Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
File: 0hNMcoigwXozuLX-jFgGa0RC8YM.mft (raw, json)
Hash identifier: pJHu63dDtH0gGVIktlnouBfbuB58Y4wREL4X26NNzE0=
Subject key identifier: 32:F8:0D:0A:22:97:16:A5:79:17:63:44:90:30:20:92:C3:3F:62:D9
Authority key identifier: D2:13:4C:72:88:A0:C1:7A:33:B8:B5:FE:8C:58:06:6B:44:42:F1:83
Certificate issuer: /CN=d2134c7288a0c17a33b8b5fe8c58066b4442f183
Certificate serial: 019D27A8D2021F62A3D1B85A83AD4E111563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
Manifest number: 06B8
Signing time: Thu 26 Mar 2026 01:01:08 +0000
Manifest this update: Thu 26 Mar 2026 01:01:08 +0000
Manifest next update: Fri 27 Mar 2026 01:01:08 +0000
Files and hashes: 1: 0hNMcoigwXozuLX-jFgGa0RC8YM.crl (hash: NXSmo4amX1JnTubvHqNGwugwuLyqourkJnLXrMqeYv0=)
2: snrfUjBn7hs_JXI-JDADVPqBfu0.roa (hash: chl5WtQulq1NJ8dnVwRq5DKzxSTQgdztVrgONAQmO1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:d2:02:1f:62:a3:d1:b8:5a:83:ad:4e:11:15:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2134c7288a0c17a33b8b5fe8c58066b4442f183
Validity
Not Before: Mar 26 01:01:08 2026 GMT
Not After : Mar 27 01:01:08 2026 GMT
Subject: CN=32f80d0a229716a57917634490302092c33f62d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e3:63:98:41:80:dd:39:66:8a:e4:56:2b:a9:
1d:81:55:8c:ef:22:49:48:1c:10:ea:8f:08:dd:86:
80:f1:09:8c:38:dc:7d:46:48:12:e4:02:88:67:36:
a9:b8:fc:ee:4e:2b:56:89:36:a9:c3:9f:ba:d0:38:
18:22:72:cd:3f:47:c3:bf:84:6f:f4:af:41:12:19:
ae:cb:e7:5d:48:22:d3:15:7c:b1:27:3a:3a:79:1e:
18:94:ef:e1:fc:1c:6d:81:9f:94:d6:5c:1d:32:7c:
4a:50:a5:c2:ab:e1:2d:5d:14:8e:ee:28:68:2c:16:
9d:f0:23:c7:9e:2f:89:51:db:56:37:be:da:48:72:
eb:ce:5b:3b:b2:d2:bc:78:e4:07:8e:ed:4b:2e:b5:
35:aa:85:3d:61:d4:c7:ec:86:f0:12:58:d9:cf:65:
68:f2:9a:ca:1b:84:2f:d7:9d:71:38:f7:7f:6e:f1:
c3:52:7b:7e:99:25:8c:7e:45:a4:85:cf:28:4a:45:
b3:f2:42:20:90:87:18:98:75:07:8f:6d:ee:f8:db:
07:66:3d:92:c8:bb:67:57:21:e0:fe:3d:21:36:97:
a6:04:c0:f3:40:49:47:58:86:f2:fd:e4:7f:39:4e:
a8:cb:85:6c:0d:73:98:4c:a6:3d:86:af:73:38:f5:
2e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F8:0D:0A:22:97:16:A5:79:17:63:44:90:30:20:92:C3:3F:62:D9
X509v3 Authority Key Identifier:
keyid:D2:13:4C:72:88:A0:C1:7A:33:B8:B5:FE:8C:58:06:6B:44:42:F1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:8d:6f:dc:5b:c0:2d:7c:72:d1:c4:28:ad:1b:52:93:9f:60:
eb:86:78:eb:a4:3b:1c:2c:31:4f:a9:47:27:05:23:ff:98:db:
4b:31:87:0f:95:80:97:85:d2:10:bd:ff:32:fe:f0:1f:f3:f8:
b3:2b:09:e1:46:e9:bb:61:7b:64:5e:a3:97:73:88:8c:f3:29:
05:e0:7f:66:65:4f:05:a6:73:64:21:0c:55:6c:7d:21:62:f7:
cb:ed:6c:e7:f4:52:65:02:25:e3:c5:73:d0:3a:b9:0d:96:09:
5d:b4:d5:c9:29:de:eb:9f:60:19:17:80:e4:3f:15:cf:42:69:
00:3d:d6:98:70:fd:c5:c0:62:be:a2:2c:3c:45:62:aa:9b:f1:
87:78:f7:45:3a:ef:40:25:4f:70:b8:f1:fd:c8:8f:83:2c:7b:
1d:fa:f0:f5:61:16:88:ab:60:5e:93:2e:b2:a5:ad:83:20:84:
18:a3:b4:9a:d4:9c:d9:18:b8:fd:2e:51:2a:a0:b3:11:47:2f:
f4:a3:e4:3d:9b:9e:40:73:ba:f9:18:91:df:19:d7:8e:a4:3e:
9e:fa:7e:95:33:e8:e7:13:5d:68:37:b6:18:84:2f:fa:d6:47:
4b:4c:d9:f3:81:9b:7c:52:f3:cb:c8:eb:fd:1f:8a:4f:61:b8:
79:51:af:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:02 2026 by rpki-client