Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
File: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft (raw, json)
Hash identifier: GYqeXkt5D8QUWufoPZH6YBZnYL8+xboM1KrdB0MrLh4=
Subject key identifier: 59:42:85:21:72:A0:FE:8B:68:D4:6A:2D:5F:F7:71:34:E6:36:D0:DE
Authority key identifier: D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
Certificate issuer: /CN=d031655023bd141731d56fb8453ff0514f728865
Certificate serial: 019D2961195BD815B25A3DEDF5A78C8ACA72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
Manifest number: 153E
Signing time: Thu 26 Mar 2026 09:02:02 +0000
Manifest this update: Thu 26 Mar 2026 09:02:02 +0000
Manifest next update: Fri 27 Mar 2026 09:02:02 +0000
Files and hashes: 1: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl (hash: NApfABxiPe04pcidcWqVrHD8O7hlTi19UjvZyxQmfXg=)
2: 3AB4ABWLvkMBLhXbVPQ47Et_IPE.roa (hash: 7TTeY9RzcNuOB9ePCi+NTRAM5DwBMiMi62WzvEoHHl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:19:5b:d8:15:b2:5a:3d:ed:f5:a7:8c:8a:ca:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d031655023bd141731d56fb8453ff0514f728865
Validity
Not Before: Mar 26 09:02:02 2026 GMT
Not After : Mar 27 09:02:02 2026 GMT
Subject: CN=5942852172a0fe8b68d46a2d5ff77134e636d0de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:db:3f:7f:1e:45:e6:dc:95:18:cd:bc:78:b3:
ba:ed:c2:67:7b:2e:c7:6f:fc:b3:ea:1c:43:8b:0c:
71:82:ec:2e:a3:2e:d2:8f:5e:4b:92:6f:be:64:85:
d1:a0:03:a9:80:2c:02:fd:74:7f:e1:e2:e7:41:e3:
45:a9:95:29:7d:e2:79:1b:9e:61:0e:85:ce:05:c9:
c7:17:3c:bb:e6:28:38:11:a0:a0:a7:a1:05:bd:b2:
ef:56:54:57:45:61:1a:a7:13:3c:eb:b6:a9:f0:2b:
59:f6:84:15:47:ee:09:13:d5:c6:fe:0e:0c:67:96:
6c:a8:4a:30:80:06:9c:5d:06:e9:c6:61:ca:c6:8a:
85:16:d0:13:7d:0b:10:6a:e9:00:30:35:02:80:e2:
5c:a9:6d:1b:3b:13:d6:44:0c:18:ef:a3:84:26:66:
4d:45:8e:53:15:84:49:22:ab:5f:d3:3a:c6:c6:d0:
6d:cf:ea:80:7a:24:66:dd:7b:57:e0:ff:ee:b2:59:
c0:30:a7:19:85:74:ab:91:bb:e9:e5:43:11:7e:06:
72:7e:b4:0a:24:d3:bf:3b:8c:27:8c:83:e1:70:72:
0e:36:0c:1f:ee:e3:1f:3f:97:2e:ae:79:c3:c9:fb:
72:26:55:b2:c9:0d:21:fc:ce:66:7a:6b:7c:f3:9c:
f5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:42:85:21:72:A0:FE:8B:68:D4:6A:2D:5F:F7:71:34:E6:36:D0:DE
X509v3 Authority Key Identifier:
keyid:D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:8c:32:0a:bd:90:e2:e9:0a:b4:3a:ed:4a:57:c2:95:26:f2:
8b:cd:6e:95:e2:78:fa:8b:42:c3:74:93:9d:14:0b:98:84:b0:
c5:28:88:25:10:cf:01:43:58:74:ea:d2:1a:c4:f7:6b:0a:da:
0a:5c:ec:0b:17:4d:d9:d3:0d:29:16:84:60:b3:41:ac:d0:dc:
b2:f7:ff:39:8d:1d:98:20:af:00:56:04:1b:19:18:38:20:7b:
c2:87:95:ee:ea:6b:5f:e8:8c:7d:7a:1e:ef:37:95:1f:24:84:
10:48:ff:6c:b9:d5:ce:b0:92:6c:8d:68:3b:39:40:6f:49:aa:
ed:80:fe:05:17:0e:22:ca:29:71:86:93:72:8b:d1:d8:8c:7c:
83:31:62:4e:b4:2a:1f:de:ce:30:f8:da:af:9f:6e:4c:da:36:
d6:b3:3f:00:c8:7e:e7:29:43:af:64:2f:87:d6:05:ec:a4:dc:
b6:5b:82:58:f8:3b:d6:d8:cc:78:60:b8:47:22:40:42:08:e5:
9f:6d:79:a0:de:e4:0c:37:56:26:8f:f2:d9:90:a1:4d:ce:43:
a3:d1:74:9a:a9:3a:5d:cd:cb:d0:03:69:3d:26:0e:94:5a:d1:
79:ae:99:44:67:c7:0c:6b:09:00:36:a2:22:56:e0:33:fe:ee:
98:8a:47:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:07:45 2026 by rpki-client