Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft
File: 0dMLd0soDDfhxe1dimnLmvZIsGU.mft (raw, json)
Hash identifier: YMiHwjexktB1JLSbha3uTQDjLlwpj7b6pf/opmuvdxI=
Subject key identifier: F4:28:DC:73:9B:37:8C:F0:05:E8:43:6D:86:DD:DD:78:6B:77:4D:84
Authority key identifier: D1:D3:0B:77:4B:28:0C:37:E1:C5:ED:5D:8A:69:CB:9A:F6:48:B0:65
Certificate issuer: /CN=d1d30b774b280c37e1c5ed5d8a69cb9af648b065
Certificate serial: 019D27A8E01DDCE74229F56C69C5D0D5F56A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dMLd0soDDfhxe1dimnLmvZIsGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft
Manifest number: 0CF4
Signing time: Thu 26 Mar 2026 01:01:11 +0000
Manifest this update: Thu 26 Mar 2026 01:01:11 +0000
Manifest next update: Fri 27 Mar 2026 01:01:11 +0000
Files and hashes: 1: 0dMLd0soDDfhxe1dimnLmvZIsGU.crl (hash: cjz8Yu2CR5nqV1ybp5mHS7A5vm/NCnk/AXQqjFuP4qE=)
2: 4uCW8KDL5eygnSjCYi7-Nukptjw.roa (hash: Lz95AsDo4OKSWuKZICMJRolQCwkNIP0tKUYk7qYQ5RA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dMLd0soDDfhxe1dimnLmvZIsGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:e0:1d:dc:e7:42:29:f5:6c:69:c5:d0:d5:f5:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1d30b774b280c37e1c5ed5d8a69cb9af648b065
Validity
Not Before: Mar 26 01:01:11 2026 GMT
Not After : Mar 27 01:01:11 2026 GMT
Subject: CN=f428dc739b378cf005e8436d86dddd786b774d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ea:d7:e4:c5:61:20:83:ce:bb:f6:cc:6a:46:
05:7b:a8:fb:ef:b3:bf:4a:aa:73:6b:9c:06:18:43:
54:31:ad:2c:ee:64:04:44:5e:50:7a:f9:73:93:e5:
22:e8:fb:39:f6:4a:fd:a2:0b:ce:b5:be:a1:05:8c:
3e:a4:31:a2:23:cc:67:dd:21:51:68:39:4a:55:70:
58:13:50:61:24:12:f3:f5:19:07:02:b6:28:1c:b6:
61:4f:81:a3:34:e0:08:4d:f3:53:10:8b:a7:86:25:
62:e1:ec:3a:4d:3f:92:ef:a6:b4:58:56:ad:1f:b1:
4e:d5:b9:50:64:86:01:e6:6f:e9:77:99:a1:75:19:
5a:02:98:97:8d:82:fc:95:22:46:41:1c:5b:b7:4b:
dc:74:14:06:77:29:a0:1a:1f:08:72:d1:0a:08:76:
ec:8a:89:36:7b:fb:05:6f:2d:d3:28:85:f4:c1:7c:
f8:13:4e:0e:6d:94:da:65:de:4c:23:f7:51:6b:a0:
c7:1b:73:ea:4b:f4:f1:4e:0a:1e:83:22:e5:56:cb:
4d:f6:b6:ce:4f:2c:3b:62:07:8f:09:ef:b4:80:a8:
d1:e7:ee:f4:1c:01:c6:69:c3:9c:52:9a:c9:86:87:
9e:d2:95:b6:eb:3d:97:c8:a9:32:15:ba:00:c8:36:
3e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:28:DC:73:9B:37:8C:F0:05:E8:43:6D:86:DD:DD:78:6B:77:4D:84
X509v3 Authority Key Identifier:
keyid:D1:D3:0B:77:4B:28:0C:37:E1:C5:ED:5D:8A:69:CB:9A:F6:48:B0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dMLd0soDDfhxe1dimnLmvZIsGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e1:59:9b:96:e2:56:26:aa:de:76:6e:74:7d:91:25:95:b4:
43:6b:33:2b:41:8f:7a:7c:3e:44:13:13:46:9b:1a:c4:94:25:
4a:a8:58:e6:b8:28:00:a4:08:a3:93:aa:50:8b:3b:ea:43:69:
dc:6f:c0:ef:7e:ae:d7:08:99:62:f3:b7:4e:4e:c5:4f:05:a8:
a3:2f:31:be:8e:db:5e:22:34:56:cb:aa:8e:b9:83:f9:38:c1:
61:1b:16:86:b3:0d:bb:b5:36:e5:aa:fd:e4:f1:32:9c:6a:6d:
00:bb:a4:10:fc:ed:53:b4:71:7f:8f:c7:81:1d:75:7f:f7:54:
dd:34:6d:94:f8:38:28:d9:ed:12:0b:f0:13:93:2f:46:47:30:
76:81:76:a4:d5:e7:0d:3f:e3:c9:6d:41:b2:9b:29:d6:1e:11:
03:a5:f8:26:92:53:31:37:11:4f:82:2e:ab:1d:c4:71:3e:79:
3f:2c:81:9c:a1:91:32:9e:a2:3f:a1:1f:d6:7c:d3:e9:2c:ae:
57:ff:fc:36:27:2c:f6:e9:73:a1:e9:1d:38:68:84:a1:ab:bb:
59:07:f8:05:9d:a9:0b:9a:41:12:49:3f:b3:9d:88:aa:02:a4:
ec:77:c9:9e:52:c9:7c:18:ad:34:da:23:a0:3e:dc:73:2a:49:
b7:42:d4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:25 2026 by rpki-client