Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
File: 0vHIhC58-JGyNNOh4OLg73PoQqo.mft (raw, json)
Hash identifier: IGM8i66C1yKiHoMQ9I7GZl3WG/OnIJBXU/dxo4SLTQw=
Subject key identifier: 51:0B:0A:96:C4:60:21:51:00:4C:4B:46:12:F9:78:02:F6:10:6D:36
Authority key identifier: D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
Certificate issuer: /CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Certificate serial: 019D25BA9A1C435D30D5146599FF4993DC01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 16:01:19 +0000
Manifest this update: Wed 25 Mar 2026 16:01:19 +0000
Manifest next update: Thu 26 Mar 2026 16:01:19 +0000
Files and hashes: 1: 0vHIhC58-JGyNNOh4OLg73PoQqo.crl (hash: DJhynSIpSb5NQgaix6nOHHDurt05dGoo93mlu1pLqbY=)
2: l9fT_tPQilc8kDDpXdmC63EbBTU.roa (hash: e0hhcAS9+zmOEL/7aF5yJ1rOw5m87GlUo2fUEzHI/tc=)
3: zZqdbpX91TjBbrVKBU--OsfsNgs.roa (hash: 5bqwY0fuE7qADoXdmI9CeMVMqqLQteAK+rBOtRg2eMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:9a:1c:43:5d:30:d5:14:65:99:ff:49:93:dc:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Validity
Not Before: Mar 25 16:01:19 2026 GMT
Not After : Mar 26 16:01:19 2026 GMT
Subject: CN=510b0a96c4602151004c4b4612f97802f6106d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ad:47:3e:27:76:56:62:69:aa:79:f9:bc:60:
ed:a3:f6:1a:f9:fe:19:6e:9a:d7:7d:f0:a1:f3:a6:
ce:2d:0d:16:fc:d6:73:36:40:4c:eb:16:0e:01:96:
d1:f9:fa:fa:ff:3f:77:f0:db:60:f5:1e:77:05:b0:
fe:0c:87:a5:f2:6b:84:1d:c7:89:e6:ff:e9:cb:66:
2e:4d:d9:ad:c5:47:e4:bb:27:df:eb:52:0a:d9:47:
04:66:7e:54:3e:11:52:42:81:c7:8a:b6:26:d7:93:
eb:e0:f2:55:cb:8b:1c:80:8e:f2:f9:54:91:bd:44:
c7:ca:86:b3:1b:0b:39:9c:19:af:29:8e:58:de:01:
2f:da:52:44:07:98:50:f7:8c:ac:08:ea:7e:49:36:
65:af:31:73:7d:11:7c:9c:12:3a:bc:80:b2:86:de:
d6:e8:37:78:95:70:ee:83:67:33:2a:d8:ae:41:5e:
76:6a:d9:53:24:91:dc:bb:be:70:a9:6d:29:ea:15:
57:4a:b0:0f:4f:00:41:0b:36:0b:02:bc:f2:cc:26:
fc:17:a1:2e:c0:e3:28:38:7f:a7:50:eb:20:21:4f:
a1:b5:19:14:92:15:11:47:1c:66:99:9c:00:02:5a:
00:7a:f5:a7:7a:96:c1:42:11:bd:fb:aa:04:96:dc:
5e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:0B:0A:96:C4:60:21:51:00:4C:4B:46:12:F9:78:02:F6:10:6D:36
X509v3 Authority Key Identifier:
keyid:D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:86:bc:f2:89:7e:26:bb:05:df:17:e6:f6:f1:22:22:73:4b:
db:dd:bc:83:97:54:d1:9f:ae:68:40:5c:06:9b:a9:27:c3:8d:
9d:4d:19:55:76:3d:ab:85:ec:2b:3c:c2:91:4b:89:bb:43:ae:
2a:e2:df:7a:76:a1:b0:1a:2d:4d:05:4d:5f:97:4d:45:7f:f9:
8d:98:8e:ad:69:3c:6d:45:25:22:dd:c7:bb:2f:34:5d:26:dd:
b0:7b:b1:90:ce:15:15:52:be:3c:46:cb:ec:12:4f:5d:a6:4a:
ed:7e:72:89:9f:23:b2:f7:c3:48:b4:f0:a5:96:2d:91:07:b4:
f4:d2:ce:cb:07:26:5f:aa:d7:f7:44:42:f2:40:76:40:e4:aa:
aa:63:c1:36:7c:ff:13:59:77:4d:bc:99:b0:e7:53:b0:57:75:
3c:18:ab:1a:ca:1f:2f:4f:56:4f:98:3d:90:a1:d4:6e:38:f8:
48:40:5d:a3:3b:ea:49:b4:7c:b7:c4:84:31:64:4b:e0:7a:85:
0e:4d:3b:15:bc:80:4a:b6:c3:0a:2b:c8:c0:98:15:96:53:87:
48:81:ee:ae:d6:47:2e:cb:8b:25:8d:d5:15:1b:37:7a:f6:c8:
fc:92:47:14:21:74:9b:1b:fb:1d:17:67:57:d1:5e:88:81:e4:
a7:aa:a2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:54 2026 by rpki-client