Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft
File: 0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft (raw, json)
Hash identifier: 1KWARsLwqHc6P7t6QNv0NS/Px2nwijNtvir9gw0Lm6w=
Subject key identifier: 0F:0A:9D:A2:AA:70:47:C3:99:F0:B9:27:BF:6A:28:92:36:07:1C:6D
Authority key identifier: D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81
Certificate issuer: /CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81
Certificate serial: 019D27044B55B9752DED0FF2BB514857A0F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft
Manifest number: 125D
Signing time: Wed 25 Mar 2026 22:01:26 +0000
Manifest this update: Wed 25 Mar 2026 22:01:26 +0000
Manifest next update: Thu 26 Mar 2026 22:01:26 +0000
Files and hashes: 1: 0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl (hash: NgMCgirTrcwEXVyLzjN2JYAEfN/yqXB4z1jc/EzPRwY=)
2: 1-crrXO-fETfpfCuOfq_V8AAtFcU.roa (hash: tdCum/fabFsLr9FpxBtUaox/ikhPTJgRBISx07CTGFc=)
3: 9qhyf8XaXLBiOxT9FefpSvz7EAo.roa (hash: LVzOeIuhXpbz7YMXKNB/lJ0KobWs5PmsNOZb547oGVM=)
4: nRGVIh5sE05xD692H24Cxlq7V8o.roa (hash: Tc2ZVvug9tFo5lvN6aBVNCGxx5GKA6dz+Rua6DfVBe8=)
5: qW_xRDyYFTJ1pnImR0U2Y6u9sv8.roa (hash: lYESXNxjJKf8HpJy1cENZI84AstuQ+Y1hlO3VCh5QhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:4b:55:b9:75:2d:ed:0f:f2:bb:51:48:57:a0:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81
Validity
Not Before: Mar 25 22:01:26 2026 GMT
Not After : Mar 26 22:01:26 2026 GMT
Subject: CN=0f0a9da2aa7047c399f0b927bf6a289236071c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d2:13:e3:5d:6c:6b:84:93:7f:7b:2e:32:e4:
c3:fc:5a:08:d6:c8:31:d0:36:22:94:e8:46:6d:31:
42:ab:bf:e1:50:07:21:1e:1d:c0:e4:12:90:a5:cb:
38:f6:5a:76:dd:98:3e:2f:3d:eb:b6:6e:a3:fa:d2:
17:ee:33:d0:68:6d:95:95:02:ef:cd:ef:3b:fa:44:
35:d6:c6:eb:66:6f:2c:04:5f:f6:91:3c:50:64:c3:
86:54:77:64:53:35:6d:e8:2c:d5:c2:af:b9:ac:44:
08:99:3c:e9:04:24:25:0c:e8:d9:11:c8:8e:55:17:
56:bc:6a:dc:de:36:e4:14:41:dc:06:21:a0:f2:bc:
c9:c7:f9:e1:36:2f:a2:04:4f:ad:97:61:b5:d5:4b:
25:53:f6:cb:77:f8:5c:47:47:93:4f:35:86:77:6a:
9d:ed:8d:4a:f3:4d:26:9b:c3:f1:19:07:64:fa:e2:
70:ce:23:ad:ec:2a:13:a5:61:8a:a7:bf:b5:2f:79:
95:b3:07:d0:1f:43:f8:35:04:53:99:df:54:79:bb:
12:ec:2d:4c:d6:a6:6d:11:39:4e:0a:9b:ce:af:74:
bb:7f:e5:02:7f:69:79:b0:eb:c1:04:0c:64:5c:36:
c7:df:b2:9d:16:9a:90:11:d0:fa:62:25:22:ef:be:
3f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0A:9D:A2:AA:70:47:C3:99:F0:B9:27:BF:6A:28:92:36:07:1C:6D
X509v3 Authority Key Identifier:
keyid:D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d3:7e:40:22:68:c6:a5:3a:ca:45:14:41:79:3c:37:37:1d:
ca:ee:86:4f:bb:38:89:32:d4:ef:3a:e1:10:45:bd:9e:1a:c5:
7e:4d:79:d4:0b:20:2e:bd:3b:44:8f:4b:f9:37:33:15:c0:71:
da:42:1c:d1:f9:5b:fa:34:4b:47:d6:e0:5b:a7:f5:ee:8c:a0:
41:c0:05:8c:cd:c4:25:a8:d9:6e:cb:88:ab:67:41:f7:a7:82:
31:85:e8:f8:9d:76:4f:cc:16:c4:4d:88:34:37:33:d8:49:c9:
cf:c8:fb:5c:04:ae:b6:35:03:ce:b7:ce:10:8e:74:ca:5a:3c:
bd:a9:48:d1:ad:9b:5b:42:1c:5b:92:43:76:4f:2a:f9:ce:9b:
f9:b0:df:e2:51:a8:d5:a1:f6:9d:73:8d:ce:91:7c:50:05:f2:
84:28:4c:1a:8b:1a:40:c9:b0:e9:40:8f:46:db:91:db:e1:72:
71:be:5e:ae:97:87:19:9d:83:c5:cd:9f:4e:ba:0d:f9:a7:20:
08:a9:97:99:cf:3a:85:93:ae:34:d1:53:2c:e5:03:0c:41:35:
99:24:70:5d:98:94:b0:cc:13:d3:54:98:27:d1:c9:0c:de:4f:
f6:99:a9:49:73:07:c2:4f:5f:06:3a:6c:0b:56:7b:dd:43:fd:
ad:a2:39:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:12:51 2026 by rpki-client