Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
File: 0vONSutNAojbuFTR6uC9itP4Qfo.mft (raw, json)
Hash identifier: UNRck4aA5Hc/BzWBo0EPfj+tOzvm8mkOPACT0fCCasw=
Subject key identifier: 8A:81:17:D8:49:0C:DC:3B:67:D6:0F:75:2F:3A:9C:A5:4B:77:A7:4A
Authority key identifier: D2:F3:8D:4A:EB:4D:02:88:DB:B8:54:D1:EA:E0:BD:8A:D3:F8:41:FA
Certificate issuer: /CN=d2f38d4aeb4d0288dbb854d1eae0bd8ad3f841fa
Certificate serial: 019D26280CBA37358F51A1CE37D8E9D7B02A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 18:00:51 +0000
Manifest this update: Wed 25 Mar 2026 18:00:51 +0000
Manifest next update: Thu 26 Mar 2026 18:00:51 +0000
Files and hashes: 1: 0vONSutNAojbuFTR6uC9itP4Qfo.crl (hash: P0H406+K8f/nKX420dYPJQ0Alp+c6dcYwrLpqsxdwtI=)
2: tquIiBHdfRgZoSkv66J5g5_rmsI.roa (hash: ewRKCXj1KUDIVFZwB0RpxCjNpMk+Zl5DzmkGO5LloCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:0c:ba:37:35:8f:51:a1:ce:37:d8:e9:d7:b0:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f38d4aeb4d0288dbb854d1eae0bd8ad3f841fa
Validity
Not Before: Mar 25 18:00:51 2026 GMT
Not After : Mar 26 18:00:51 2026 GMT
Subject: CN=8a8117d8490cdc3b67d60f752f3a9ca54b77a74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f8:c0:60:1b:78:9a:8d:c8:15:9d:8b:71:76:
f3:77:06:7c:08:f9:7f:d4:d9:78:bf:34:0d:f2:59:
98:0c:87:dd:99:85:9b:72:10:30:9b:62:a5:dc:d9:
8b:09:98:36:c4:13:82:61:9c:16:78:3c:e1:6d:06:
ce:c9:b0:e7:de:46:93:ff:b6:2a:10:b5:9c:c7:8e:
bc:fa:0a:3a:2f:b1:ef:02:61:20:0a:c7:4f:85:15:
25:1a:18:a5:6f:34:35:ea:50:62:b1:37:eb:da:f2:
43:94:03:48:2b:d1:ef:62:a2:80:ec:4b:af:bd:3d:
5a:d5:7d:9e:e2:73:f9:70:3b:b7:aa:6e:55:fd:32:
7f:af:c4:d1:a6:d1:97:15:83:20:d6:2f:86:51:4e:
cb:8e:24:a1:64:59:c6:38:75:23:f8:f3:52:58:64:
fb:ff:3e:9f:e5:3f:47:bb:36:e5:c7:53:ff:60:4b:
5e:54:8d:87:e9:c0:70:44:cb:61:10:24:f2:81:89:
d5:27:a5:a6:cf:74:e6:35:e5:9e:7e:47:3c:87:c6:
f7:8e:33:dc:19:d2:2d:73:8a:6c:a3:05:a8:c4:8a:
91:40:bd:4b:1f:de:47:2a:55:a4:90:43:8d:60:57:
2e:21:3b:0c:5f:b5:78:74:52:20:04:76:cb:52:03:
ce:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:81:17:D8:49:0C:DC:3B:67:D6:0F:75:2F:3A:9C:A5:4B:77:A7:4A
X509v3 Authority Key Identifier:
keyid:D2:F3:8D:4A:EB:4D:02:88:DB:B8:54:D1:EA:E0:BD:8A:D3:F8:41:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:27:4b:1d:44:07:d4:85:49:5b:1a:d8:4f:d0:5d:f0:f4:8e:
b0:e1:7c:97:98:f6:d8:62:90:3c:ed:f0:ea:e4:02:17:f8:aa:
5c:fd:10:f9:87:97:5e:a1:0a:ce:25:59:d5:31:20:66:fb:0f:
38:3a:73:5a:88:9f:85:79:ce:37:d9:c8:80:a1:50:ab:b1:af:
f6:f8:0c:8b:ad:b7:09:89:2b:f0:61:4f:5b:62:8c:52:e0:c9:
a9:de:18:09:7b:d9:5b:2e:7a:ae:14:c6:df:a6:1b:8e:fd:cd:
8d:76:fb:22:e6:74:b6:54:ed:10:ee:89:2a:2f:7e:e3:94:2a:
95:75:d5:ec:04:ea:ce:ee:87:08:10:c2:f4:d1:e1:77:e5:21:
f5:a1:24:0f:c7:09:89:1e:87:9f:a2:d7:07:f8:93:f8:43:35:
58:49:e0:2d:7a:c8:cb:21:c8:c9:10:fb:2f:e5:e5:bf:f7:d7:
b4:f7:67:4f:91:58:b6:11:d1:b2:da:0a:c5:83:fc:ff:b6:4f:
14:05:95:4e:e9:9e:68:81:d3:c9:60:5e:88:10:96:fe:43:64:
22:47:bd:75:29:9e:1d:b1:cf:28:61:80:72:f4:ac:a8:52:a4:
0c:c7:84:c4:54:bc:54:95:aa:cc:9f:90:05:8e:a2:7a:a9:08:
4b:18:33:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:00 2026 by rpki-client