Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
File: 0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft (raw, json)
Hash identifier: ZLAEeOJBaDPzJ+PKW0d2rcV6ap9hxMP3i0lMPvXKmQo=
Subject key identifier: FD:CD:31:4C:36:86:DC:ED:5B:0B:53:EE:25:D4:18:80:71:17:48:13
Authority key identifier: D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06
Certificate issuer: /CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06
Certificate serial: 019D2961370FA2DC8A54B56CA78D3F4032DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 09:02:10 +0000
Manifest this update: Thu 26 Mar 2026 09:02:10 +0000
Manifest next update: Fri 27 Mar 2026 09:02:10 +0000
Files and hashes: 1: 0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl (hash: 4ZzHkyfmbkFm0x8yA5dHDpUqcq1FbEvpLaLAgvNzMyA=)
2: lNZ8b2GqipxFmFvx0Lw_q8EwfSo.roa (hash: qDLpSNqlibtH6zRBXzlD7tUyev4dQUA/1eIb4IG63oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:37:0f:a2:dc:8a:54:b5:6c:a7:8d:3f:40:32:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06
Validity
Not Before: Mar 26 09:02:10 2026 GMT
Not After : Mar 27 09:02:10 2026 GMT
Subject: CN=fdcd314c3686dced5b0b53ee25d4188071174813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5f:4c:42:94:41:02:10:d6:d1:f8:62:19:f3:
77:9b:10:88:e4:fe:12:16:0a:72:6f:40:5e:2a:91:
90:0d:63:33:cf:69:f8:43:5c:8c:cf:ab:64:d5:4b:
1d:4e:44:04:d5:1b:06:db:1a:c0:f3:d8:13:31:ab:
b5:bc:79:4c:07:66:9b:b4:aa:14:84:43:7c:f5:7e:
be:9c:df:0e:2d:7c:b8:29:87:0a:6d:f4:d7:92:7d:
c4:37:e8:99:af:98:7a:7c:f6:1f:0f:3b:a8:be:ee:
bb:47:ca:9f:48:02:1a:35:f7:80:f9:f2:08:ab:5d:
88:e8:ab:16:ea:38:9a:07:4e:94:10:2d:07:a9:28:
a8:d2:c1:b5:59:1a:2d:b4:ed:fa:1e:f7:f8:5d:fd:
43:c5:63:7d:74:3b:23:4d:4b:17:1a:c9:62:4b:7d:
17:b4:1c:49:1f:93:08:d7:fc:36:3f:43:10:66:d0:
38:94:cb:99:ef:73:55:47:e9:30:bc:13:f0:a6:e8:
17:6d:b4:c5:cb:9e:97:15:22:4d:9c:2c:76:75:af:
7f:69:4e:0d:8b:ab:b3:4b:bb:bc:1c:4a:48:df:7e:
7c:ea:37:df:f2:d2:c9:65:50:5f:cd:1f:33:b1:99:
b5:bc:c1:70:af:61:d9:83:4f:f8:4f:cb:56:b1:43:
b3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CD:31:4C:36:86:DC:ED:5B:0B:53:EE:25:D4:18:80:71:17:48:13
X509v3 Authority Key Identifier:
keyid:D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f7:9d:ba:60:3c:69:95:20:01:d0:f8:73:ba:01:7c:db:74:
85:31:aa:38:c4:40:8d:7b:e6:54:8c:42:0a:bf:a1:41:92:dd:
b7:7a:62:27:be:6b:e8:34:08:f3:f9:61:f5:c1:12:9c:c4:75:
7c:11:bc:f2:d1:d2:56:29:fe:bf:1b:df:e6:8c:d7:1a:f5:c7:
44:78:33:e8:35:7a:79:bf:9f:f5:85:8b:4d:11:8e:d9:29:82:
9d:57:13:e9:f0:77:58:46:ad:7d:9e:65:a1:9c:cb:d4:fe:67:
13:be:5d:84:3d:98:67:3c:6c:87:b1:e3:1c:ea:b5:82:5e:4d:
07:0e:a3:d1:5e:dd:e5:17:62:29:ad:b1:80:dc:cc:59:36:9c:
7c:9b:ce:e7:34:b3:95:7f:2f:00:00:b1:15:b6:49:84:e2:a0:
95:a3:98:9e:be:dd:27:a5:f7:b8:41:6b:48:bc:65:31:19:fd:
cd:bb:7c:8c:ec:f8:0e:d4:94:4d:25:52:a8:39:9a:18:9f:2d:
f9:89:ca:b2:17:a3:b1:4e:63:e9:b8:98:77:2e:6d:e9:d9:42:
72:38:22:b8:27:f5:41:2f:31:43:ec:45:26:81:54:6c:10:74:
81:33:05:10:aa:18:aa:ab:c9:39:0e:93:8a:d9:93:b8:ce:59:
c0:ba:f0:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYTcPotyKVLVsp40/QDLeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYzRjMzgwNmUxZjg4ZTk5YmQ4YzVlNDkwMDc3ZjhkZTVk
N2NmMDYwHhcNMjYwMzI2MDkwMjEwWhcNMjYwMzI3MDkwMjEwWjAzMTEwLwYDVQQD
EyhmZGNkMzE0YzM2ODZkY2VkNWIwYjUzZWUyNWQ0MTg4MDcxMTc0ODEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAol9MQpRBAhDW0fhiGfN3mxCI5P4S
Fgpyb0BeKpGQDWMzz2n4Q1yMz6tk1UsdTkQE1RsG2xrA89gTMau1vHlMB2abtKoU
hEN89X6+nN8OLXy4KYcKbfTXkn3EN+iZr5h6fPYfDzuovu67R8qfSAIaNfeA+fII
q12I6KsW6jiaB06UEC0HqSio0sG1WRottO36Hvf4Xf1DxWN9dDsjTUsXGsliS30X
tBxJH5MI1/w2P0MQZtA4lMuZ73NVR+kwvBPwpugXbbTFy56XFSJNnCx2da9/aU4N
i6uzS7u8HEpI33586jff8tLJZVBfzR8zsZm1vMFwr2HZg0/4T8tWsUOzNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3NMUw2htztWwtT7iXUGIBxF0gTMB8GA1UdIwQY
MBaAFNLEw4BuH4jpm9jF5JAHf43l188GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHNURGdHNGZpT21iMk1Ya2tBZF9qZVhYendZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kMmIwYTItOTVlMy00MWEwLThjZGYt
ZmY4MDllN2RhZWNhLzEvMHNURGdHNGZpT21iMk1Ya2tBZF9qZVhYendZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9kMmIwYTItOTVlMy00MWEwLThjZGYtZmY4MDllN2RhZWNh
LzEvMHNURGdHNGZpT21iMk1Ya2tBZF9qZVhYendZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYfedumA8
aZUgAdD4c7oBfNt0hTGqOMRAjXvmVIxCCr+hQZLdt3piJ75r6DQI8/lh9cESnMR1
fBG88tHSVin+vxvf5ozXGvXHRHgz6DV6eb+f9YWLTRGO2SmCnVcT6fB3WEatfZ5l
oZzL1P5nE75dhD2YZzxsh7HjHOq1gl5NBw6j0V7d5RdiKa2xgNzMWTacfJvO5zSz
lX8vAACxFbZJhOKglaOYnr7dJ6X3uEFrSLxlMRn9zbt8jOz4DtSUTSVSqDmaGJ8t
+YnKshejsU5j6biYdy5t6dlCcjgiuCf1QS8xQ+xFJoFUbBB0gTMFEKoYqqvJOQ6T
itmTuM5ZwLrwRg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:47:45 2026 by rpki-client