Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft
File: 0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft (raw, json)
Hash identifier: eT8L2M0fyDfCLyc+9Bq6u15lIZT273a0j5Eyz2ZFTSw=
Subject key identifier: F6:3E:C3:7D:4E:B8:CF:42:A2:56:6A:97:F5:37:6B:8F:CD:6A:5D:AC
Authority key identifier: D2:6D:4C:75:CE:BE:89:61:4C:F2:E7:E2:E6:14:C0:36:F6:F5:3E:E2
Certificate issuer: /CN=d26d4c75cebe89614cf2e7e2e614c036f6f53ee2
Certificate serial: 019CABA1FD7F9EF66CE7D47E33C661684758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0m1Mdc6-iWFM8ufi5hTANvb1PuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft
Manifest number: 17D7
Signing time: Sun 01 Mar 2026 23:00:45 +0000
Manifest this update: Sun 01 Mar 2026 23:00:45 +0000
Manifest next update: Mon 02 Mar 2026 23:00:45 +0000
Files and hashes: 1: 0m1Mdc6-iWFM8ufi5hTANvb1PuI.crl (hash: k87GSclpgVGOQqCNKQAUrZTVf8U2IfKBO1M6omtCmv0=)
2: F1ia1Weaubn8eKzVn8s3JrMAdx4.roa (hash: N+hr1h8NlI+FxivU5QhlJspaJlXj+zDKR5ugxOa3HpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0m1Mdc6-iWFM8ufi5hTANvb1PuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:fd:7f:9e:f6:6c:e7:d4:7e:33:c6:61:68:47:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d26d4c75cebe89614cf2e7e2e614c036f6f53ee2
Validity
Not Before: Mar 1 23:00:45 2026 GMT
Not After : Mar 2 23:00:45 2026 GMT
Subject: CN=f63ec37d4eb8cf42a2566a97f5376b8fcd6a5dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:90:22:5b:d7:56:18:28:cb:b1:0c:72:93:c6:
06:bc:cd:bd:bc:4f:15:e1:ce:c2:1a:59:b0:7b:46:
94:5b:d9:54:20:02:60:a1:95:d5:1d:94:e2:d1:35:
08:3d:26:02:88:ba:af:1f:97:88:b2:35:2e:30:ee:
00:76:b5:53:64:34:de:c5:c9:83:d3:65:a4:88:06:
35:ab:db:93:40:8b:f7:b3:58:62:b8:c8:b1:d3:2a:
c2:32:0d:19:b7:38:86:d6:88:5d:99:fa:77:8d:9b:
d8:87:50:b2:1e:b6:6c:d4:fb:02:c2:e6:e5:89:02:
1e:83:1b:ec:8e:60:94:82:8f:23:a0:47:79:2c:b9:
01:bb:fb:a9:a3:15:c3:3e:97:39:2d:16:99:d7:d4:
d0:14:ec:ef:fd:8c:cc:83:35:62:48:71:a8:52:2a:
64:b2:3b:7f:a2:96:48:99:a7:da:49:79:c7:1e:ee:
ec:51:48:2b:35:7f:48:a9:15:ad:6d:8e:f3:5d:5e:
0c:09:d7:da:a4:f7:7e:fa:7b:d4:a8:04:ef:d2:3d:
ae:bd:be:85:ed:17:6a:d2:db:2c:79:b3:89:0a:40:
0d:35:e7:ea:37:64:5d:dd:9c:bc:0e:9e:9e:fa:ea:
e9:c1:2d:67:fe:02:c8:7b:e8:49:6d:f5:35:eb:38:
97:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3E:C3:7D:4E:B8:CF:42:A2:56:6A:97:F5:37:6B:8F:CD:6A:5D:AC
X509v3 Authority Key Identifier:
keyid:D2:6D:4C:75:CE:BE:89:61:4C:F2:E7:E2:E6:14:C0:36:F6:F5:3E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0m1Mdc6-iWFM8ufi5hTANvb1PuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d1:28:c8:82:97:96:a5:83:62:91:58:d4:d3:e5:8a:67:77:
bb:0b:52:51:14:7a:38:c9:46:02:c5:28:25:94:55:87:ac:63:
85:85:6e:69:c9:2f:0a:d8:bf:5a:4e:4d:8a:da:0d:92:e8:72:
b3:69:a2:46:da:1d:61:10:5b:cc:e5:8b:e3:bf:4d:a0:95:71:
95:30:e5:9d:71:fa:35:ca:62:11:32:c0:2a:4b:55:c5:89:a4:
49:a4:74:e1:e5:ac:26:45:39:c8:a5:7a:3b:9a:d3:2b:f7:08:
44:79:93:9d:f2:fc:88:d9:e9:b3:fd:05:36:6f:c4:96:c9:e5:
ff:7d:96:37:f3:39:c6:ce:aa:83:b4:6f:76:6f:88:17:6d:08:
41:b2:7b:a0:6a:0a:43:4c:d0:aa:11:7a:99:e1:0d:e8:f7:e3:
d7:04:7f:bf:a4:93:71:b5:cf:a9:75:b8:a9:d0:6d:dc:f9:af:
20:9e:73:7d:b3:e0:d3:f3:1e:b8:b8:f6:40:f5:76:73:af:ff:
88:34:2c:d0:09:80:7b:f5:a7:8e:57:bb:e1:82:1d:66:27:a0:
63:ef:e1:dc:8e:08:bd:e7:16:ee:f0:e7:c7:0f:05:74:55:b1:
11:64:37:07:96:8e:0f:8d:7d:e1:dd:8c:ab:ad:c7:e7:e5:a0:
b6:de:4e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:19:50 2026 by rpki-client