Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
File: 0cSRMJSiEmjHOmdlOjc41z5cWac.mft (raw, json)
Hash identifier: PntRiIBbfhkWV/MwBhdYRfVlUonrvXIqSRjYY5WIR40=
Subject key identifier: D5:E2:74:B2:D3:CC:0C:95:37:4B:55:C0:7F:06:A2:5A:45:21:3D:6D
Authority key identifier: D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
Certificate issuer: /CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Certificate serial: 019D273B0F3FD6B24B2E8DE63D9CBB686214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
Manifest number: 1760
Signing time: Wed 25 Mar 2026 23:01:14 +0000
Manifest this update: Wed 25 Mar 2026 23:01:14 +0000
Manifest next update: Thu 26 Mar 2026 23:01:14 +0000
Files and hashes: 1: 0cSRMJSiEmjHOmdlOjc41z5cWac.crl (hash: Jd9rI3EEdu9XbLY+59cw6J1Pcqj3oKQ77LYOo7g/0Lc=)
2: ZjZpopADEszQ-pk8iJcM4buK_Vk.roa (hash: kT/wMhqwMSPuX9SvpMfdYohIGO0Je1OedjWoKvA8CNs=)
3: jyVGCyGgEBWJDHp2JEn0ylLOQpw.roa (hash: Z172Tcqn6RnvzWrlqa5fx4IBPek1nFPjcCRMXGw3qXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:0f:3f:d6:b2:4b:2e:8d:e6:3d:9c:bb:68:62:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Validity
Not Before: Mar 25 23:01:14 2026 GMT
Not After : Mar 26 23:01:14 2026 GMT
Subject: CN=d5e274b2d3cc0c95374b55c07f06a25a45213d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:de:65:47:6f:ca:53:f8:23:02:c7:8c:42:9c:
a7:73:38:10:36:19:5b:c8:a9:db:e6:a6:71:37:b5:
1c:f1:f1:17:f4:79:12:0f:97:75:4f:81:b7:5d:ad:
a5:fc:24:43:77:de:69:ad:ef:06:f8:bc:24:99:5b:
48:f9:84:a9:c3:42:25:31:58:f7:f1:f3:16:f3:23:
31:38:fc:e5:77:a7:ca:9f:2f:2c:49:6e:bc:c2:ec:
43:b4:39:f6:89:ab:b9:0a:3c:7f:40:c4:f2:e9:b7:
b4:0e:05:b2:79:38:8b:e0:e4:77:1d:76:b4:74:83:
4c:06:91:cf:79:84:03:50:ac:c1:df:9b:50:67:b0:
cc:bb:11:cc:50:0d:cd:f7:db:ad:01:ca:c8:92:e1:
c2:17:57:69:12:8a:fb:24:0c:cb:bc:2a:85:a7:49:
af:d6:ff:57:cb:27:db:71:45:bc:fb:b8:eb:ab:ce:
35:20:66:08:8e:81:74:c5:f2:d1:75:61:e5:ac:b3:
b0:e3:14:29:a6:44:15:bd:4f:6e:ba:db:8b:a7:57:
19:e7:2d:e9:35:6b:ad:02:d0:32:a2:70:35:d5:1e:
31:a5:c5:44:d8:26:c2:6b:9d:4b:32:96:8d:91:a4:
02:91:52:de:84:0b:17:32:f2:b0:4e:e7:70:25:bc:
e9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E2:74:B2:D3:CC:0C:95:37:4B:55:C0:7F:06:A2:5A:45:21:3D:6D
X509v3 Authority Key Identifier:
keyid:D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:43:f8:1c:bd:90:fe:f3:01:3f:95:8f:c1:30:30:53:13:e3:
b8:23:8f:7e:ac:70:2a:17:93:51:af:d8:14:3d:05:c7:27:6d:
cc:4c:d3:e6:18:33:ee:d9:3c:07:2f:2a:ce:4e:2b:b7:bc:c3:
83:88:94:c3:7b:a7:5a:d2:5b:bc:51:ab:42:0e:69:77:26:f3:
19:bd:3e:0e:7b:73:90:ce:a1:36:fe:e0:63:d7:1b:83:9d:ab:
7b:1d:29:06:7a:0b:18:05:02:ee:f4:9f:93:62:0b:bf:50:ea:
a1:7d:b8:f9:6f:8e:25:fa:55:e1:02:6d:df:3f:01:dd:59:28:
08:fa:86:40:f2:1a:a2:05:4e:df:40:ab:4d:e7:59:6c:c6:e7:
c5:90:63:69:33:c9:fa:ef:38:ef:30:ae:3a:59:3c:17:9c:d8:
7c:1b:ea:86:72:93:10:6a:cf:b4:87:4c:0a:bf:9c:9b:5f:05:
7c:60:22:dd:92:52:e0:91:83:e8:b2:9e:18:87:5f:cf:08:bb:
db:34:98:75:cd:15:71:f8:90:1e:cc:fd:ba:fa:43:75:6c:32:
4f:20:ef:58:29:ea:a6:49:7b:ce:f4:e1:da:ed:f7:40:82:c1:
85:4d:4c:29:77:44:40:d7:c7:ba:9e:b2:0b:83:5d:bb:6b:e7:
be:92:c3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:02:57 2026 by rpki-client