Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
File: 0L-t8pI57Yzz9saT2L23n0IACrw.mft (raw, json)
Hash identifier: SDQNuetY1G5Q/nS//ZaZyIWVw8rX0ptlYn6gPjMmfrs=
Subject key identifier: D7:08:98:48:36:BD:27:53:91:25:55:A0:AB:4F:3D:3F:46:77:AA:71
Authority key identifier: D0:BF:AD:F2:92:39:ED:8C:F3:F6:C6:93:D8:BD:B7:9F:42:00:0A:BC
Certificate issuer: /CN=d0bfadf29239ed8cf3f6c693d8bdb79f42000abc
Certificate serial: 019D2703DF4A90DCDCFBBB1C4E92E110FDA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
Manifest number: 1038
Signing time: Wed 25 Mar 2026 22:00:58 +0000
Manifest this update: Wed 25 Mar 2026 22:00:58 +0000
Manifest next update: Thu 26 Mar 2026 22:00:58 +0000
Files and hashes: 1: 0L-t8pI57Yzz9saT2L23n0IACrw.crl (hash: bro3R4UZbWBSkdjKTdlFGesqMaVFbW7rAIAbGNohS1w=)
2: 2JYWg4gqZMghUwSsH_cELClo_DE.roa (hash: XmfRPL/CjIz58Jli7M5Cw1QTYVH2xAtyBdeQbzz9+4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:df:4a:90:dc:dc:fb:bb:1c:4e:92:e1:10:fd:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bfadf29239ed8cf3f6c693d8bdb79f42000abc
Validity
Not Before: Mar 25 22:00:58 2026 GMT
Not After : Mar 26 22:00:58 2026 GMT
Subject: CN=d708984836bd2753912555a0ab4f3d3f4677aa71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fd:58:cb:c4:55:68:38:64:ed:b6:0a:2d:1a:
3a:19:01:3a:1e:68:9a:06:96:65:d1:8b:a5:d0:95:
9c:27:89:ec:fc:66:eb:d8:92:f0:bf:35:77:89:3b:
45:23:21:b8:5a:78:36:72:b7:13:8c:5b:b8:e3:b8:
4e:0b:72:63:be:6f:85:f4:39:45:50:fa:56:1b:a5:
9d:7d:87:6a:fb:cf:00:5a:9e:b7:4d:c1:4e:d4:d2:
f8:d4:d0:90:0b:da:0d:d4:17:08:f6:36:c1:c3:b1:
86:ce:52:07:86:d5:d6:81:fa:fa:32:36:f3:b0:ba:
a0:71:d0:da:8a:f9:b0:ee:1f:5d:ae:7d:eb:34:1e:
79:e5:e5:bb:60:23:de:bd:2e:2c:0f:d5:dd:a6:5a:
91:d2:f7:e6:08:d5:a9:f9:34:72:b0:b6:ab:2e:0a:
f4:46:ec:5f:8d:1c:6c:bb:54:74:2c:15:d8:88:eb:
04:73:16:08:fb:c3:4f:c8:1a:c7:62:a5:66:34:89:
be:34:db:ec:05:77:a0:f8:b7:b3:0e:8e:4f:a0:f2:
b0:1b:f5:0b:51:92:ea:a5:ac:73:fc:93:51:a4:86:
18:b3:b4:17:e4:69:6e:d2:b0:32:ed:6c:8a:69:b1:
8d:d0:41:65:4b:e4:1c:fb:f6:9e:96:79:6b:25:5c:
08:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:08:98:48:36:BD:27:53:91:25:55:A0:AB:4F:3D:3F:46:77:AA:71
X509v3 Authority Key Identifier:
keyid:D0:BF:AD:F2:92:39:ED:8C:F3:F6:C6:93:D8:BD:B7:9F:42:00:0A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:25:07:8b:96:35:9f:69:12:bb:33:cf:04:cc:0d:4c:ff:9b:
0d:c4:8f:22:bc:f9:eb:19:f1:29:eb:c6:41:7a:8a:f3:9b:e8:
f8:ac:e8:8a:a3:78:98:1d:f2:80:a9:a8:49:5f:0e:f4:47:73:
c0:32:fa:9f:90:fe:67:8f:22:31:fa:1e:ce:2d:6e:61:87:a0:
fe:e4:ba:7f:15:04:75:79:85:71:7a:36:51:f6:55:a8:80:9a:
03:01:45:9b:60:e4:fd:98:72:d1:9c:98:cb:20:e9:aa:f2:99:
43:d7:9f:b9:18:1b:5b:5a:13:56:37:65:c9:92:e6:76:f1:38:
76:4a:39:73:7b:ec:ae:2e:34:57:c4:31:d8:59:98:53:84:26:
b4:63:dd:c6:0c:6d:4a:36:e3:83:69:5f:c7:95:37:af:5d:d2:
29:72:85:4f:1c:a6:0d:8a:6f:9b:28:fa:3d:00:8b:62:88:da:
72:16:4b:b7:ee:2b:86:db:77:74:49:9c:e2:a8:0c:a2:13:aa:
fa:d6:3e:de:5a:4f:47:fb:1f:38:e6:dd:6a:16:81:49:61:f3:
b4:72:2e:71:73:9e:8b:06:d4:7d:bb:95:f0:b6:42:2f:a8:2b:
cd:2f:80:2d:f0:a0:8b:c3:e0:02:5a:f3:d2:72:49:35:99:f6:
ba:62:4a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:55 2026 by rpki-client