Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
File: 0RaDXQN3hmIKnp96DjYEmLtlQSc.mft (raw, json)
Hash identifier: F+EOP1qPQmtB9ns1DSPUtpiGq+clbP+FeB0d2CBnRts=
Subject key identifier: 81:F1:E7:E0:34:DC:13:67:16:87:A6:95:BF:A1:92:21:E7:4D:34:E1
Authority key identifier: D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
Certificate issuer: /CN=d116835d037786620a9e9f7a0e360498bb654127
Certificate serial: 019D27E00B6957FFA4903BA4757596A295EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
Manifest number: 0C9E
Signing time: Thu 26 Mar 2026 02:01:27 +0000
Manifest this update: Thu 26 Mar 2026 02:01:27 +0000
Manifest next update: Fri 27 Mar 2026 02:01:27 +0000
Files and hashes: 1: 0RaDXQN3hmIKnp96DjYEmLtlQSc.crl (hash: zw4dwQRMMYuxH4lT0L2T1f7DE3fDHYqZd6p81xR14Qk=)
2: GxXxtmytTeePZFqMmjKewv0phDk.roa (hash: DQNMt4Qmq5pWK/m+65wngsoZgA7+I6etgVuEFLBf9P8=)
3: hrfVvtnK2yUD8q8kqhgwgxBrIWA.roa (hash: knPxWaldCF2NZQN6BPLTcSuiJLTa63/Ehra1OYIbZUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:0b:69:57:ff:a4:90:3b:a4:75:75:96:a2:95:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d116835d037786620a9e9f7a0e360498bb654127
Validity
Not Before: Mar 26 02:01:27 2026 GMT
Not After : Mar 27 02:01:27 2026 GMT
Subject: CN=81f1e7e034dc13671687a695bfa19221e74d34e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d4:59:e6:14:36:1d:15:4f:14:24:60:d9:6b:
01:76:65:51:de:75:85:a8:e1:f5:59:82:a5:99:6b:
12:24:c9:4d:8f:20:c4:ed:82:80:c8:dc:01:71:73:
96:f6:f5:36:30:9f:c8:86:df:fc:a2:c6:09:db:9a:
ad:76:5b:3c:43:a3:2b:95:67:01:35:9f:8b:94:bd:
3d:8c:67:df:74:03:8d:05:4c:69:b8:a9:ee:d6:0c:
62:02:1a:ce:95:3c:4e:ab:bd:90:91:e4:55:6b:ae:
88:23:c6:10:02:03:2e:b9:63:e5:f3:43:94:bd:36:
b9:a2:82:d1:8b:8e:b7:25:57:cd:88:0b:0f:37:e7:
e2:74:e7:4a:2d:1b:e0:b3:e0:5b:ca:67:da:34:00:
5d:1a:05:f5:fc:a7:e2:a6:2e:ff:ee:3d:8a:56:a0:
aa:30:c0:b0:a1:ab:b1:3d:44:44:95:c5:ab:38:06:
e7:2a:0c:03:ad:b1:38:72:f2:78:3a:4a:40:9e:23:
df:55:84:7b:81:f4:72:e7:a4:a0:57:9a:38:88:4d:
ce:69:f7:a9:04:3d:d1:08:c0:a4:a0:74:1f:0b:47:
ba:9a:05:07:f8:52:8a:90:48:52:3b:29:b4:9f:b8:
11:17:4f:da:c1:a0:5e:22:26:45:cc:bb:77:01:22:
fa:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F1:E7:E0:34:DC:13:67:16:87:A6:95:BF:A1:92:21:E7:4D:34:E1
X509v3 Authority Key Identifier:
keyid:D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:7d:0d:8c:ed:02:ec:16:ee:cc:9e:65:c2:e6:84:ee:0c:d7:
a1:91:91:f2:4e:3f:11:b7:7f:00:3b:28:74:28:c1:b9:a4:c5:
c2:84:40:e9:36:ba:e6:c0:ae:fd:da:af:84:d1:d5:ce:60:e3:
45:e5:16:ed:b4:dd:5b:33:c3:3c:6f:9b:2c:64:e6:f1:83:a2:
9d:5b:ce:a5:ed:67:a5:66:08:79:73:0d:20:82:90:0f:ff:fc:
a7:d2:7a:29:85:48:bc:a5:59:f4:5d:88:f2:3e:c6:62:ce:89:
85:47:9e:82:02:53:09:2e:bb:c3:7e:cf:14:83:ca:85:2c:c4:
73:e9:7e:f4:7a:fe:de:e0:d5:2d:5d:f6:4c:6f:16:fc:1f:b7:
bf:91:7a:7f:a0:fe:37:17:b9:e7:a0:a9:1e:e7:99:20:f6:4b:
ed:8f:88:24:ca:93:85:c0:7a:41:e8:72:dd:12:2c:13:5d:ca:
5f:f8:ba:61:c8:09:b6:51:67:30:c3:1f:06:f3:9d:b6:43:66:
54:bc:45:e1:71:87:f3:55:b0:06:bf:1a:96:a7:b3:0a:04:05:
49:3c:f4:99:68:d9:8e:07:8d:96:a6:16:c1:55:72:1b:b6:63:
d0:8b:db:30:11:c8:b7:7f:d0:dc:d4:21:11:ff:00:49:a8:72:
5b:76:d8:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4AtpV/+kkDukdXWWopXrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMTY4MzVkMDM3Nzg2NjIwYTllOWY3YTBlMzYwNDk4YmI2
NTQxMjcwHhcNMjYwMzI2MDIwMTI3WhcNMjYwMzI3MDIwMTI3WjAzMTEwLwYDVQQD
Eyg4MWYxZTdlMDM0ZGMxMzY3MTY4N2E2OTViZmExOTIyMWU3NGQzNGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtRZ5hQ2HRVPFCRg2WsBdmVR3nWF
qOH1WYKlmWsSJMlNjyDE7YKAyNwBcXOW9vU2MJ/Iht/8osYJ25qtdls8Q6MrlWcB
NZ+LlL09jGffdAONBUxpuKnu1gxiAhrOlTxOq72QkeRVa66II8YQAgMuuWPl80OU
vTa5ooLRi463JVfNiAsPN+fidOdKLRvgs+BbymfaNABdGgX1/Kfipi7/7j2KVqCq
MMCwoauxPURElcWrOAbnKgwDrbE4cvJ4OkpAniPfVYR7gfRy56SgV5o4iE3Oafep
BD3RCMCkoHQfC0e6mgUH+FKKkEhSOym0n7gRF0/awaBeIiZFzLt3ASL67QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHx5+A03BNnFoemlb+hkiHnTTThMB8GA1UdIwQY
MBaAFNEWg10Dd4ZiCp6feg42BJi7ZUEnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFJhRFhRTjNobUlLbnA5NkRqWUVtTHRsUVNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9mNTA3Y2ItNzM3MS00YWQxLWI3ZTMt
MTZhN2Q2MGQ1YmVhLzEvMFJhRFhRTjNobUlLbnA5NkRqWUVtTHRsUVNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9mNTA3Y2ItNzM3MS00YWQxLWI3ZTMtMTZhN2Q2MGQ1YmVh
LzEvMFJhRFhRTjNobUlLbnA5NkRqWUVtTHRsUVNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABH0NjO0C
7BbuzJ5lwuaE7gzXoZGR8k4/Ebd/ADsodCjBuaTFwoRA6Ta65sCu/dqvhNHVzmDj
ReUW7bTdWzPDPG+bLGTm8YOinVvOpe1npWYIeXMNIIKQD//8p9J6KYVIvKVZ9F2I
8j7GYs6JhUeeggJTCS67w37PFIPKhSzEc+l+9Hr+3uDVLV32TG8W/B+3v5F6f6D+
Nxe556CpHueZIPZL7Y+IJMqThcB6Qehy3RIsE13KX/i6YcgJtlFnMMMfBvOdtkNm
VLxF4XGH81WwBr8alqezCgQFSTz0mWjZjgeNlqYWwVVyG7Zj0IvbMBHIt3/Q3NQh
Ef8ASahyW3bYYA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:54:46 2026 by rpki-client