Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
File: 0PbNMLTPoZPiJrupKC42aiKjEQ8.mft (raw, json)
Hash identifier: GJVxfcu//aCKj8jk/06iVAq/hfFFHsmc2EdIYD/6R84=
Subject key identifier: E0:0B:C0:BF:58:1B:AD:A1:1D:D6:50:14:1A:8B:2A:59:6A:30:50:24
Authority key identifier: D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
Certificate issuer: /CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Certificate serial: 019CACB5456A0A1FF361B1C8BB148B4C918A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 04:01:26 +0000
Manifest this update: Mon 02 Mar 2026 04:01:26 +0000
Manifest next update: Tue 03 Mar 2026 04:01:26 +0000
Files and hashes: 1: 0PbNMLTPoZPiJrupKC42aiKjEQ8.crl (hash: 8k4NVx17U6ZC7tfYiLHn4s+d8e4Ilgh1mhiTjbXz5jY=)
2: 0g907WBXD4qZBS5Lv--lVG4AGmY.roa (hash: ADx0uWHqRsIMIEM4zrRsIaFkNMUykkO7aZ3mKfDHgOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:45:6a:0a:1f:f3:61:b1:c8:bb:14:8b:4c:91:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Validity
Not Before: Mar 2 04:01:26 2026 GMT
Not After : Mar 3 04:01:26 2026 GMT
Subject: CN=e00bc0bf581bada11dd650141a8b2a596a305024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3b:5b:cf:3f:dd:f7:5c:43:d2:6a:52:f0:8a:
1c:14:dc:d8:22:a2:b0:64:09:92:32:18:80:80:1f:
86:fa:73:e2:46:63:40:36:64:6f:4f:0c:67:cc:27:
7c:aa:30:3e:b2:01:df:38:05:88:13:36:5f:b7:67:
65:19:49:79:23:5d:68:ce:a6:c7:1e:f1:ec:f9:a3:
08:e2:ba:45:5a:c1:6c:f0:28:c4:f4:c7:c4:6c:0c:
1f:89:0b:ad:b7:6f:4d:bd:6d:9d:db:8c:f0:36:bf:
57:0d:b6:de:da:06:ba:d4:d0:8f:9d:f2:ae:33:37:
a8:91:74:96:78:70:a6:98:c5:0b:58:f9:bf:ee:d4:
09:6a:a2:87:fb:45:ec:74:ba:f4:0a:a9:18:aa:c9:
f9:ea:7f:6c:28:15:50:ef:55:9b:7f:f1:51:c6:89:
e2:16:28:e2:63:e4:0f:fb:bb:0f:35:93:ba:d7:69:
c7:d1:8d:d2:a4:4d:46:c0:b2:bf:d1:4c:88:b2:3c:
46:d0:d5:12:d5:de:1a:98:e3:90:8c:6c:bc:9b:bb:
3a:ab:f3:55:88:59:c5:62:32:24:a7:fb:87:b0:16:
40:aa:f0:a4:e7:fe:65:be:2d:a9:8c:f0:fa:c8:7c:
3e:59:d4:44:f0:19:4f:e8:1a:c1:d2:11:b7:97:2f:
9c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0B:C0:BF:58:1B:AD:A1:1D:D6:50:14:1A:8B:2A:59:6A:30:50:24
X509v3 Authority Key Identifier:
keyid:D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d2:9b:04:96:44:fc:6b:39:24:fb:0f:37:57:f7:eb:42:ce:
cd:8c:22:95:39:24:ed:e5:4c:a0:bd:c7:e7:90:c9:c9:3e:83:
28:dd:f3:44:ce:17:2e:5c:4a:34:b4:0e:f3:f7:06:c3:f7:9b:
e5:93:a6:5b:4d:e3:2f:c7:07:0f:25:99:14:67:a5:ea:12:77:
42:7d:ff:41:f1:20:d1:27:b3:b4:05:8c:16:00:ed:a3:79:74:
61:39:2e:b2:1a:f1:a6:78:13:2b:15:d2:85:7a:38:d0:45:f9:
fd:85:cb:7c:2d:7f:05:0a:f8:94:5c:1c:4c:ff:d9:11:bb:04:
74:59:6e:54:c3:e9:a9:2c:8d:7b:ee:b2:31:47:90:02:e1:6f:
9d:db:64:eb:2a:51:3f:14:ac:da:cb:ab:35:73:8f:5b:f0:72:
4f:65:54:ce:b8:4d:89:ae:1d:c7:c0:c3:8c:34:38:46:bf:08:
c1:03:3f:35:1a:c6:dc:22:1f:1b:df:d1:9e:e8:92:5f:81:33:
9f:54:97:16:c5:72:b5:fa:a5:b9:d2:89:9d:f1:61:2d:60:f6:
47:d5:b2:16:75:0d:60:b2:10:c6:08:84:3d:da:be:10:f7:40:
cd:49:31:fa:6e:4a:4e:0c:1f:75:c6:f5:6c:c7:f0:e6:e9:19:
fc:c2:29:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystUVqCh/zYbHIuxSLTJGKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZjZjZDMwYjRjZmExOTNlMjI2YmJhOTI4MmUzNjZhMjJh
MzExMGYwHhcNMjYwMzAyMDQwMTI2WhcNMjYwMzAzMDQwMTI2WjAzMTEwLwYDVQQD
EyhlMDBiYzBiZjU4MWJhZGExMWRkNjUwMTQxYThiMmE1OTZhMzA1MDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Dtbzz/d91xD0mpS8IocFNzYIqKw
ZAmSMhiAgB+G+nPiRmNANmRvTwxnzCd8qjA+sgHfOAWIEzZft2dlGUl5I11ozqbH
HvHs+aMI4rpFWsFs8CjE9MfEbAwfiQutt29NvW2d24zwNr9XDbbe2ga61NCPnfKu
MzeokXSWeHCmmMULWPm/7tQJaqKH+0XsdLr0CqkYqsn56n9sKBVQ71Wbf/FRxoni
FijiY+QP+7sPNZO612nH0Y3SpE1GwLK/0UyIsjxG0NUS1d4amOOQjGy8m7s6q/NV
iFnFYjIkp/uHsBZAqvCk5/5lvi2pjPD6yHw+WdRE8BlP6BrB0hG3ly+cSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOALwL9YG62hHdZQFBqLKllqMFAkMB8GA1UdIwQY
MBaAFND2zTC0z6GT4ia7qSguNmoioxEPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFBiTk1MVFBvWlBpSnJ1cEtDNDJhaUtqRVE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yZjY5ZGYtNmYyMy00YWE3LTg4ZjQt
ZTI5OWU5MTAwMzllLzEvMFBiTk1MVFBvWlBpSnJ1cEtDNDJhaUtqRVE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8yZjY5ZGYtNmYyMy00YWE3LTg4ZjQtZTI5OWU5MTAwMzll
LzEvMFBiTk1MVFBvWlBpSnJ1cEtDNDJhaUtqRVE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJtKbBJZE
/Gs5JPsPN1f360LOzYwilTkk7eVMoL3H55DJyT6DKN3zRM4XLlxKNLQO8/cGw/eb
5ZOmW03jL8cHDyWZFGel6hJ3Qn3/QfEg0SeztAWMFgDto3l0YTkushrxpngTKxXS
hXo40EX5/YXLfC1/BQr4lFwcTP/ZEbsEdFluVMPpqSyNe+6yMUeQAuFvndtk6ypR
PxSs2surNXOPW/ByT2VUzrhNia4dx8DDjDQ4Rr8IwQM/NRrG3CIfG9/RnuiSX4Ez
n1SXFsVytfqludKJnfFhLWD2R9WyFnUNYLIQxgiEPdq+EPdAzUkx+m5KTgwfdcb1
bMfw5ukZ/MIpyw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:42:01 2026 by rpki-client