Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
File: 0Q1bMLRse5ey28RYnOo2Iq11YVY.mft (raw, json)
Hash identifier: 0FPObb//pfPISFjhTkNy47mbCwFkWztK3udRmRWbxpg=
Subject key identifier: DC:59:E3:65:35:3B:90:F3:89:B9:E6:1D:85:63:77:C4:1C:44:E5:B2
Authority key identifier: D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
Certificate issuer: /CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
Certificate serial: 019D28BB508961DFACDB15E1E1D24717822B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 06:00:57 +0000
Manifest this update: Thu 26 Mar 2026 06:00:57 +0000
Manifest next update: Fri 27 Mar 2026 06:00:57 +0000
Files and hashes: 1: 0Q1bMLRse5ey28RYnOo2Iq11YVY.crl (hash: BJG/+7txPjAvXHVTKO4gFMr0Mq2jHRGGqLZUSqBy73I=)
2: KJO5SafutHdx989Y4beR-MDi2-w.roa (hash: DcoFrISYVHpYfF3qhUpQz0nKOtSKRePG4GmzBfnkvzE=)
3: aoIheKr9cfwdkfPnA8io2rwnzUU.roa (hash: bd8EK0ErpEEUoneRY3CDUEglnwrfEtlsUHg/CzYtrqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:50:89:61:df:ac:db:15:e1:e1:d2:47:17:82:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
Validity
Not Before: Mar 26 06:00:57 2026 GMT
Not After : Mar 27 06:00:57 2026 GMT
Subject: CN=dc59e365353b90f389b9e61d856377c41c44e5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7f:5a:be:15:cf:c3:e4:5d:8b:9f:71:9a:05:
40:4d:59:cb:40:ab:ac:9e:fc:a2:cd:c4:91:57:49:
4d:52:eb:9a:10:3b:34:77:8e:dc:a7:6f:8d:45:91:
b2:b1:5e:57:1d:22:97:6f:e0:86:ae:10:c4:24:5e:
32:ec:a8:be:74:34:f7:e1:18:7a:8a:48:86:8f:04:
3c:f3:7f:33:a9:97:33:d5:5c:4e:0d:a1:c3:63:e0:
d5:94:48:cd:66:9b:8d:bf:33:44:5e:95:58:7f:20:
9d:df:9b:5c:1a:49:e7:38:33:de:93:da:ac:db:18:
4a:62:85:5d:4c:69:3a:07:a7:99:26:a5:07:2e:19:
4c:56:5b:4a:fa:29:04:1f:2e:c6:bf:3f:65:2e:d4:
a1:63:07:8d:30:66:54:6c:0e:38:cb:4f:72:d4:65:
b1:d6:eb:f1:06:3f:7e:de:75:e6:aa:ab:10:26:c5:
cb:23:f8:a4:95:e0:d6:85:02:5e:2d:a8:fd:db:2e:
5f:84:bb:1b:dc:55:73:b6:59:05:cf:91:bc:ca:a3:
49:09:f3:ca:a7:0d:d6:cb:23:d5:51:c0:64:21:b0:
ea:f7:62:cf:8f:ca:a7:38:27:39:b6:9d:7f:35:53:
fa:50:c3:0f:55:8e:f5:c2:5d:2b:d4:64:d2:23:04:
2d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:59:E3:65:35:3B:90:F3:89:B9:E6:1D:85:63:77:C4:1C:44:E5:B2
X509v3 Authority Key Identifier:
keyid:D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:1c:61:df:a1:8d:1a:b9:74:2c:c2:7e:a3:07:30:35:56:f2:
86:73:06:48:f6:2c:0c:b2:bf:db:c7:6d:09:93:cd:d0:61:9a:
75:e3:07:9b:2d:83:5d:5a:1d:98:ad:14:d3:1f:42:9a:8a:ab:
e0:e0:f3:a0:8c:ce:a3:0c:06:ed:09:21:b3:e0:ea:de:1a:4d:
b3:e1:10:f5:b3:45:6d:89:b6:61:65:bf:90:10:65:60:09:29:
30:c6:46:5e:39:63:da:4e:dd:7d:74:fb:47:6a:c5:3e:cc:46:
b4:ee:37:ee:00:66:7b:ad:dd:7d:50:f2:5c:41:69:49:6c:da:
f8:b5:d3:9d:e4:86:98:f8:9a:af:96:74:f0:ff:34:31:04:26:
35:52:73:5e:3d:69:c1:89:dd:df:0b:0f:bc:2a:48:0a:30:cc:
8a:f3:40:f3:70:a9:db:41:04:87:e3:cd:75:8c:2e:02:59:f5:
bf:5e:95:3d:5c:0d:01:ed:a4:e2:c7:10:b7:00:5b:6a:f5:c7:
1b:e6:fa:ad:d6:82:03:71:ac:48:ce:b7:a1:81:f0:c2:4b:ec:
cf:5e:7e:e7:65:12:76:fb:0f:c0:f4:7b:ca:11:de:29:f2:26:
c7:37:2f:f3:58:6a:b1:ac:6b:f8:c5:15:c7:77:85:a3:87:62:
36:0d:8a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:12:04 2026 by rpki-client