Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
File: 0u0bbMpTCR9vkNGllQzrbVOwOq0.mft (raw, json)
Hash identifier: SpOYpWvEw22jelxrZfzkp2RWsJ9L533J6+fjOFEy1gs=
Subject key identifier: 6E:C2:1D:3C:7F:45:FB:20:E8:55:1E:D8:48:0D:8F:80:54:1F:66:49
Authority key identifier: D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD
Certificate issuer: /CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
Certificate serial: 019D28F2C3BB68661560E96E85124BC7EF63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
Manifest number: 0C93
Signing time: Thu 26 Mar 2026 07:01:31 +0000
Manifest this update: Thu 26 Mar 2026 07:01:31 +0000
Manifest next update: Fri 27 Mar 2026 07:01:31 +0000
Files and hashes: 1: 0u0bbMpTCR9vkNGllQzrbVOwOq0.crl (hash: RV4FZGQ7USxHQZxAllIQs/LzoZGwmrXLgevhp99n1pM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:c3:bb:68:66:15:60:e9:6e:85:12:4b:c7:ef:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
Validity
Not Before: Mar 26 07:01:31 2026 GMT
Not After : Mar 27 07:01:31 2026 GMT
Subject: CN=6ec21d3c7f45fb20e8551ed8480d8f80541f6649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2f:06:7a:71:35:3f:84:f5:8f:b9:3f:8c:53:
71:09:fa:a9:67:02:ea:ad:a3:c9:ff:8d:e7:55:a4:
70:ed:a8:ad:8b:e1:84:04:bf:aa:1f:18:36:f6:63:
33:55:cd:02:4d:09:14:43:b6:cf:7f:e5:b5:61:e7:
7b:9e:7f:71:c6:1c:b2:70:02:db:0e:c1:9b:ef:0d:
c4:07:a0:ff:cf:6a:35:6d:27:25:fd:2f:9a:d8:bf:
e1:4d:a0:b8:00:f9:7a:35:11:e9:32:ac:3f:69:e9:
96:6d:f5:59:10:76:e3:43:c8:8a:09:77:c0:33:51:
9e:bf:6c:b6:a1:b4:a1:f9:07:71:c1:05:8d:3c:43:
f1:2b:70:9d:5e:0a:91:71:c5:8f:8d:93:58:8e:a3:
4e:00:59:8a:76:4a:40:df:18:e1:23:e7:f9:5f:da:
03:23:34:ae:41:84:61:6d:fe:8e:c7:0a:d4:92:1e:
f3:2a:40:6e:7c:cd:ce:9d:26:01:f8:ba:0e:3b:92:
5a:45:91:43:88:9f:9c:f4:af:01:aa:05:ed:b3:4f:
30:32:f4:80:68:67:ba:78:5c:27:f9:48:e2:09:dc:
4f:1b:bd:23:02:4c:7c:95:75:a2:6a:1d:f6:e2:5a:
fa:85:84:9f:a0:f8:2d:46:1e:12:86:56:d9:36:a3:
ef:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C2:1D:3C:7F:45:FB:20:E8:55:1E:D8:48:0D:8F:80:54:1F:66:49
X509v3 Authority Key Identifier:
keyid:D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e9:56:40:5c:29:35:fc:f4:60:5b:89:76:b9:88:1e:88:9e:
0f:3b:ff:5d:f2:62:e4:4f:88:42:af:b9:29:57:db:2b:6a:c3:
7f:66:c1:8d:0d:fb:86:dc:d6:8e:dd:50:35:6d:9f:23:11:b2:
5a:e4:0c:ba:fc:71:34:40:86:f9:6c:1c:6d:c1:73:5e:7b:83:
06:31:5d:c1:64:47:8a:ac:d6:2d:2c:ad:24:62:77:67:d7:e8:
4b:a5:5e:96:dc:4e:7e:da:dd:5c:fa:9b:cb:67:2b:cd:af:44:
d7:21:1b:57:19:66:91:3f:13:41:c6:42:47:62:c5:70:d7:af:
f3:90:f0:13:3d:56:21:2f:d3:2b:37:80:5a:a6:be:cf:35:69:
8b:c6:8f:94:c8:db:aa:65:da:46:2f:55:53:73:c0:c2:eb:e3:
e3:97:9e:34:92:c3:73:f5:5c:00:a7:ba:1a:84:88:fe:ca:75:
59:fb:05:57:af:40:47:bf:3d:5f:60:8f:8e:96:36:e4:b4:9d:
26:29:fe:5e:ee:b9:eb:e0:37:82:01:ce:ce:b2:9d:3b:c1:e2:
cd:a8:27:99:b4:82:6c:17:45:31:c5:e0:d7:a7:e1:06:24:52:
02:f8:ff:21:70:32:23:97:97:c5:ed:7a:3f:35:f1:7e:83:a6:
19:5a:91:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:41:21 2026 by rpki-client