Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
File: 0mIv3sj638pY51dcKfEOc653VxU.mft (raw, json)
Hash identifier: Pe1PoekwUIIPPYQzj6Q8GlOQpWinduNADqX/o0RGPpU=
Subject key identifier: 06:82:16:5F:90:2C:5F:71:D7:AB:7A:53:D1:CC:D0:28:09:D8:76:2E
Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
Certificate issuer: /CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Certificate serial: 019D269605B3C010D0D559AA9D562E653E4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
Manifest number: 1891
Signing time: Wed 25 Mar 2026 20:00:59 +0000
Manifest this update: Wed 25 Mar 2026 20:00:59 +0000
Manifest next update: Thu 26 Mar 2026 20:00:59 +0000
Files and hashes: 1: 0mIv3sj638pY51dcKfEOc653VxU.crl (hash: R9WYsdceowoXeLsCsm7S/TcyWgnaq9ukAndm7OF2lik=)
2: 48XlQQk7zLyObitRBott5O0TEZc.roa (hash: 0iveZkv2QdOfuGHu5qZcDP2k1JFUITllYLIt0mS1hLw=)
3: JXkrwkvLZXqvLpWo6GIqE9djHow.roa (hash: pvxp7edBiYpg9R4WGN/sBmyvZQpHSdt5YdDqPGYyoLU=)
4: Jb48XUzprHRQSa7zDmEwkm8bHB8.roa (hash: UeQ11+qXjfNfzNk6IX1DTTmTHuYUChCRYnGGfuhQmW8=)
5: M4MI8IskioFX_GL9An1slOnzOXk.roa (hash: +6v5Ea5o3E61ySsVOGY9En91TXxPv4H1t9U0YnMleQI=)
6: cFUEIWQu7qe64nrzejsq3hzv3fw.roa (hash: Y5DG1bnBMtUo7Z76/zjvm84VdL7RwBfBAjPP2M8PD/c=)
7: hkFrsNhiq0TnoVB5lv6ukrym9kU.roa (hash: Lpo1dIydhWwC2a6odejRAjq7zYy9EyLkYPWh1THs0As=)
8: svxysR0fryYPn1ckppavIVkehYU.roa (hash: 8MNRRTqy3XlQo1M7+GUmMiXWjPTZpOon/19BgW0t8Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:05:b3:c0:10:d0:d5:59:aa:9d:56:2e:65:3e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Validity
Not Before: Mar 25 20:00:59 2026 GMT
Not After : Mar 26 20:00:59 2026 GMT
Subject: CN=0682165f902c5f71d7ab7a53d1ccd02809d8762e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b7:c7:3b:de:fe:0a:02:f2:cb:16:85:cc:dd:
8a:04:f7:fa:f4:97:35:ea:c8:68:ae:e2:cf:d1:43:
66:3e:eb:11:c1:fe:27:11:6b:76:16:b7:c5:e5:cf:
3b:8d:9d:9b:3c:49:a8:a6:fc:95:2e:5a:37:be:4c:
41:d7:82:4f:fc:da:20:9a:82:f0:d0:a5:79:37:d2:
f9:03:f5:21:18:27:b5:b6:d4:68:19:dd:b3:ec:90:
e4:16:0f:41:ca:28:8a:0e:86:5b:42:f6:17:ff:68:
0f:7b:0c:ce:d5:98:af:6b:bb:30:1d:e5:36:35:57:
a5:8d:63:af:0e:d4:85:87:51:5a:d7:cf:fa:e1:76:
f1:cc:4d:cd:32:43:e8:a6:4e:19:f9:4d:83:55:ae:
56:aa:f3:f4:29:74:f1:21:56:71:ca:fb:84:88:cc:
9e:b5:29:dd:8f:48:6a:a4:6c:f9:00:ca:f4:df:a9:
03:41:8a:6e:e4:73:ad:80:18:d5:75:83:1a:6d:b2:
99:e3:37:69:46:f1:d9:c4:58:5d:26:c8:72:93:5c:
96:ef:4f:8c:44:3f:d5:20:2b:65:26:ab:d8:43:b5:
52:b2:a0:3f:bb:6d:02:bb:09:03:79:3c:92:ca:9d:
e5:3a:05:2b:c3:8e:ec:e9:e0:93:a1:28:d2:ad:27:
28:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:82:16:5F:90:2C:5F:71:D7:AB:7A:53:D1:CC:D0:28:09:D8:76:2E
X509v3 Authority Key Identifier:
keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:8a:13:8b:5b:3e:70:c9:9c:47:0d:1f:9e:2c:6c:0f:98:5a:
98:9f:c1:e3:35:99:16:d6:13:68:33:0d:e2:8a:a3:22:95:cc:
f9:a6:a1:87:1d:c6:0d:1c:2c:14:16:6a:d7:2e:8f:b5:ff:ae:
eb:c3:2d:cf:c9:bc:2b:fb:cb:f1:80:90:16:e3:7d:2a:5e:1b:
0b:54:a3:1b:54:e8:d1:8f:39:6b:1b:1b:b0:82:9a:a6:9e:1a:
7f:b7:c1:36:78:36:f8:38:db:64:77:e4:30:0f:94:77:f8:ce:
e8:c2:f6:c9:95:99:f6:98:c3:11:e3:be:38:1a:bc:a8:c9:f6:
36:0b:f9:23:67:d7:bf:55:5a:f3:ea:de:38:d8:6a:34:26:08:
09:b9:6e:dc:14:90:56:9a:3e:b4:13:b1:42:77:b5:ab:b5:7a:
71:a5:27:4e:b5:86:25:02:2c:cf:87:38:3b:d1:21:17:43:5c:
d9:e7:6f:bf:5e:2f:08:1a:23:06:bd:fb:83:f2:b2:b4:44:f9:
6c:c6:d7:74:14:df:05:7a:4f:99:3a:47:d7:e8:54:6b:71:e8:
2d:c0:44:5f:ac:13:ff:3d:73:34:4c:b5:44:4a:f4:b5:c0:87:
e3:9f:64:1a:ca:91:eb:5d:28:91:03:e5:d3:17:90:9d:d5:fb:
ca:8f:23:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:51 2026 by rpki-client