Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
File: 0KNDo37K0r-yw1vZsm1_SLy1dTc.mft (raw, json)
Hash identifier: FZdwzD2YZbMifgdUecsc4qVnPVBXCBeU9cNxxP7MYYU=
Subject key identifier: 68:CD:63:35:0F:76:D4:0B:51:AD:22:F5:2B:31:E9:A6:C5:B7:54:4B
Authority key identifier: D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37
Certificate issuer: /CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
Certificate serial: 019CAAC61E77D7BEA02241944CA0FAF5DDA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
Manifest number: 17D7
Signing time: Sun 01 Mar 2026 19:00:36 +0000
Manifest this update: Sun 01 Mar 2026 19:00:36 +0000
Manifest next update: Mon 02 Mar 2026 19:00:36 +0000
Files and hashes: 1: 0KNDo37K0r-yw1vZsm1_SLy1dTc.crl (hash: uyqirhl5gUyiC3MDg2aW+rgqmrLEHkyKRSGhCJ4R5t0=)
2: MqEYcGP28yZryUtdD_3wTNGTAVc.roa (hash: p6r4IvQhkyRHVWZ8dRkzEjBjRhq65iPcj75XjeJcHaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:1e:77:d7:be:a0:22:41:94:4c:a0:fa:f5:dd:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
Validity
Not Before: Mar 1 19:00:36 2026 GMT
Not After : Mar 2 19:00:36 2026 GMT
Subject: CN=68cd63350f76d40b51ad22f52b31e9a6c5b7544b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c0:4e:87:f6:2d:52:94:93:2d:b4:23:e2:45:
e1:6d:e9:a5:b2:74:35:91:26:27:ba:b4:54:c3:09:
b2:be:09:16:8e:c7:18:c9:5b:56:9d:cc:47:56:a7:
d2:c1:3d:d8:73:12:a3:5f:95:b9:c9:8b:44:ee:7a:
38:25:f9:29:41:0a:62:d0:52:f2:a1:56:cc:9d:bc:
e6:41:87:09:b2:70:02:74:52:bd:b1:ec:23:90:f9:
d4:39:a9:17:1a:af:f1:6b:b5:3c:2c:78:30:30:8b:
bc:ea:0d:bf:d3:96:ef:5b:2a:2a:29:d5:28:12:56:
67:aa:e6:65:65:ca:14:3a:68:52:fd:b5:20:01:54:
39:61:7a:a4:9b:95:f2:a2:ee:b3:6e:38:d5:ea:44:
ea:c3:de:bb:89:be:4c:9f:b1:bc:d1:7c:48:19:90:
ef:f6:b7:5a:3f:30:c4:1c:e0:e9:ce:d1:cb:5b:2b:
40:a5:35:2a:c1:24:d8:1b:6e:6c:df:38:62:c7:ad:
10:1a:08:65:74:a2:af:96:e4:1e:e8:f1:3c:06:1b:
ad:55:95:c8:9d:23:5e:d5:82:5f:d9:ff:72:ed:64:
0d:56:a6:06:ea:be:ab:28:a9:f7:b8:9f:c4:d8:18:
21:3d:a7:28:37:4f:d9:7e:a4:6b:94:b2:6e:2f:a5:
a8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CD:63:35:0F:76:D4:0B:51:AD:22:F5:2B:31:E9:A6:C5:B7:54:4B
X509v3 Authority Key Identifier:
keyid:D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:33:7b:f6:e3:ac:6a:3d:82:d9:20:d0:a2:81:8c:ab:ad:bd:
6c:09:69:ff:3f:14:e2:eb:a0:ab:a3:78:93:bd:df:39:25:91:
f3:5b:6b:11:82:df:da:fe:cb:ae:7e:a9:d6:e2:30:25:e5:be:
06:32:40:6f:70:63:fb:53:9b:94:7e:4b:0c:d5:94:b0:da:29:
bb:77:26:93:51:69:6c:99:00:4b:c6:73:e0:34:f5:5b:d1:c1:
d8:52:12:df:bd:f9:05:24:93:27:44:b2:8f:fe:4e:ef:38:c1:
45:0a:8b:ef:6d:4b:04:60:9d:66:b8:dc:50:23:cf:77:89:a3:
12:d4:ce:31:90:4c:ab:13:58:10:0c:37:93:05:44:e2:07:fd:
2a:ee:c0:47:f4:50:00:9c:27:55:5e:3f:58:a0:8f:fb:5c:1f:
32:62:39:b7:bc:00:5b:87:77:72:5f:4f:3f:31:11:75:9d:c6:
41:c2:b8:e6:94:eb:cb:68:05:9f:ce:d9:45:b6:15:7d:11:df:
db:8d:48:9d:50:51:00:1e:01:f0:39:49:64:50:88:85:97:f1:
3a:36:1b:87:83:1d:ee:34:fb:fb:ba:f6:a7:99:20:32:60:49:
57:ab:3b:1c:3f:94:68:64:3a:ec:fd:db:02:f4:8f:8e:f5:38:
ad:8e:1d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:16 2026 by rpki-client