Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
File: 0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft (raw, json)
Hash identifier: wttjXBYzpv7R5aZma7kIpx3j87D6MWTnhgKl8uxsUSo=
Subject key identifier: FD:A0:D8:DE:53:D0:4C:A1:B7:68:85:B7:C5:24:D8:EE:1E:15:DD:87
Authority key identifier: D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9
Certificate issuer: /CN=d29dc792adfcfe88c79e7958fbfec525630b62f9
Certificate serial: 019D2997159811F9B51E03914A268F987D4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
Manifest number: 0C8C
Signing time: Thu 26 Mar 2026 10:01:00 +0000
Manifest this update: Thu 26 Mar 2026 10:01:00 +0000
Manifest next update: Fri 27 Mar 2026 10:01:00 +0000
Files and hashes: 1: 0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl (hash: m4LS2HdF41ldXxnAOrpxEz7Tiy/qXhPEaEMP2bkq3sQ=)
2: 1KnU7H_UVe-XpNapFYFQEn0LJJQ.roa (hash: cUtUMg5M4fjhGoVm34BuVn+17rIs5yEOOCki02p10ww=)
3: j5hpz0Ky4wyZsfB5ISUjvlPvrQ8.roa (hash: eXsNvI5c0yl1gppo8mH8F57qlB2x5VSSClL68a+AJ/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:15:98:11:f9:b5:1e:03:91:4a:26:8f:98:7d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d29dc792adfcfe88c79e7958fbfec525630b62f9
Validity
Not Before: Mar 26 10:01:00 2026 GMT
Not After : Mar 27 10:01:00 2026 GMT
Subject: CN=fda0d8de53d04ca1b76885b7c524d8ee1e15dd87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e0:78:d1:02:3b:57:a4:ba:81:f2:13:8f:e0:
8a:1b:8c:16:78:e1:4a:8c:6e:7f:5a:a9:8b:a5:91:
1e:57:18:df:41:9d:37:f9:5b:ed:5f:f3:73:0a:ff:
68:72:8c:0d:c1:db:d3:a2:8b:2b:bc:f7:dc:cb:f1:
4a:ff:92:91:64:8f:2e:78:ee:7b:e1:79:ac:7c:d6:
df:28:5a:06:00:79:4a:06:0f:bd:49:dc:3b:d3:35:
e0:67:2c:71:6b:b3:7f:ea:51:44:04:a8:a9:81:9e:
de:cd:d1:b1:eb:2e:5f:fb:32:66:30:de:90:a1:82:
21:bd:cb:3d:26:55:76:5d:d2:e0:93:1b:99:e1:3b:
5f:8e:e2:fb:ba:86:13:81:7b:09:fe:a8:f5:f7:42:
e9:ea:14:51:9b:ab:a2:2e:f8:b6:5d:65:b9:33:8b:
f1:be:26:e5:61:2d:30:0a:15:5c:1a:a2:f0:71:19:
ae:cb:62:d9:02:56:ec:e6:01:07:71:ee:26:90:d0:
1d:9e:64:da:3d:11:0e:c2:8f:62:0f:35:b7:66:b6:
75:df:e8:2f:23:8f:46:db:00:f1:93:e9:18:d8:a7:
b5:82:fb:7e:1f:08:51:1d:10:6c:bf:a8:a0:76:82:
31:b1:76:e5:2b:b0:d3:19:b9:62:99:77:7c:a2:8d:
19:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A0:D8:DE:53:D0:4C:A1:B7:68:85:B7:C5:24:D8:EE:1E:15:DD:87
X509v3 Authority Key Identifier:
keyid:D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ff:2b:05:85:a7:df:94:f4:89:9f:ed:5e:5c:0f:08:24:3c:
a3:bd:2a:aa:8a:32:de:f1:48:91:f7:a4:c5:ac:3f:56:d4:0b:
9a:65:34:d0:71:21:57:b3:eb:d7:76:86:cc:2d:7f:8d:f8:56:
cf:87:9d:41:3d:f2:5b:bc:fe:0a:12:99:c6:d1:59:4e:00:f9:
52:0a:3c:5f:78:57:84:95:8a:18:5f:d6:38:db:e8:70:97:63:
dc:47:e5:5a:62:18:9c:37:08:8f:39:e4:b1:98:d5:a7:a1:23:
6b:16:08:46:a0:92:4d:fb:7d:4d:d8:a3:a2:94:08:97:36:26:
0d:85:35:20:99:e5:7c:d6:77:c4:03:20:fd:78:ef:73:a7:e1:
08:a3:79:2a:29:1d:99:bb:91:52:77:0f:17:2a:04:0c:ff:a0:
ed:55:af:d9:76:2a:48:d1:e3:01:2b:5f:d0:31:13:90:c2:db:
94:5d:b9:b8:47:19:ed:d0:2c:12:08:36:0d:b1:e7:54:ca:1f:
82:2e:21:00:65:e2:7e:d3:3f:45:46:52:b5:86:6a:b6:20:d9:
2c:63:c0:1c:20:11:5e:2a:35:b2:62:3f:33:6f:36:05:c7:86:
99:10:8d:e8:21:66:39:9a:26:bd:0a:95:da:56:d5:ee:35:d4:
34:36:c5:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0plxWYEfm1HgORSiaPmH1PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyOWRjNzkyYWRmY2ZlODhjNzllNzk1OGZiZmVjNTI1NjMw
YjYyZjkwHhcNMjYwMzI2MTAwMTAwWhcNMjYwMzI3MTAwMTAwWjAzMTEwLwYDVQQD
EyhmZGEwZDhkZTUzZDA0Y2ExYjc2ODg1YjdjNTI0ZDhlZTFlMTVkZDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseB40QI7V6S6gfITj+CKG4wWeOFK
jG5/WqmLpZEeVxjfQZ03+VvtX/NzCv9ocowNwdvToosrvPfcy/FK/5KRZI8ueO57
4XmsfNbfKFoGAHlKBg+9Sdw70zXgZyxxa7N/6lFEBKipgZ7ezdGx6y5f+zJmMN6Q
oYIhvcs9JlV2XdLgkxuZ4TtfjuL7uoYTgXsJ/qj190Lp6hRRm6uiLvi2XWW5M4vx
viblYS0wChVcGqLwcRmuy2LZAlbs5gEHce4mkNAdnmTaPREOwo9iDzW3ZrZ13+gv
I49G2wDxk+kY2Ke1gvt+HwhRHRBsv6igdoIxsXblK7DTGblimXd8oo0ZoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP2g2N5T0Eyht2iFt8Uk2O4eFd2HMB8GA1UdIwQY
MBaAFNKdx5Kt/P6Ix555WPv+xSVjC2L5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHAzSGtxMzhfb2pIbm5sWS1fN0ZKV01MWXZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kOGY4Y2YtMTg4YS00YmQwLThkYmEt
NDFlN2ZiYTZkNmUxLzEvMHAzSGtxMzhfb2pIbm5sWS1fN0ZKV01MWXZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kOGY4Y2YtMTg4YS00YmQwLThkYmEtNDFlN2ZiYTZkNmUx
LzEvMHAzSGtxMzhfb2pIbm5sWS1fN0ZKV01MWXZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm/8rBYWn
35T0iZ/tXlwPCCQ8o70qqooy3vFIkfekxaw/VtQLmmU00HEhV7Pr13aGzC1/jfhW
z4edQT3yW7z+ChKZxtFZTgD5Ugo8X3hXhJWKGF/WONvocJdj3EflWmIYnDcIjznk
sZjVp6EjaxYIRqCSTft9TdijopQIlzYmDYU1IJnlfNZ3xAMg/Xjvc6fhCKN5Kikd
mbuRUncPFyoEDP+g7VWv2XYqSNHjAStf0DETkMLblF25uEcZ7dAsEgg2DbHnVMof
gi4hAGXiftM/RUZStYZqtiDZLGPAHCARXio1smI/M282BceGmRCN6CFmOZomvQqV
2lbV7jXUNDbFCg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:11:31 2026 by rpki-client