Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft
File: 0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft (raw, json)
Hash identifier: 2vNXLn8TMOI2CqpH/BqmD56JRrOnPY6j/EXOzaZMgX8=
Subject key identifier: BC:F3:75:E6:93:33:1C:09:FB:4E:35:14:31:BC:13:A2:82:48:AD:E5
Authority key identifier: D0:BD:40:EF:34:06:64:71:5C:8C:2C:FA:50:E3:D6:1B:A2:86:E0:37
Certificate issuer: /CN=d0bd40ef340664715c8c2cfa50e3d61ba286e037
Certificate serial: 019D273A92E03CF5EC81BDAF0F3D3484BC7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 23:00:43 +0000
Manifest this update: Wed 25 Mar 2026 23:00:43 +0000
Manifest next update: Thu 26 Mar 2026 23:00:43 +0000
Files and hashes: 1: 0L1A7zQGZHFcjCz6UOPWG6KG4Dc.crl (hash: 5cVmem15bU/aDhIhUDGz9IebJluxOTMj7xIpmJZ6uh4=)
2: 9Bpiuh903cf2KUyc3B43Sh-h6cU.roa (hash: vOwl8xFJY0duh2VdVAScqH5k4a2xL8x3qVJv4PynVyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:92:e0:3c:f5:ec:81:bd:af:0f:3d:34:84:bc:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bd40ef340664715c8c2cfa50e3d61ba286e037
Validity
Not Before: Mar 25 23:00:43 2026 GMT
Not After : Mar 26 23:00:43 2026 GMT
Subject: CN=bcf375e693331c09fb4e351431bc13a28248ade5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c8:7a:a3:d9:bf:77:30:2d:e9:4b:2b:dd:ab:
e1:00:13:db:50:77:04:5b:c5:33:61:31:e8:eb:f9:
8c:96:51:8b:b5:38:c1:dd:52:8d:b1:4f:86:e8:d5:
39:48:0a:c3:72:74:6b:11:46:9a:75:79:4d:e0:62:
9e:a2:c4:31:23:2c:50:20:1d:bc:bf:6f:e4:e0:7a:
e3:7f:7f:e1:2f:0f:37:4b:04:c6:08:fb:e2:35:32:
15:b6:da:bd:cf:09:7e:69:5e:57:4c:a8:11:60:c2:
51:a5:7c:3f:09:e9:5e:2b:2d:52:0c:19:05:d3:cd:
e2:7f:46:7a:1e:cd:d7:c4:3e:9c:f9:f7:16:fd:a1:
5e:30:e8:c6:36:d8:5a:4e:7b:83:4b:d3:e6:1f:ff:
39:9a:2c:03:57:23:e7:22:d3:0e:70:95:13:ce:8f:
5d:8a:19:bf:e3:bf:f0:d4:de:75:5e:23:5a:de:f8:
ef:b9:93:9d:8f:34:78:f6:a2:19:3e:15:70:e5:16:
9a:b3:ef:2c:1b:68:09:bd:5f:82:86:9d:bb:4d:4a:
e5:82:90:31:a3:00:30:a8:36:e4:8b:76:dd:4e:d6:
dd:c7:62:43:31:e8:14:ee:fa:05:02:c8:5b:e5:bd:
82:33:43:02:00:a8:c1:a9:92:21:21:4f:f4:7c:1e:
83:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F3:75:E6:93:33:1C:09:FB:4E:35:14:31:BC:13:A2:82:48:AD:E5
X509v3 Authority Key Identifier:
keyid:D0:BD:40:EF:34:06:64:71:5C:8C:2C:FA:50:E3:D6:1B:A2:86:E0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:3a:bb:74:80:ed:36:d2:f9:88:48:b7:6f:15:88:eb:87:88:
42:45:f6:bb:66:f5:86:f8:33:6f:f9:20:cd:cf:cc:89:c7:ca:
47:1d:66:07:00:8b:c9:47:c7:a6:6b:b5:f9:54:67:07:2d:b7:
d0:1f:ec:f2:9a:5e:75:7d:93:b8:ac:71:66:6e:50:8b:c1:e8:
22:a7:14:66:c3:55:d0:0f:50:e0:5d:c9:85:b1:ff:81:a2:bc:
25:a6:8a:fd:5f:8d:4c:9b:f8:73:c7:95:69:e6:b3:8a:29:3d:
b8:c5:12:17:56:39:f9:0f:e6:c1:3e:25:d7:93:cc:18:4b:d8:
99:38:b8:60:5c:c9:6a:45:4d:b1:b7:7d:05:78:f3:a0:cc:a2:
22:1b:15:6a:1b:86:44:41:37:21:5a:c5:d8:86:4f:39:33:89:
14:17:fc:69:ce:9a:33:cf:55:37:93:2e:f2:ca:68:3f:3f:4f:
46:7e:00:9a:92:27:44:39:30:98:12:42:de:12:76:a1:35:b1:
ef:25:20:54:8d:1b:ff:e9:be:6c:2d:a1:51:65:f1:da:3c:5d:
c2:05:77:cc:e1:de:4c:37:5f:ee:38:b4:e8:f1:01:94:99:a9:
44:1b:53:0c:db:32:8b:88:ee:bd:53:17:64:87:09:28:2d:1c:
93:1c:0d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:04 2026 by rpki-client