Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/0dI-JBGcupM36DRmSFv7EGsuJLY.mft
File: 0dI-JBGcupM36DRmSFv7EGsuJLY.mft (raw, json)
Hash identifier: 5Ej1dKIRw4ghP+Hhsq/X1AMm4dqvmFVaFHe5lHvDvqU=
Subject key identifier: FA:CD:8F:87:A9:55:84:14:EB:19:08:DC:2F:57:D2:71:28:80:02:26
Authority key identifier: D1:D2:3E:24:11:9C:BA:93:37:E8:34:66:48:5B:FB:10:6B:2E:24:B6
Certificate issuer: /CN=d1d23e24119cba9337e83466485bfb106b2e24b6
Certificate serial: 019D28847054EC818935F7E2A3F921CE2C71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dI-JBGcupM36DRmSFv7EGsuJLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/0dI-JBGcupM36DRmSFv7EGsuJLY.mft
Manifest number: 02CF
Signing time: Thu 26 Mar 2026 05:01:01 +0000
Manifest this update: Thu 26 Mar 2026 05:01:01 +0000
Manifest next update: Fri 27 Mar 2026 05:01:01 +0000
Files and hashes: 1: 0dI-JBGcupM36DRmSFv7EGsuJLY.crl (hash: fK9B0SeL4OD8SroqQlvhCgzt+mLhg0wpIAG2/JoiXCk=)
2: GBJ2X2TfbSwmmzgVVsME19XqtSw.roa (hash: 8eDDx0cI0Ia4YPWxch5djmmuUUa69P9GBwa1jUZnCWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/0dI-JBGcupM36DRmSFv7EGsuJLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/0dI-JBGcupM36DRmSFv7EGsuJLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dI-JBGcupM36DRmSFv7EGsuJLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:70:54:ec:81:89:35:f7:e2:a3:f9:21:ce:2c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1d23e24119cba9337e83466485bfb106b2e24b6
Validity
Not Before: Mar 26 05:01:01 2026 GMT
Not After : Mar 27 05:01:01 2026 GMT
Subject: CN=facd8f87a9558414eb1908dc2f57d27128800226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8e:67:ee:ac:59:45:e4:e2:23:63:68:52:6b:
af:3a:f6:8f:de:eb:42:b6:d8:05:0e:2b:c4:89:ff:
2d:fa:ea:54:da:be:6e:79:9f:9c:ca:9f:70:f3:dd:
91:72:5c:04:b0:18:f9:a4:a9:8a:72:97:4a:37:01:
dc:a8:27:eb:88:97:bc:8f:e5:5f:c7:f3:0f:34:bc:
7a:06:1a:93:e6:04:1c:d2:d7:47:2b:cd:0b:e8:fc:
4d:84:67:c0:56:63:a8:15:39:c9:6a:0b:8b:68:bc:
76:71:f7:5a:c2:69:df:09:b7:41:fb:a2:10:ad:22:
12:e2:3d:55:f1:e2:36:bd:c2:33:be:d7:c0:2e:71:
cf:15:f5:c8:0c:f1:b2:24:cd:53:92:41:4b:23:86:
34:e7:11:f2:e9:05:cd:3b:7a:0c:8d:bb:d0:f9:19:
c1:1c:40:33:75:02:1c:30:f1:63:3b:95:a5:16:9a:
98:1c:7e:1b:1f:86:ce:a1:ea:cb:21:75:75:3e:b0:
2e:2c:79:3f:0c:a6:01:22:86:c4:7f:92:75:fb:c7:
dd:cd:83:66:79:f3:c7:ce:fd:be:36:84:eb:c6:d8:
73:c9:8b:74:83:b8:33:4b:e7:c9:b8:b9:86:c7:cf:
50:bc:db:4e:1e:13:44:a6:e7:7b:e0:72:d6:72:ef:
6e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CD:8F:87:A9:55:84:14:EB:19:08:DC:2F:57:D2:71:28:80:02:26
X509v3 Authority Key Identifier:
keyid:D1:D2:3E:24:11:9C:BA:93:37:E8:34:66:48:5B:FB:10:6B:2E:24:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dI-JBGcupM36DRmSFv7EGsuJLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/0dI-JBGcupM36DRmSFv7EGsuJLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/0dI-JBGcupM36DRmSFv7EGsuJLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:bc:f5:62:e4:ec:46:fb:96:44:1c:9e:f3:69:25:0f:9a:d1:
65:8b:1a:6d:35:f6:d0:e2:e2:c8:b1:aa:12:58:ef:5c:07:29:
95:68:7e:f3:10:de:c4:3c:e7:3d:f2:8b:3f:4d:5a:d9:73:81:
90:94:dd:fc:b0:c2:10:30:5f:99:23:f1:e8:aa:70:9d:8c:5a:
e6:e2:05:7f:89:a7:aa:af:cb:46:e9:c8:a3:4f:a7:31:aa:4a:
ed:92:88:8e:00:e7:7c:0a:52:7f:ef:81:d3:03:bb:ef:a1:8e:
d3:a9:54:4e:3d:be:7f:3b:99:97:97:e8:f6:ea:25:a5:5d:ab:
95:40:50:d3:69:8a:e4:ec:e9:24:e0:69:39:8d:da:75:dc:bb:
47:bb:83:c8:bb:81:9a:42:cd:c7:6e:c7:19:36:9d:25:c4:77:
08:42:55:ef:83:6e:38:d7:55:8f:61:c4:18:b9:67:84:5a:04:
29:6c:5c:74:4b:8b:d3:6e:bd:b8:d0:ed:06:f2:36:f0:94:76:
c3:44:75:71:c3:b9:b7:67:45:ca:04:0b:8b:03:c0:83:47:91:
58:30:a7:8f:fb:79:35:6c:4f:e5:1a:bf:1f:58:23:19:be:25:
e0:da:b2:0f:49:eb:3c:01:0d:a0:ba:ce:e3:9d:92:61:16:a6:
f6:f1:8a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:51 2026 by rpki-client