Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
File: 0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft (raw, json)
Hash identifier: TKov5zum6xJyWshhyOEUoHRvS1rKnpnRxnw/BbKXatY=
Subject key identifier: B9:B4:E6:D8:C7:2C:59:86:8B:96:06:24:54:E3:46:F6:81:F3:F4:96
Authority key identifier: D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08
Certificate issuer: /CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
Certificate serial: 019D29619FEC35E36BE602F9631AE438BED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
Manifest number: 163B
Signing time: Thu 26 Mar 2026 09:02:36 +0000
Manifest this update: Thu 26 Mar 2026 09:02:36 +0000
Manifest next update: Fri 27 Mar 2026 09:02:36 +0000
Files and hashes: 1: 0NhTEIhVVHGuhHppc2WhR24nfps.roa (hash: UAiJiA/nFpUR+80xJrPSC3HfZCrrUkoKtrqsQ8RFQsc=)
2: 0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl (hash: OhUB667x6mnCZ5q+CzKpaX9u2xgCplk/eeru7irBwIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:9f:ec:35:e3:6b:e6:02:f9:63:1a:e4:38:be:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
Validity
Not Before: Mar 26 09:02:36 2026 GMT
Not After : Mar 27 09:02:36 2026 GMT
Subject: CN=b9b4e6d8c72c59868b96062454e346f681f3f496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:65:ef:86:28:6a:6e:ed:f1:25:18:50:cc:8a:
38:29:b0:b1:af:89:77:40:1a:26:76:14:79:fd:15:
d1:9c:bd:1e:2e:75:51:ee:df:1b:00:2c:8d:0e:8a:
c2:c0:4b:28:09:b5:e2:ef:55:f0:d8:00:c0:f3:57:
19:6d:b7:d4:54:05:33:ac:bc:db:fa:bf:a0:60:17:
45:7a:9d:e5:fd:33:b6:a4:c5:e1:a2:9a:4b:7b:30:
60:8d:4e:21:8d:6f:c9:db:3d:2c:8f:18:70:77:91:
34:25:15:b5:5c:5c:86:01:2e:36:0d:2e:e2:2b:b5:
cf:70:ec:b0:3d:9a:dc:40:0e:43:6e:d3:2b:35:3b:
67:9f:48:68:32:e0:d4:fa:32:20:dd:d3:2f:65:b5:
f8:0c:3f:66:70:cf:10:17:52:44:67:0f:16:94:14:
9f:20:81:4d:43:7b:53:de:3c:a8:21:2b:2e:c8:cf:
0b:c9:b2:fa:05:dc:e4:e9:d5:13:75:ed:d5:1e:e7:
b0:d0:42:22:7d:96:71:d5:ca:23:95:a4:21:50:c2:
40:c4:36:d3:1e:a7:ce:f2:78:33:aa:4e:55:aa:c3:
87:83:39:4e:72:6e:bb:6e:41:a8:2f:d8:e5:e4:25:
d8:c9:9b:6b:45:cd:e5:51:d0:2f:33:32:b3:a7:b4:
41:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B4:E6:D8:C7:2C:59:86:8B:96:06:24:54:E3:46:F6:81:F3:F4:96
X509v3 Authority Key Identifier:
keyid:D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:63:3d:7f:cf:fe:31:7a:32:a0:77:05:57:5d:e9:59:a0:7e:
bd:63:8a:2c:50:bf:0a:c3:3a:06:dc:6e:5e:ab:9e:fb:5e:af:
15:a4:76:c7:a6:26:ce:c0:3d:e6:84:51:4f:fc:37:e6:b7:1d:
fc:3d:ed:7b:d7:8b:4a:47:68:23:f1:3e:8f:45:2e:87:3b:0e:
98:54:5a:31:2d:da:fc:28:0c:01:bd:78:df:d6:5c:69:73:ef:
65:11:9a:02:58:48:70:90:da:ba:69:61:d8:9a:93:92:16:4d:
8a:f4:fe:f7:aa:2e:08:f2:3b:77:4c:9b:74:dc:60:6c:57:20:
ef:71:fa:0f:e0:32:82:6d:17:1f:7e:55:33:ae:70:29:1f:a3:
25:7f:5e:39:20:6a:b8:33:bc:12:02:c2:c6:de:6d:03:10:78:
96:35:85:bf:9c:25:e4:ca:fc:d6:21:c6:3c:02:1e:d6:82:90:
6e:a8:fd:35:bf:f9:47:87:1d:fa:78:22:c3:00:4a:ac:1e:32:
1e:c6:1b:38:aa:47:9b:84:31:04:09:60:e5:d0:13:fd:5a:74:
9e:aa:c8:61:78:30:d0:d7:ea:ca:90:3b:df:98:f0:54:ac:2b:
4a:74:63:48:34:0a:be:a0:d0:bb:0a:d3:58:1e:e2:c9:a4:30:
96:22:c8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:21:22 2026 by rpki-client