Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
File: 0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft (raw, json)
Hash identifier: olkKeK8aYkHe7ztlVLgzzdDhXdR90pW/nfZM6in0fsg=
Subject key identifier: DC:A6:31:F5:78:DE:A1:D2:F0:F5:E6:4E:EC:9F:19:D1:4D:1A:13:E0
Authority key identifier: D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD
Certificate issuer: /CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
Certificate serial: 019D2996FEC643EB31A2B651DFD73FB44529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
Manifest number: 0CE9
Signing time: Thu 26 Mar 2026 10:00:54 +0000
Manifest this update: Thu 26 Mar 2026 10:00:54 +0000
Manifest next update: Fri 27 Mar 2026 10:00:54 +0000
Files and hashes: 1: 0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl (hash: hRIyfkHSDYkCL1TbKp9gVlNFbvmOgjDTIJISbGOnJps=)
2: 1-bzA-LC9HAAJGIHNZyWh_5MoU-g.roa (hash: RnN32d6e4MWESaRTbw2K0CLbZb59w+5PKP+DYaK/k9o=)
3: rTSOfv72iKS4Od2LIB0_G10Sm1g.roa (hash: gNhIcqNEFyGD4jxJEKcU893kImcieeuHGUa4eFshagU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:fe:c6:43:eb:31:a2:b6:51:df:d7:3f:b4:45:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
Validity
Not Before: Mar 26 10:00:54 2026 GMT
Not After : Mar 27 10:00:54 2026 GMT
Subject: CN=dca631f578dea1d2f0f5e64eec9f19d14d1a13e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:12:e7:5a:e6:c4:49:2d:3e:a4:7f:0d:f3:85:
11:b2:bb:b5:2c:62:c5:7f:4e:3a:63:e8:22:f0:d4:
e4:66:ac:c5:56:f2:5d:ed:84:9a:bd:19:b3:15:57:
0f:19:74:6f:f2:b7:a5:1a:a5:91:ab:a9:f2:45:b6:
f2:f4:d6:de:95:ab:6c:dd:54:e2:4a:da:19:30:24:
b5:30:dd:10:cd:9f:89:36:f6:0b:74:8f:f1:c4:b3:
64:3c:f2:6c:f6:ca:d3:8b:b5:23:01:01:6b:00:6d:
7c:6c:01:61:fe:14:2b:7e:b6:4c:d1:ff:ee:8d:fd:
eb:05:05:5d:67:be:de:78:57:d5:76:b0:27:1d:5d:
07:22:61:de:bb:94:5e:7d:d5:ab:b3:5e:e3:48:71:
3f:14:c7:5c:4a:74:7a:f9:0f:63:c0:25:73:02:38:
4b:38:67:72:a9:a5:34:35:38:93:53:35:42:15:eb:
2f:a8:08:83:ce:77:66:bd:e3:47:cb:90:4c:b5:e6:
1a:6c:e2:ba:b3:b9:17:c6:b8:8e:f6:be:8a:23:0a:
35:b6:9f:05:ff:b7:60:b9:a6:dc:17:a1:b1:f6:c4:
cf:30:93:6a:24:6c:aa:bf:99:e3:96:ea:40:40:c5:
95:c5:bb:7a:80:2e:0a:0a:b4:3f:df:b1:41:20:fa:
31:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A6:31:F5:78:DE:A1:D2:F0:F5:E6:4E:EC:9F:19:D1:4D:1A:13:E0
X509v3 Authority Key Identifier:
keyid:D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d8:93:33:70:ee:0f:06:fa:73:8e:36:b7:cf:72:dd:c9:4c:
93:f6:3f:7b:bc:c2:13:15:3d:e1:04:f6:3a:c6:81:17:ba:25:
54:5e:27:0d:0d:b6:06:9b:ea:42:d6:c3:e3:a4:84:e1:a2:c0:
01:fc:6f:82:47:5a:e1:86:7d:07:98:f7:39:83:29:f6:7e:c5:
87:de:bc:ba:18:17:f8:b1:db:a0:b0:dd:1c:8a:98:db:fc:cb:
2e:de:b3:1d:66:39:a8:f6:a4:4c:0f:8e:c6:97:5b:f4:fb:c3:
a6:a7:16:0b:78:86:16:36:d4:fa:b5:33:6b:3f:d6:66:94:4a:
be:81:b8:d5:a6:f4:35:72:a1:55:11:ae:cb:cc:2c:93:d1:9c:
70:74:89:7e:e4:b6:fa:e0:68:51:1d:67:e7:a4:b6:cb:0a:84:
56:dc:36:75:b3:2d:df:80:61:a5:d8:2f:47:07:38:2c:bc:78:
46:19:35:28:62:b6:ec:5c:46:c2:51:5c:ee:53:f7:60:dd:bf:
97:86:07:66:b3:94:67:83:78:cb:84:c8:f4:80:a0:d1:ef:ba:
fd:c6:90:d2:3b:e5:3b:13:6c:8c:6a:fe:3b:e9:58:cd:64:ef:
c5:a6:51:8e:e0:1b:86:92:d1:27:43:a1:a1:87:2f:06:f1:b2:
0a:5e:02:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0plv7GQ+sxorZR39c/tEUpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZjk3ODllMWI1OWZhMmYyYzUwY2UxZThlMTJlYjk3NjU1
YmJjZGQwHhcNMjYwMzI2MTAwMDU0WhcNMjYwMzI3MTAwMDU0WjAzMTEwLwYDVQQD
EyhkY2E2MzFmNTc4ZGVhMWQyZjBmNWU2NGVlYzlmMTlkMTRkMWExM2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hLnWubESS0+pH8N84URsru1LGLF
f046Y+gi8NTkZqzFVvJd7YSavRmzFVcPGXRv8relGqWRq6nyRbby9Nbelats3VTi
StoZMCS1MN0QzZ+JNvYLdI/xxLNkPPJs9srTi7UjAQFrAG18bAFh/hQrfrZM0f/u
jf3rBQVdZ77eeFfVdrAnHV0HImHeu5RefdWrs17jSHE/FMdcSnR6+Q9jwCVzAjhL
OGdyqaU0NTiTUzVCFesvqAiDzndmveNHy5BMteYabOK6s7kXxriO9r6KIwo1tp8F
/7dguabcF6Gx9sTPMJNqJGyqv5njlupAQMWVxbt6gC4KCrQ/37FBIPox4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNymMfV43qHS8PXmTuyfGdFNGhPgMB8GA1UdIwQY
MBaAFNL5eJ4bWfovLFDOHo4S65dlW7zdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHZsNG5odFotaThzVU00ZWpoTHJsMlZidk4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81ODA3NjktYTljNC00OTlhLWI5ZGIt
YmM1YWI4MTk4N2YwLzEvMHZsNG5odFotaThzVU00ZWpoTHJsMlZidk4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy81ODA3NjktYTljNC00OTlhLWI5ZGItYmM1YWI4MTk4N2Yw
LzEvMHZsNG5odFotaThzVU00ZWpoTHJsMlZidk4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP9iTM3Du
Dwb6c442t89y3clMk/Y/e7zCExU94QT2OsaBF7olVF4nDQ22BpvqQtbD46SE4aLA
Afxvgkda4YZ9B5j3OYMp9n7Fh968uhgX+LHboLDdHIqY2/zLLt6zHWY5qPakTA+O
xpdb9PvDpqcWC3iGFjbU+rUzaz/WZpRKvoG41ab0NXKhVRGuy8wsk9GccHSJfuS2
+uBoUR1n56S2ywqEVtw2dbMt34BhpdgvRwc4LLx4Rhk1KGK27FxGwlFc7lP3YN2/
l4YHZrOUZ4N4y4TI9ICg0e+6/caQ0jvlOxNsjGr+O+lYzWTvxaZRjuAbhpLRJ0Oh
oYcvBvGyCl4CqA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:23 2026 by rpki-client