Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
File: 0VK0wfXUhO78KxWX9FUAOrZUsFU.mft (raw, json)
Hash identifier: 2WJKBw0MKd5OjgXXCofYfDmLEzzQkdyenHg7vPO/q+s=
Subject key identifier: 00:86:FF:82:15:A5:FB:03:30:45:73:6A:2D:24:80:FD:C3:63:0A:1C
Authority key identifier: D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55
Certificate issuer: /CN=d152b4c1f5d484eefc2b1597f455003ab654b055
Certificate serial: 019D27E03D843052D2416B1CE6058377B381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 02:01:40 +0000
Manifest this update: Thu 26 Mar 2026 02:01:40 +0000
Manifest next update: Fri 27 Mar 2026 02:01:40 +0000
Files and hashes: 1: 0VK0wfXUhO78KxWX9FUAOrZUsFU.crl (hash: W6oFvB5HhTnAryeuhlQd84ogFyMeS7Mc4XikTwOUh/U=)
2: NP9SfFGYsYXsch7Dr3qELq74PLU.roa (hash: fuLAQTL3YUInXQtx9TnphHOeZzSHEh2X+xButoDoLCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:3d:84:30:52:d2:41:6b:1c:e6:05:83:77:b3:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d152b4c1f5d484eefc2b1597f455003ab654b055
Validity
Not Before: Mar 26 02:01:40 2026 GMT
Not After : Mar 27 02:01:40 2026 GMT
Subject: CN=0086ff8215a5fb033045736a2d2480fdc3630a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:db:14:22:c7:ff:3a:00:ee:e8:92:24:64:1a:
47:22:cd:ba:b7:4a:17:f4:90:0a:4a:af:a3:57:b0:
4c:0f:8d:4d:66:2a:22:8b:47:6c:76:f4:da:f5:1a:
e4:4c:02:6e:ef:eb:8b:1d:28:5d:e4:1c:0f:37:ea:
f8:b7:22:f7:82:0b:88:73:8e:fa:fc:64:5e:e5:eb:
1b:c7:02:23:01:4d:c7:1e:19:c7:47:fa:ef:90:3a:
dd:f5:c0:96:68:4d:87:9f:51:d2:d1:0b:24:ee:33:
7b:72:93:1a:85:8e:91:0e:f3:79:a7:d6:52:ba:32:
f4:e7:5c:3d:27:76:8f:dc:f0:67:07:1a:2b:68:fd:
2b:51:c9:79:c2:cd:58:cc:46:dc:6b:dc:b8:4e:ed:
08:9d:01:62:6b:0d:75:09:c4:cb:6d:08:17:19:b0:
1c:69:9d:a9:30:24:0b:dd:75:5b:45:bf:ce:b8:f4:
48:75:65:05:27:c9:67:69:91:0f:cb:b1:4a:6e:0a:
78:59:19:e6:97:b9:21:21:a5:3a:e1:23:2f:d5:e4:
f0:9c:1a:4c:1f:13:4a:3a:3a:5c:77:13:11:5e:a3:
ff:74:38:01:16:47:57:1f:9a:8a:d4:37:08:69:f2:
db:3a:fb:eb:0c:ca:9f:84:78:00:86:d7:9c:b3:2d:
1b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:86:FF:82:15:A5:FB:03:30:45:73:6A:2D:24:80:FD:C3:63:0A:1C
X509v3 Authority Key Identifier:
keyid:D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:86:4f:64:aa:e8:09:b7:89:a3:c6:fd:fb:70:ff:ec:f1:a3:
c3:81:4c:92:7f:a1:2c:18:99:ac:8d:6f:d3:7a:44:fb:39:02:
44:18:8c:44:c5:84:37:3d:71:a7:b1:08:fc:d9:8b:be:06:0b:
ca:49:b6:c7:21:58:f8:d2:71:c2:20:ae:e5:38:0a:5a:c9:65:
4e:8a:47:20:46:e0:e2:9e:aa:8c:18:e7:40:bc:ca:4b:98:c0:
bc:28:1d:87:69:6e:96:cc:81:cd:11:f0:46:59:6e:83:43:40:
8a:8c:94:cd:19:d2:23:38:e5:91:25:c4:ae:ad:2b:0e:a1:8e:
bb:33:de:35:20:6a:da:23:e4:86:bf:48:20:76:f1:11:6f:6c:
82:10:61:76:78:71:d4:6a:4e:c6:e7:1c:2e:f6:49:ab:11:5e:
2c:4d:b0:7c:9a:e1:75:fa:69:33:a8:95:32:8f:02:c0:6c:f3:
93:52:ac:37:ee:82:fc:ec:1b:35:75:1f:24:11:8c:dc:aa:27:
ca:52:36:05:a8:ba:a0:3f:fa:85:8f:fd:3f:6f:4c:25:56:93:
ac:d7:94:cc:b9:2f:b7:8c:e9:45:1b:4e:8a:51:10:f8:d6:fe:
bc:b2:af:6e:53:5f:2f:0d:db:ed:6d:17:15:57:01:fb:99:0f:
c0:b7:59:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:24:09 2026 by rpki-client