Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft
File: 0dXq4THDsQiP-wI3mA1u4YiWaMY.mft (raw, json)
Hash identifier: p9zs5uIUPln9amDR33YdQeN2ic5Pp4uN2I8nXC+T8ug=
Subject key identifier: CA:6A:AB:8B:30:9D:AF:28:58:58:68:55:35:AB:FF:E6:F9:8F:0D:70
Authority key identifier: D1:D5:EA:E1:31:C3:B1:08:8F:FB:02:37:98:0D:6E:E1:88:96:68:C6
Certificate issuer: /CN=d1d5eae131c3b1088ffb0237980d6ee1889668c6
Certificate serial: 019CAB6B16D2770FFB1D5A11D140009E14E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dXq4THDsQiP-wI3mA1u4YiWaMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft
Manifest number: 01C1
Signing time: Sun 01 Mar 2026 22:00:47 +0000
Manifest this update: Sun 01 Mar 2026 22:00:47 +0000
Manifest next update: Mon 02 Mar 2026 22:00:47 +0000
Files and hashes: 1: 0dXq4THDsQiP-wI3mA1u4YiWaMY.crl (hash: TCFe58Lo62FcWIUlMlmNGU19TENugK8sUMN7XWGWMZA=)
2: 0w_3pj-YjXdlGCOQrO5MmHi3QRU.roa (hash: NCRRT15Nw1RlGwpm/ytoJz8CpfLxBA4RH0mKpwLqRd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dXq4THDsQiP-wI3mA1u4YiWaMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:16:d2:77:0f:fb:1d:5a:11:d1:40:00:9e:14:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1d5eae131c3b1088ffb0237980d6ee1889668c6
Validity
Not Before: Mar 1 22:00:47 2026 GMT
Not After : Mar 2 22:00:47 2026 GMT
Subject: CN=ca6aab8b309daf285858685535abffe6f98f0d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:32:9b:c7:0f:3f:91:0a:99:84:e5:80:21:06:
14:c1:e0:35:f8:b5:21:52:be:9b:37:1b:5c:f0:f3:
3a:7a:31:4f:6e:ad:d7:cf:4e:24:ef:c2:bd:18:bf:
26:f0:f7:b4:71:f7:20:77:5c:f3:1d:55:f3:8f:92:
71:83:b9:a0:df:9f:90:d8:49:f5:53:2f:ae:5b:f1:
c6:cf:73:6b:9d:44:83:2c:4a:d4:0e:67:90:56:49:
f0:44:da:df:e3:04:bf:e3:8b:3f:b2:e7:39:fa:95:
dc:87:13:1c:67:ea:79:1f:3e:e5:cb:e0:52:11:56:
c2:09:94:2d:21:52:af:9d:51:29:4d:88:0a:86:63:
3a:3f:19:dc:88:df:d6:fa:fc:47:8e:a4:67:22:c5:
51:dd:b7:6d:61:6a:98:a0:1f:1e:9f:49:50:30:db:
b6:72:bc:56:80:5c:61:b3:b2:06:e8:37:0b:36:10:
71:7a:b6:35:05:c2:ce:a2:5e:29:3a:34:a3:61:d1:
fe:a4:1f:a0:e1:61:ed:7b:58:1b:ea:de:88:51:8a:
ad:e7:bd:81:78:80:38:20:d3:1a:24:e1:7e:4c:86:
91:24:03:e3:47:60:c6:86:ef:e3:bc:2a:93:83:ee:
f9:6b:f6:80:6a:f6:7c:1d:ab:3d:75:c7:81:ec:f9:
43:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6A:AB:8B:30:9D:AF:28:58:58:68:55:35:AB:FF:E6:F9:8F:0D:70
X509v3 Authority Key Identifier:
keyid:D1:D5:EA:E1:31:C3:B1:08:8F:FB:02:37:98:0D:6E:E1:88:96:68:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dXq4THDsQiP-wI3mA1u4YiWaMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:00:a4:f6:96:2d:9b:8f:f4:9c:b4:e1:5d:be:de:d1:a1:7a:
92:74:b4:3d:39:b3:db:6c:64:69:8a:13:a3:5d:dc:4c:03:81:
d1:16:59:d7:96:28:ee:11:33:6f:ac:25:cd:08:ba:ca:6b:2c:
59:bc:ec:1c:fb:04:62:7c:67:50:52:50:48:00:dc:d0:8c:53:
24:a3:97:ce:48:f8:6a:fc:fc:ec:11:35:9d:d8:7a:7a:91:28:
a1:a2:c2:06:8c:bd:88:f8:fa:fd:16:60:b1:a1:79:d5:55:30:
b1:88:e1:80:bb:8e:55:17:23:ea:68:e4:20:88:d4:08:83:51:
e0:04:bd:cb:ce:c9:f3:b7:a5:6d:d5:cb:25:67:dc:9e:fc:fe:
dc:db:45:f2:f2:0e:37:1d:a1:bc:a9:64:e7:eb:bb:36:bb:1f:
fc:1f:25:2d:2a:3d:2f:69:64:c6:78:23:31:26:4b:49:0b:b3:
a9:5f:64:ac:7f:90:13:37:c2:bd:14:5b:57:b9:e3:e5:33:42:
29:68:64:86:ce:63:dd:e3:57:19:12:6e:c8:d9:db:78:75:1b:
61:41:26:2e:57:a3:46:fb:5d:9a:be:99:54:7a:2e:05:00:22:
ba:22:f4:e5:d8:df:47:7d:2f:91:c8:53:5e:0c:31:18:03:44:
7c:92:da:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:02:52 2026 by rpki-client