Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
File: 0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft (raw, json)
Hash identifier: /cRhxx/OmmFrxh/bbmpaSpEBfT03mQNbRqqbHm8WqdA=
Subject key identifier: F2:73:15:48:C6:89:BA:41:9F:4D:FC:09:49:C3:A4:D5:59:87:8A:1E
Authority key identifier: D0:5B:26:23:A3:9D:55:6C:50:B7:04:6D:36:44:7F:B6:21:AF:97:4A
Certificate issuer: /CN=d05b2623a39d556c50b7046d36447fb621af974a
Certificate serial: 019D26CCCA6EEE71D93CF59C10A508440E6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
Manifest number: 15C3
Signing time: Wed 25 Mar 2026 21:00:48 +0000
Manifest this update: Wed 25 Mar 2026 21:00:48 +0000
Manifest next update: Thu 26 Mar 2026 21:00:48 +0000
Files and hashes: 1: 0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl (hash: uH7LALdRn1CozaaD7hSypu00eh+El1q8o15rC5R8VYM=)
2: pCWS_26lWVBmz3evvhhCPtQ3724.roa (hash: 169W7Abudr//3hW1olxvzVQxe6wwpkcYjx7dbhDz4D4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:ca:6e:ee:71:d9:3c:f5:9c:10:a5:08:44:0e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05b2623a39d556c50b7046d36447fb621af974a
Validity
Not Before: Mar 25 21:00:48 2026 GMT
Not After : Mar 26 21:00:48 2026 GMT
Subject: CN=f2731548c689ba419f4dfc0949c3a4d559878a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0f:d6:c5:8a:c6:45:6f:11:3b:ff:1b:3a:d8:
fa:d1:76:6a:2e:e6:bd:b6:f8:47:aa:d9:f4:e3:98:
f4:be:bd:6c:92:bb:87:c3:21:3b:b6:10:b3:e9:d1:
60:0f:d3:2b:d2:c3:7f:78:65:48:39:ff:6b:6e:00:
0b:86:0d:60:27:11:fa:06:f5:47:6e:4d:fb:ef:cd:
76:36:fa:78:a7:69:6e:80:21:c2:85:bb:18:c5:f4:
58:18:27:7e:83:1a:20:f5:05:7b:1e:9a:61:ab:ec:
df:17:64:6a:15:4d:89:47:7b:45:08:f3:22:17:66:
f1:90:c8:a5:54:c4:c3:c9:e3:80:8e:f2:92:ff:39:
c9:e4:6e:3d:0c:1d:17:98:c8:7a:bc:9a:0b:d2:80:
b5:81:f8:b5:5c:f7:82:5d:31:27:19:95:87:4c:90:
ac:d6:01:3b:8e:ed:b0:c5:ac:53:c4:07:8f:d6:f9:
37:90:d6:01:7a:4a:60:07:ea:32:df:79:cd:22:d2:
1c:aa:31:25:fe:fd:d6:c3:a2:2a:ab:16:d6:b6:08:
a3:3a:4f:40:3a:a7:3f:b2:d8:7c:fe:1e:f5:25:13:
cd:89:4c:4f:19:83:e5:45:80:a8:26:c3:45:8b:a7:
c9:c7:cf:57:98:2e:83:c5:3c:aa:c7:34:ab:93:4d:
60:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:73:15:48:C6:89:BA:41:9F:4D:FC:09:49:C3:A4:D5:59:87:8A:1E
X509v3 Authority Key Identifier:
keyid:D0:5B:26:23:A3:9D:55:6C:50:B7:04:6D:36:44:7F:B6:21:AF:97:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:2e:5a:8a:0e:f3:14:0c:cc:6b:83:5b:9b:ad:76:5d:ad:35:
57:99:ab:9e:ce:93:b6:4b:09:b5:9b:11:0a:70:13:45:6f:14:
99:2e:f6:be:5b:5d:6d:2b:08:47:55:4b:7c:83:83:c8:f9:d2:
2a:c0:45:dc:87:19:4d:e0:42:2b:ce:87:f5:d3:9e:2a:34:46:
5f:a8:8a:21:8f:77:b1:cf:e9:b6:e0:17:62:f6:23:01:cc:a1:
13:c5:a6:98:eb:b5:f7:8a:41:ea:97:c6:1c:ff:09:c3:4e:6c:
e8:0b:da:4d:5c:20:c4:bb:17:aa:3a:b4:7d:09:c8:5d:62:d0:
a7:db:93:67:8b:4a:22:38:43:96:39:85:65:34:89:0b:de:eb:
92:a8:e7:41:64:be:ac:b8:70:ea:a2:3d:44:bd:71:b7:80:13:
0a:d8:59:1f:0e:23:74:bb:79:a5:6b:82:62:0a:50:77:b5:0a:
61:65:81:5c:e2:5f:98:9a:80:b4:d9:dc:76:33:9c:7a:10:2b:
31:46:a8:46:d0:19:5d:76:e2:f9:dd:df:6c:81:80:87:74:4b:
db:e2:84:c3:58:de:cc:f4:33:41:2a:2b:ac:e1:9f:e1:1d:2b:
b5:77:56:99:39:df:3e:05:37:1a:82:37:a2:6a:00:cb:15:89:
d8:98:8e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:26:09 2026 by rpki-client