Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
File: 0haCh3tsivdeJ2DPhUDnhFLUvsA.mft (raw, json)
Hash identifier: UG1tZl6EAJPQiLFTAAbeE76boPDAlAwozkn+KIfvmas=
Subject key identifier: 13:10:E8:14:5D:A3:68:17:7B:10:7F:A0:C8:2F:3A:3C:14:57:47:91
Authority key identifier: D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
Certificate issuer: /CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Certificate serial: 019D2703BE79DF5F7B5E59EFDBBB3CCBA874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
Manifest number: 0DA9
Signing time: Wed 25 Mar 2026 22:00:49 +0000
Manifest this update: Wed 25 Mar 2026 22:00:49 +0000
Manifest next update: Thu 26 Mar 2026 22:00:49 +0000
Files and hashes: 1: 0haCh3tsivdeJ2DPhUDnhFLUvsA.crl (hash: 08TqdbcbjRgvYnbqcUOXVobcHa3nEeEcSJyGKRFSupo=)
2: NiVW-1DlGr5hCTPyCnLWhfcQSJ0.roa (hash: P0xJoWIH1C9Cod99ksa8hxvCHok9B+UC8X73hnLeN0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:be:79:df:5f:7b:5e:59:ef:db:bb:3c:cb:a8:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Validity
Not Before: Mar 25 22:00:49 2026 GMT
Not After : Mar 26 22:00:49 2026 GMT
Subject: CN=1310e8145da368177b107fa0c82f3a3c14574791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b1:f2:58:ef:6d:83:55:7b:69:be:4a:61:08:
c8:d0:72:67:41:0a:2f:3c:c8:05:4c:4e:73:b0:dd:
d3:32:ed:18:15:10:89:25:70:1e:cb:e6:9e:1b:a2:
9b:87:03:3e:4d:e6:9c:5a:7f:62:61:f6:62:44:72:
1f:1a:bf:66:1b:85:a7:ce:56:f6:a2:71:b8:23:7d:
21:06:04:f3:e9:ac:0b:0d:00:c4:5b:3e:de:47:b7:
c7:59:8e:93:46:8c:a7:1d:db:14:05:d8:9b:ce:98:
fd:23:32:a8:f2:6d:60:91:2a:45:c8:c7:06:7a:e2:
35:4d:0b:a0:0f:3d:42:72:83:65:5b:8b:40:a8:07:
27:ae:95:2a:89:6c:ab:67:75:3e:67:72:e5:44:ce:
56:71:10:5a:51:94:4a:ad:21:45:5e:cd:f5:9f:51:
32:97:9b:b0:7e:41:3d:b7:c7:58:43:d5:e3:cd:1a:
bb:d0:19:8a:12:c6:23:2f:e1:5b:70:32:49:70:ad:
f5:18:91:90:72:80:8c:b1:b6:5d:df:0f:1a:7e:ed:
f1:8e:fd:e4:39:c2:a3:1f:ac:39:ca:07:63:82:51:
21:ce:a9:32:b6:fa:f1:be:ea:bf:d0:c1:e7:b1:98:
d8:73:0c:75:37:31:4a:bc:f0:28:ee:25:21:28:8c:
bd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:10:E8:14:5D:A3:68:17:7B:10:7F:A0:C8:2F:3A:3C:14:57:47:91
X509v3 Authority Key Identifier:
keyid:D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:c8:f7:c2:76:17:1a:b0:72:54:57:cc:9a:8a:7e:48:18:a5:
ab:f6:7b:95:0e:a8:d2:d6:a2:c6:cc:2e:2e:f2:70:6c:b6:95:
67:83:83:bd:48:69:9c:04:23:2c:78:2d:d9:50:28:62:32:12:
a8:1a:4e:2d:5c:3d:bd:16:d3:1d:f3:44:5e:ed:3d:6a:08:9c:
05:18:82:8e:f1:f4:06:9b:c6:df:e9:58:da:3b:5b:90:a9:13:
df:3c:85:47:ae:54:4e:e8:65:8b:12:53:e3:29:f1:7c:0f:fe:
84:0d:67:4f:95:c4:f6:9d:1d:19:87:d9:0e:8e:f6:31:7a:b0:
b3:35:94:ab:2f:52:74:63:b0:5e:d6:c3:db:11:d6:1f:88:9f:
33:ea:1f:76:f3:47:90:28:81:2a:3a:1d:ac:23:95:82:89:f3:
19:e3:57:81:37:5d:31:b2:fa:73:ac:46:9c:72:c7:88:85:20:
ca:88:b2:9d:ce:a3:db:28:d4:59:fd:a4:a3:dd:9b:da:59:4f:
e4:49:cc:39:69:04:ec:ee:c5:e2:61:52:88:0d:4c:42:7b:a5:
1b:07:d6:1f:5d:a7:5f:db:5a:3c:6b:de:0c:64:bf:b2:13:12:
38:f8:a3:62:b2:24:71:64:a7:c4:ec:72:2c:68:2f:7b:1c:93:
13:44:6b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:04 2026 by rpki-client