F:1E:62:5A:07:26:41:28:53:DC:62:E8:5B:06
X509v3 Authority Key Identifier:
keyid:D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a9:ff:bb:91:6a:b6:74:30:40:cf:1d:c0:7e:46:30:eb:df:
9c:71:24:db:0c:64:70:83:ce:0a:0c:b2:28:54:50:d1:94:bb:
ae:c5:35:dd:4e:35:f1:61:02:4f:b8:79:61:d3:95:0c:97:3b:
3a:10:d7:bc:d8:fa:c1:54:12:31:ac:1e:46:63:68:4e:4a:d0:
46:37:35:46:f8:32:63:e5:1d:76:74:fe:da:57:c2:d3:8a:c0:
89:d8:05:8b:3a:05:dc:07:d3:c2:23:e8:c1:3d:c8:d6:0d:8f:
7d:d7:51:3f:da:06:78:f6:5f:7e:b2:fa:28:fd:66:65:e1:4a:
b6:bd:f7:92:9e:23:88:75:4f:5b:45:c3:79:6e:34:fd:b5:5c:
70:9b:5b:13:3b:dc:2e:c3:78:bc:0c:a3:c0:71:05:15:92:49:
d9:e7:3c:62:b3:19:5e:b6:01:4c:b6:63:71:11:98:85:45:1d:
a8:28:a0:74:f4:f7:a0:f8:05:c9:b0:d1:f0:0c:33:67:56:02:
f0:63:a9:ca:d1:e5:da:18:a4:7c:1f:e5:4a:9f:c2:ef:22:f5:
8c:8a:76:8d:bf:d0:7d:2c:26:ea:b3:4e:8e:9f:97:29:f2:3b:
dc:69:3d:b2:92:03:fa:da:8c:75:91:e7:de:39:3b:92:ad:82:
35:62:e1:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRzyP++La1So+wWUOyjfaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMjE1YmZjNDg4NzZjMzY1MTgzNTZlZmQ2ZTI4MDI1NWEx
ZGVlM2MwHhcNMjYwMzAyMDIwMTE1WhcNMjYwMzAzMDIwMTE1WjAzMTEwLwYDVQQD
Eyg1ZGYxZGFkZDYyODkyZjFlNjI1YTA3MjY0MTI4NTNkYzYyZTg1YjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/HOJik3+WYDLx5iNfnpqjD2vyGt
Pq45lIDPzOnJwn/7CwTE4S1vkiFUWe5rCkAv6M7CztKbb34OeZ24rNeZX2/j6AVJ
uyVukOpUhQbb0MJF4ugOSqIbpGFkVoeXnDyTea3bdTTQzouuBFqQExOoKtgrY8lH
BINhKvSxvoubBL06osQqMs7pI7JERqZkVZ6fmUvPdk0TGZC5oHgRAGU8Ify1VvwG
QQdDbA1mbtPo6QiaBSyLtZpQJJFMuSOgOkI691T2jCtulzhZY/2cZZfm7aqVq1To
00ueH50IuWt0gOoeO/eev48YqVNZ0/Bx2vBPEaoJlRadZShac4BFotJI5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF3x2t1iiS8eYloHJkEoU9xi6FsGMB8GA1UdIwQY
MBaAFNEhW/xIh2w2UYNW79bigCVaHe48MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFNGYl9FaUhiRFpSZzFidjF1S0FKVm9kN2p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9kMGM0NWMtMmE4ZC00YzNiLTgwOWQt
MDliZjQwNzFhZWEyLzEvMFNGYl9FaUhiRFpSZzFidjF1S0FKVm9kN2p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9kMGM0NWMtMmE4ZC00YzNiLTgwOWQtMDliZjQwNzFhZWEy
LzEvMFNGYl9FaUhiRFpSZzFidjF1S0FKVm9kN2p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm6n/u5Fq
tnQwQM8dwH5GMOvfnHEk2wxkcIPOCgyyKFRQ0ZS7rsU13U418WECT7h5YdOVDJc7
OhDXvNj6wVQSMaweRmNoTkrQRjc1RvgyY+UddnT+2lfC04rAidgFizoF3AfTwiPo
wT3I1g2PfddRP9oGePZffrL6KP1mZeFKtr33kp4jiHVPW0XDeW40/bVccJtbEzvc
LsN4vAyjwHEFFZJJ2ec8YrMZXrYBTLZjcRGYhUUdqCigdPT3oPgFybDR8AwzZ1YC
8GOpytHl2hikfB/lSp/C7yL1jIp2jb/QfSwm6rNOjp+XKfI73Gk9spID+tqMdZHn
3jk7kq2CNWLhww==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:36:41 2026 by rpki-client