Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
File: 0nXXqLrAR39VCd_xG5GVymDfh9o.mft (raw, json)
Hash identifier: G8eTc81EgOAkNP3q7gTGPu7gJK7urygZfPm1o8Jniu0=
Subject key identifier: E4:B5:F6:AF:75:A8:4E:49:17:72:C7:BF:8D:93:BA:37:5A:C5:11:8F
Authority key identifier: D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
Certificate issuer: /CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Certificate serial: 019D273B165793DC2546AF00F8B519D24FD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
Manifest number: 1891
Signing time: Wed 25 Mar 2026 23:01:16 +0000
Manifest this update: Wed 25 Mar 2026 23:01:16 +0000
Manifest next update: Thu 26 Mar 2026 23:01:16 +0000
Files and hashes: 1: 0nXXqLrAR39VCd_xG5GVymDfh9o.crl (hash: hq6jCza+6bqwM60LD1kOc50h2enODhWv6NESdRYHeZU=)
2: GtnEFJvKTM3dVz-bb1HbpXYUrYs.roa (hash: cDuGcuctwovPIbS70GWqGpssgtZhA8cTCgHfI3MencU=)
3: WuVc3nuSKHmp3Zm0YnwHWiUHPTA.roa (hash: kgJdmFJQtmaA3Y3jCaieWqKoWOzHXlfXNx+CHVD0plg=)
4: ofbntN5B2PaQ2qY_-I_tLGYYjhg.roa (hash: H4gD4m9vsqK2ECIn6QzYNPIe9nKZuWgiHiBZseyCf0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:16:57:93:dc:25:46:af:00:f8:b5:19:d2:4f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Validity
Not Before: Mar 25 23:01:16 2026 GMT
Not After : Mar 26 23:01:16 2026 GMT
Subject: CN=e4b5f6af75a84e491772c7bf8d93ba375ac5118f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:03:88:68:f8:4e:00:c5:dc:1c:c2:f8:58:18:
e1:60:6f:88:f5:06:b5:eb:f0:f8:37:a5:34:d0:22:
43:95:f2:f9:a3:aa:53:9d:cb:54:81:d1:f2:38:a8:
1f:60:7c:f4:c3:a8:c5:18:5d:98:ea:f0:79:f2:d0:
95:80:ad:8f:9d:d1:f7:e4:e8:94:38:7f:12:17:f3:
c0:91:d0:d5:ad:24:87:6e:bb:d9:06:a3:de:7b:c6:
5f:3e:b5:0d:f5:b1:d8:dd:67:08:44:5d:aa:9a:24:
88:d4:6b:d5:fe:66:f9:71:da:71:9d:5c:24:87:3b:
6e:fe:66:8d:56:dc:3b:11:d2:1f:19:e5:e9:0a:e2:
c3:5c:cb:60:d2:37:8d:c0:d2:c4:65:56:f0:a4:8b:
50:09:f1:cf:21:16:30:2a:c1:bf:b5:ea:6f:3a:a6:
3f:21:ec:94:6a:b2:f5:38:a4:66:e8:1d:0b:09:7d:
fc:b2:ca:ee:e0:44:89:bb:6f:02:88:c4:c1:c3:15:
3d:54:16:ec:39:86:45:3a:be:2b:b4:77:fc:92:13:
98:13:5f:3d:32:72:69:d1:ef:f7:c3:30:71:6f:82:
01:94:d7:5d:4b:da:99:71:bf:d5:d9:3a:87:9f:42:
99:e5:d1:c6:4f:69:fc:a7:06:ec:5f:0b:66:83:05:
72:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B5:F6:AF:75:A8:4E:49:17:72:C7:BF:8D:93:BA:37:5A:C5:11:8F
X509v3 Authority Key Identifier:
keyid:D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:fc:73:79:d4:35:fa:02:fc:10:80:48:21:d2:6d:15:57:b1:
f1:03:b7:b9:e4:f0:4f:e8:86:7c:3b:6b:6d:03:fc:bf:c2:34:
ed:a2:1c:32:93:f4:6d:8c:b5:e3:aa:b2:b9:c6:c5:84:be:fd:
4a:53:b4:90:9d:47:3c:7e:6f:1b:db:b4:d7:7e:0a:b5:f6:52:
df:44:6f:74:d2:bb:54:77:1c:8b:0a:f2:f9:63:f4:ca:d7:13:
b9:6e:f5:00:b3:15:cc:17:eb:60:ca:a7:01:51:bd:63:b0:28:
c7:8f:de:b4:88:e5:84:59:cb:a9:63:08:9d:51:53:43:0f:bf:
62:7e:e2:ac:4a:d5:71:40:91:b1:a3:1f:76:ed:3d:7c:21:f6:
a8:34:e9:26:5f:24:70:56:20:cb:b7:98:5c:75:9c:28:b8:78:
77:d1:bf:67:f9:37:90:79:0c:ea:39:cb:7d:e8:8a:b8:52:21:
ae:f2:b0:6d:8f:43:22:57:a3:5e:81:dd:d3:fc:83:f4:cd:5f:
57:44:5d:47:9e:95:84:15:9c:9a:9d:a7:d1:ef:57:59:1b:20:
32:83:2c:cc:07:d2:59:bf:a0:43:f6:4f:82:b0:9b:4f:b4:1d:
bf:2e:87:6a:60:7c:62:e6:c6:5b:8f:98:24:ed:b8:4e:71:36:
63:8e:82:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:24 2026 by rpki-client