Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
File: cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft (raw, json)
Hash identifier: nWzmNFVvc9caXeli3Nwc6U71qO6sEazcH7f1rYPmrOM=
Subject key identifier: 7F:C8:D5:3A:59:F1:4A:6D:38:8A:11:A4:8D:19:B8:06:4C:6E:D1:B5
Authority key identifier: 72:BD:0E:36:E1:C2:02:30:4A:35:13:3B:11:66:66:25:E5:D6:E5:EF
Certificate issuer: /CN=72bd0e36e1c202304a35133b11666625e5d6e5ef
Certificate serial: 019CACB4A747F08B11171AEDEEB6E73EDB76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cr0ONuHCAjBKNRM7EWZmJeXW5e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
Manifest number: 0BE8
Signing time: Mon 02 Mar 2026 04:00:46 +0000
Manifest this update: Mon 02 Mar 2026 04:00:46 +0000
Manifest next update: Tue 03 Mar 2026 04:00:46 +0000
Files and hashes: 1: YzB7lmnaxe6KzTZ2IQfFLWEotnY.roa (hash: E0OkGaGBq/geU/X0+E6JxDiI+vPM6+Zn92glPSSxcDs=)
2: cr0ONuHCAjBKNRM7EWZmJeXW5e8.crl (hash: yDMfcKvJiUbOtsHdnZ1wn9nBVSCD3OOo5JoSjUhpK9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cr0ONuHCAjBKNRM7EWZmJeXW5e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:a7:47:f0:8b:11:17:1a:ed:ee:b6:e7:3e:db:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bd0e36e1c202304a35133b11666625e5d6e5ef
Validity
Not Before: Mar 2 04:00:46 2026 GMT
Not After : Mar 3 04:00:46 2026 GMT
Subject: CN=7fc8d53a59f14a6d388a11a48d19b8064c6ed1b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:86:17:e0:d0:9d:73:38:40:d4:81:7d:5e:c2:
bb:8b:76:5e:e4:94:d6:0f:09:d2:5d:ec:01:4a:86:
2c:dc:fb:77:bc:44:8e:70:f2:2d:87:2a:e8:db:9c:
55:74:fa:7b:74:14:0b:6c:9b:10:3b:b4:5c:ea:63:
b7:b3:0f:d6:aa:21:3f:79:ca:96:ef:b3:1d:1b:01:
f7:c0:bd:bd:49:ca:47:73:04:ae:c3:d8:df:48:f9:
0d:07:3a:7e:ad:ce:eb:ba:49:72:25:fd:19:ea:52:
df:01:a3:30:d8:cf:2b:ef:13:c3:1b:c4:12:b0:d0:
a3:b2:c3:cc:68:06:b5:8d:39:0b:c0:3a:11:9c:8d:
6b:5d:50:e8:f6:3d:b2:b1:eb:59:85:0d:40:99:52:
b7:bb:6e:99:30:7c:60:d1:66:54:fd:9b:a0:e8:b5:
a9:04:be:02:c0:7d:10:dc:de:da:e6:9d:e2:22:1b:
6d:09:57:c3:92:33:96:46:46:cd:55:ca:05:3a:29:
35:7a:ea:e7:dc:7f:bd:ed:5a:eb:b2:3c:b3:db:ec:
b6:38:d7:ce:c4:08:fd:ad:73:3e:81:1e:42:e8:03:
ea:3e:fc:5f:d8:8c:30:fa:be:80:e7:f6:7e:68:90:
03:01:83:1b:f3:fe:1a:b3:95:24:66:56:e1:ea:27:
ea:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C8:D5:3A:59:F1:4A:6D:38:8A:11:A4:8D:19:B8:06:4C:6E:D1:B5
X509v3 Authority Key Identifier:
keyid:72:BD:0E:36:E1:C2:02:30:4A:35:13:3B:11:66:66:25:E5:D6:E5:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cr0ONuHCAjBKNRM7EWZmJeXW5e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:e7:d8:ea:a3:c0:01:ee:00:75:2f:76:57:6b:15:c2:8f:fb:
53:0a:b3:c6:55:b0:7b:55:59:06:88:de:9e:9b:07:7b:9c:6c:
99:c2:3a:07:26:17:29:e8:e5:23:f4:62:3d:cf:bb:0b:92:93:
fc:cc:5a:3e:de:7c:1b:59:d0:03:e2:ad:11:42:de:24:eb:e3:
95:f6:22:87:c8:95:74:d1:25:66:77:7e:d1:df:96:02:9d:fd:
a0:d8:e1:b8:6c:1b:b4:3a:7f:ac:90:18:25:5b:21:ce:d8:65:
b7:76:1e:45:32:2f:d5:73:61:af:bd:53:ba:2b:00:88:93:1f:
17:b2:ee:87:a1:7e:66:c9:cd:75:7f:94:d5:fb:e8:ab:15:70:
7a:c9:c8:df:31:01:95:f7:e6:6c:01:05:16:2e:41:83:21:78:
c2:14:1b:aa:a3:74:14:26:16:8f:fe:64:74:f7:54:de:46:80:
2a:61:f2:76:32:41:0b:36:cd:2b:51:88:5d:5d:b7:7b:1e:ac:
cb:bd:ff:0e:3c:44:29:a1:63:e1:b4:66:82:a0:32:21:a0:60:
9c:0a:a3:e5:2f:a5:fb:e1:4b:01:96:41:50:22:d8:bf:05:89:
43:91:68:11:cf:79:0d:38:dc:60:ea:55:95:f0:4a:b5:65:75:
82:72:be:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:14:00 2026 by rpki-client