Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
File: 0nuHf4mTQSab7GfG46CoiLp66Y0.mft (raw, json)
Hash identifier: 9k1maTjblYD2hnGKsJf8AruxJ3UB2cTdL0mig4laQCo=
Subject key identifier: 6B:52:A6:C8:41:D1:D1:45:F0:67:42:5A:D8:1C:83:D5:F0:FB:CE:92
Authority key identifier: D2:7B:87:7F:89:93:41:26:9B:EC:67:C6:E3:A0:A8:88:BA:7A:E9:8D
Certificate issuer: /CN=d27b877f899341269bec67c6e3a0a888ba7ae98d
Certificate serial: 019CAA589A048E22C0A1F1845F0FE7C1B477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
Manifest number: 0C4B
Signing time: Sun 01 Mar 2026 17:00:59 +0000
Manifest this update: Sun 01 Mar 2026 17:00:59 +0000
Manifest next update: Mon 02 Mar 2026 17:00:59 +0000
Files and hashes: 1: 0nuHf4mTQSab7GfG46CoiLp66Y0.crl (hash: qIZtY4M64qhhSgcqvRl8w7usyztmmADkijdzYpQHlRc=)
2: ESKSicApbc_Lc7K1oxfrHyvWB2A.roa (hash: 9hp563pGKax4wS0ioE86wmQq8LK8c0yOcQLKfH9tKgk=)
3: GzzDQC3ubi3zt1X18DBGioGRdBc.roa (hash: D/wNKKfIUY9J0S4B/WgJwAFtRjUwUsHpDQtQvyp4Lvk=)
4: a8xxFezDGCmHsEOSRqb1XFyjzzQ.roa (hash: UKvCG+Ut498aH2KrK/T04+U4clxpUw2ygew8dg+YGZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:9a:04:8e:22:c0:a1:f1:84:5f:0f:e7:c1:b4:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d27b877f899341269bec67c6e3a0a888ba7ae98d
Validity
Not Before: Mar 1 17:00:59 2026 GMT
Not After : Mar 2 17:00:59 2026 GMT
Subject: CN=6b52a6c841d1d145f067425ad81c83d5f0fbce92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:68:d0:27:bc:fe:bd:66:97:1e:fe:bb:87:2f:
8e:b1:a9:ae:e7:5b:a2:25:87:c3:23:ad:f0:82:ef:
2e:a2:97:b7:5f:aa:ea:34:07:81:0d:13:b0:65:68:
fe:61:8b:a7:c5:87:f4:7c:34:aa:70:2d:bf:f0:5f:
dc:0b:c9:00:bc:cf:32:c8:65:88:22:66:58:62:a9:
2c:eb:ba:44:2f:dc:c0:1f:17:f1:e5:ca:20:1f:72:
72:fe:5b:1d:eb:c8:11:60:4c:d3:18:28:6b:09:d8:
40:c0:3d:f4:25:6f:3b:ea:ff:4c:5a:14:4c:e1:2b:
31:b1:7a:a1:6a:66:d9:22:f1:76:27:91:86:f5:f6:
23:94:09:4b:9c:c8:a5:db:ac:bd:2f:19:d7:0e:44:
ba:ab:80:48:c5:e0:ca:c7:d6:1d:70:14:5b:d9:94:
ce:af:11:d5:1d:ec:ce:05:f4:8f:e2:d7:77:4f:af:
28:ed:4d:f9:ce:32:74:a4:1b:71:0e:c6:96:54:b9:
5a:66:99:80:00:cc:2c:67:af:8d:87:32:03:22:71:
c9:5d:2e:1d:c3:de:22:26:15:bc:41:b2:22:b4:b9:
fd:dd:34:03:c0:99:0c:c9:89:dd:e7:92:65:63:fe:
89:1c:d2:a7:2c:7e:0c:a1:d2:58:40:72:10:35:0e:
83:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:52:A6:C8:41:D1:D1:45:F0:67:42:5A:D8:1C:83:D5:F0:FB:CE:92
X509v3 Authority Key Identifier:
keyid:D2:7B:87:7F:89:93:41:26:9B:EC:67:C6:E3:A0:A8:88:BA:7A:E9:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:82:19:81:f7:1b:91:0e:32:d0:f9:ee:ac:4c:ae:c0:bc:e2:
6c:28:af:2e:da:78:ac:93:82:af:59:22:ed:52:a0:59:e7:dd:
2d:b6:38:5c:bc:ca:0d:c8:d0:ac:20:db:21:d4:77:ad:23:f6:
70:e4:20:43:f7:80:4e:82:c7:bf:fc:40:c0:0b:4a:90:7a:32:
55:09:94:c0:fd:59:bf:3c:31:14:15:95:44:11:fd:65:12:c2:
0d:ed:d5:30:0e:36:16:a8:2e:73:93:1b:ec:aa:0f:7b:93:d7:
5b:c3:96:1d:56:69:4a:5f:a2:06:23:05:a8:c2:be:95:e1:f2:
07:e2:0a:b8:ef:ae:1b:9e:e4:8c:8d:1a:ba:88:a7:94:32:24:
30:58:e4:c0:d8:f0:ee:43:c1:da:e7:64:4c:43:e9:0f:01:d1:
52:6c:fd:d8:73:82:92:62:72:95:c6:31:b0:07:23:fc:46:c4:
a3:d3:b8:1e:7f:ac:74:9b:a4:ea:bd:66:d8:a2:3f:03:70:ef:
25:7c:3b:bd:85:8b:75:7e:82:fe:3b:c0:3a:d9:49:93:89:0b:
e9:d1:62:ae:82:61:61:db:fa:50:06:34:59:0c:a0:6d:9b:79:
03:6d:7a:f8:e9:c7:8e:7e:80:57:5e:09:e4:2b:a1:b9:e9:17:
ab:22:82:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:07:44 2026 by rpki-client