Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
File: 0rvJBVXW0NNDK6u5W2DN7upYD1g.mft (raw, json)
Hash identifier: ywTwFVYmP+AJPL5DFzYnak+Y1SO8r4KLb/0fEuqNzeM=
Subject key identifier: 3D:EF:7F:93:19:73:2C:4F:6C:D7:C0:B5:F0:F2:1C:69:A9:CF:7A:04
Authority key identifier: D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58
Certificate issuer: /CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58
Certificate serial: 019D2695BCFE5FEEF50A49B9A8945DA6DFDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
Manifest number: 171B
Signing time: Wed 25 Mar 2026 20:00:40 +0000
Manifest this update: Wed 25 Mar 2026 20:00:40 +0000
Manifest next update: Thu 26 Mar 2026 20:00:40 +0000
Files and hashes: 1: 0rvJBVXW0NNDK6u5W2DN7upYD1g.crl (hash: XhxiDTG4EmYpRdOu+MhwjzalaFpVi8L8l4DtD8JGfv4=)
2: CuoNMY7Qq37VOjNaS3NSAgeASU8.roa (hash: oV7Za3ljWN5/ELZ5W0IrtTxHnlCCtRf76iTFx/48w6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:bc:fe:5f:ee:f5:0a:49:b9:a8:94:5d:a6:df:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58
Validity
Not Before: Mar 25 20:00:40 2026 GMT
Not After : Mar 26 20:00:40 2026 GMT
Subject: CN=3def7f9319732c4f6cd7c0b5f0f21c69a9cf7a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b2:74:0e:25:2a:70:96:4c:30:f3:9e:c1:ed:
6a:03:fd:bb:39:90:12:8a:b9:58:46:e8:82:85:e3:
fa:a3:57:44:cd:78:dc:23:ae:83:b4:38:17:3c:e9:
21:b8:db:29:bc:54:76:0c:d4:2e:df:28:9b:bd:f3:
6c:2d:59:49:b8:13:d3:14:4f:60:ec:59:f9:d4:a6:
4e:20:5f:8c:83:53:8b:43:af:48:6b:99:c6:0d:02:
9d:91:be:14:e5:92:93:7e:87:72:c3:c1:3d:a4:30:
74:3c:0e:9f:ac:4e:02:c2:cb:28:59:d4:d4:c7:7b:
79:3a:ea:24:68:c4:71:44:9a:bd:ac:2b:8b:72:f9:
8d:73:a6:d9:ba:49:82:43:e2:2b:cf:11:90:9c:df:
f2:e7:99:23:2f:ad:78:cb:d1:f8:46:02:08:f4:d4:
e6:b3:bd:14:61:cb:8c:e3:d9:fd:41:26:40:eb:12:
f4:aa:f2:87:6e:18:f4:2b:a6:68:b5:1f:bd:c4:18:
49:3c:86:97:7c:5b:8b:e2:54:b9:1b:5b:12:8a:57:
e1:8e:43:0f:51:fa:5b:9e:6d:a8:f5:53:f7:a9:49:
09:65:c1:73:16:50:b6:17:40:74:90:f2:5e:6c:db:
85:95:2e:62:ef:48:d0:a8:07:a2:20:0d:e5:87:82:
b1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:EF:7F:93:19:73:2C:4F:6C:D7:C0:B5:F0:F2:1C:69:A9:CF:7A:04
X509v3 Authority Key Identifier:
keyid:D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:37:93:38:96:ed:e6:2b:d6:99:ac:9f:61:93:f8:36:2d:c5:
84:a3:97:92:92:91:d7:82:9c:8b:87:e4:fb:c4:be:3f:e9:8f:
7a:a8:22:16:a0:4c:00:0c:c8:8b:ed:ca:89:28:6f:13:6f:c3:
8d:69:d6:40:da:c4:04:55:ef:b9:b8:89:1e:d5:8a:f8:2d:4e:
a9:4d:98:47:19:da:78:7b:14:0b:f9:a9:95:34:27:81:f7:f3:
c0:fa:5d:ca:57:31:fb:ec:82:cd:f5:dd:a6:83:f9:d8:3d:5f:
05:4a:47:e8:58:a8:ab:11:6a:be:ac:c3:dd:90:fd:46:e0:05:
c1:a7:fa:a5:9a:95:f8:82:0a:6d:4c:57:54:fe:6f:49:0d:f9:
c9:7b:c6:c4:c3:7e:38:be:db:b0:43:30:a1:99:16:2e:9b:42:
3e:bd:71:12:4d:11:af:21:69:b2:8b:3f:7a:5d:c9:e8:27:4f:
1c:52:af:82:a7:a6:bf:ee:7a:cd:9d:0a:e0:25:2d:d5:ee:94:
5d:8a:d3:69:71:39:a7:19:f3:e0:fb:2a:f2:97:c8:7c:18:b1:
a7:be:1b:92:5d:59:17:4c:21:2a:ad:63:6e:9e:f7:40:92:c8:
91:14:1a:e8:89:90:27:c3:a4:e8:5b:ad:22:39:7d:80:69:ee:
c1:93:74:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:35:10 2026 by rpki-client