Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
File: 0nuHf4mTQSab7GfG46CoiLp66Y0.mft (raw, json)
Hash identifier: Wza1fy7QLmNXlC9+AGCr1Oo58P+/TJL2Wmf3dYE5urM=
Subject key identifier: CD:2E:07:D3:5B:F3:B9:06:9F:AC:AF:91:D7:AB:4A:42:F5:53:A1:10
Authority key identifier: D2:7B:87:7F:89:93:41:26:9B:EC:67:C6:E3:A0:A8:88:BA:7A:E9:8D
Certificate issuer: /CN=d27b877f899341269bec67c6e3a0a888ba7ae98d
Certificate serial: 019CAC4794DB498D9A9C219194C37D95B42F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
Manifest number: 0C4C
Signing time: Mon 02 Mar 2026 02:01:38 +0000
Manifest this update: Mon 02 Mar 2026 02:01:38 +0000
Manifest next update: Tue 03 Mar 2026 02:01:38 +0000
Files and hashes: 1: 0nuHf4mTQSab7GfG46CoiLp66Y0.crl (hash: FRNJjTZYA14DHjlfuJqDx1/HijW8xQ5Rjm3+cfTgkEc=)
2: ESKSicApbc_Lc7K1oxfrHyvWB2A.roa (hash: 9hp563pGKax4wS0ioE86wmQq8LK8c0yOcQLKfH9tKgk=)
3: GzzDQC3ubi3zt1X18DBGioGRdBc.roa (hash: D/wNKKfIUY9J0S4B/WgJwAFtRjUwUsHpDQtQvyp4Lvk=)
4: a8xxFezDGCmHsEOSRqb1XFyjzzQ.roa (hash: UKvCG+Ut498aH2KrK/T04+U4clxpUw2ygew8dg+YGZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:94:db:49:8d:9a:9c:21:91:94:c3:7d:95:b4:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d27b877f899341269bec67c6e3a0a888ba7ae98d
Validity
Not Before: Mar 2 02:01:38 2026 GMT
Not After : Mar 3 02:01:38 2026 GMT
Subject: CN=cd2e07d35bf3b9069facaf91d7ab4a42f553a110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0e:2d:19:8a:1f:28:c4:ed:e9:fe:84:d6:93:
40:cb:b4:8b:e0:63:e4:6f:52:0c:1e:fa:90:34:cb:
58:d6:4c:73:da:62:cb:5d:56:f4:05:89:9e:27:74:
34:89:ee:33:ae:f8:06:01:c2:c2:95:ff:dc:fc:fb:
17:f8:ea:82:65:9b:14:32:4d:3d:4b:d2:a0:5e:cf:
53:10:7e:22:21:f9:84:59:5c:96:37:7a:e9:d4:ab:
f2:90:d6:1e:9d:98:bf:fe:95:91:35:d3:ad:3c:bc:
34:0c:67:9a:00:98:ae:f3:3e:6c:d9:9e:d6:24:0e:
f1:bc:cb:6d:c0:0d:b1:79:a7:a8:18:3c:e7:42:56:
0b:ef:5a:2c:87:73:ba:fc:85:15:0a:97:ae:fa:fe:
1e:5b:c6:d8:cd:01:54:eb:c0:72:a6:06:33:68:1c:
e3:aa:7c:fa:96:8b:92:fe:16:f2:d0:13:86:09:57:
3f:c8:a0:cc:e3:9d:f5:56:f2:e3:fd:60:85:83:6a:
df:ae:c9:25:af:59:e7:59:73:1a:7a:06:65:39:25:
64:d2:5f:18:7a:28:5c:9b:34:04:e9:c2:9c:a9:5c:
ad:09:62:9d:e3:70:7b:f5:0e:c6:7a:38:8f:65:0a:
f6:9f:99:e0:63:8e:09:bd:5e:2e:00:de:fd:e1:26:
26:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2E:07:D3:5B:F3:B9:06:9F:AC:AF:91:D7:AB:4A:42:F5:53:A1:10
X509v3 Authority Key Identifier:
keyid:D2:7B:87:7F:89:93:41:26:9B:EC:67:C6:E3:A0:A8:88:BA:7A:E9:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:7c:bc:c4:7b:dc:b5:e6:a8:b5:8f:d9:af:98:df:65:bd:ae:
c5:e8:3b:05:92:1f:d6:15:a5:18:b9:31:a1:3d:8c:21:bd:9c:
a4:d2:6e:86:e2:84:2a:29:23:09:d5:26:81:79:5f:d7:ef:24:
ca:4d:51:24:e9:af:6a:31:49:f1:40:00:b8:80:87:20:8b:ff:
ee:10:ef:3e:28:f2:88:5d:78:35:17:48:c6:d5:53:9a:e4:41:
ee:1c:d8:4f:25:d3:8b:bf:e1:45:f0:6c:4c:ee:fb:0d:d3:09:
ce:51:fe:9a:51:1d:33:9c:e6:4c:ec:d3:e4:95:54:f5:9f:7e:
c8:88:62:f3:53:a2:00:1f:91:b7:13:ab:8d:5f:e8:13:53:2f:
0b:33:41:18:1f:a3:5c:87:62:7c:41:56:32:9c:c4:ba:44:ca:
2a:f8:f4:6a:f5:33:58:6f:81:fc:3d:6c:c1:0a:93:e7:bf:99:
f6:b8:83:95:1f:5e:ed:c2:b6:5b:ba:ee:16:ca:51:36:8d:f6:
5f:a7:57:13:8d:db:77:6c:08:89:62:82:b1:c9:7e:57:f3:4c:
9a:93:da:64:0f:65:b8:d7:96:c4:06:96:a9:45:a8:d2:56:8a:
3b:4d:bf:ac:c1:29:77:38:17:8b:f0:7f:e5:0f:86:47:16:d3:
fc:cc:fe:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:17 2026 by rpki-client