Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
File: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft (raw, json)
Hash identifier: HhoxeP3lkCNeE4W5PNDCRh7+JVS9ChJAHqDLEu96zhU=
Subject key identifier: 29:B5:05:5C:85:26:A5:88:21:B7:1B:CE:B4:C2:6B:66:FD:DC:81:AE
Authority key identifier: D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
Certificate issuer: /CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Certificate serial: 019D2A3B8B26FEBD9811538C536F6E149284
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
Manifest number: 15AE
Signing time: Thu 26 Mar 2026 13:00:38 +0000
Manifest this update: Thu 26 Mar 2026 13:00:38 +0000
Manifest next update: Fri 27 Mar 2026 13:00:38 +0000
Files and hashes: 1: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl (hash: Xq7yTiuicDXWnMOCrKXk/sVWu27lZ8q6VVTd3U31cTI=)
2: 1-fLD9auB23Q-KgYeQIubXO96o4Q.roa (hash: /JJTz3wE1LRLJ7bz0AIRldwzfH3lc1HU/FwtYIJiaSU=)
3: T-8JhhcHQ5cIwEg6IG4tP0d0W4I.roa (hash: 9CdFc+e0Ar1W8fwX0HTyCIb5Mdz7Fe3CEQ/bMI8Efhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:8b:26:fe:bd:98:11:53:8c:53:6f:6e:14:92:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Validity
Not Before: Mar 26 13:00:38 2026 GMT
Not After : Mar 27 13:00:38 2026 GMT
Subject: CN=29b5055c8526a58821b71bceb4c26b66fddc81ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:75:81:03:18:30:ff:7b:d2:95:1d:82:ce:4b:
4c:3f:66:91:22:e8:3f:8d:4d:fc:e1:c0:ad:ca:3b:
c6:c8:b2:95:32:35:f2:d1:a4:fa:2f:99:25:0e:8e:
5b:39:f4:10:28:26:db:40:d5:77:77:eb:c2:52:4d:
61:bd:0a:33:2c:89:23:db:19:c1:5e:82:b1:e7:7f:
ce:6a:d4:6d:a2:80:e1:4e:c0:72:81:ac:1d:d1:65:
d4:bd:e2:fa:84:6c:e5:8e:d9:85:ab:8f:1e:66:f2:
e0:5c:83:5f:15:37:ff:28:a7:98:54:d3:4c:a9:c8:
e1:78:37:91:e1:bd:7e:c1:9c:22:fc:0b:b2:ee:32:
c0:56:56:bc:68:f1:6e:9a:41:f8:83:d6:2d:93:0f:
07:dc:fd:ba:07:54:91:fd:26:a6:11:55:ac:2e:f9:
a9:2c:34:f9:1d:73:41:dc:dc:7d:5d:d3:92:98:6b:
dd:e7:3c:e5:c8:26:62:2a:f9:42:97:53:01:cc:66:
de:da:56:a0:db:ca:6a:31:12:0f:d5:f3:b1:53:78:
19:70:3e:8e:b4:31:75:dd:c6:07:7f:c9:d8:34:89:
f9:f1:5b:6d:b7:07:79:9c:0b:2d:d4:09:c1:3b:80:
ca:52:0a:85:57:78:25:1e:96:c8:a2:66:05:31:01:
92:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B5:05:5C:85:26:A5:88:21:B7:1B:CE:B4:C2:6B:66:FD:DC:81:AE
X509v3 Authority Key Identifier:
keyid:D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:2b:27:a5:d4:81:74:ec:8b:71:d5:de:89:e8:bf:29:be:06:
b1:e6:bf:7a:9b:e2:53:54:10:bc:d3:d9:31:e9:ae:7c:fa:d3:
38:be:58:4a:70:38:82:22:6f:fd:05:2d:b6:d5:ca:21:bd:1c:
40:70:31:2e:0b:50:ef:66:70:49:2e:d7:05:59:ed:8a:ce:38:
f5:a4:32:fa:44:3c:fa:67:4c:8a:4c:15:55:5c:13:c9:41:71:
47:a4:80:99:f0:5a:86:d3:56:af:df:e8:84:be:f4:4f:42:0b:
3a:47:06:70:8e:1c:54:84:79:f3:dc:91:39:7e:2a:d7:87:b8:
e2:a1:31:1a:9a:bb:93:40:2f:30:94:21:a3:6f:b9:a8:f4:2e:
01:b6:13:c4:18:14:86:c8:da:8b:c8:30:33:d0:10:26:54:d7:
3c:f0:09:1a:ff:72:67:d0:f1:e6:66:4e:13:e8:bb:bb:e9:33:
2f:31:da:4e:eb:08:06:e3:ea:2d:7e:ad:3d:03:4d:7a:5a:f9:
1d:53:2d:88:1a:d5:d3:f0:6e:2a:f4:39:0a:fc:75:9c:88:36:
cf:ea:22:8c:14:94:47:12:b1:4f:5e:66:19:4b:89:28:82:e9:
86:b2:6d:e6:6b:29:7e:e7:8e:3e:0d:92:cf:cd:95:8e:80:27:
b3:4a:b2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:14:51 2026 by rpki-client