Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft
File: 0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft (raw, json)
Hash identifier: aY6tixKgWcrTq5IM7zQ2zg6izNvrOD77X95ctHkflM0=
Subject key identifier: 87:7D:F3:41:25:5B:74:6F:2D:CD:BD:FC:6A:68:F8:B8:22:FF:75:CC
Authority key identifier: D2:D3:8F:45:97:05:1B:6C:0D:DF:1B:B8:66:AE:4E:94:70:3E:15:5E
Certificate issuer: /CN=d2d38f4597051b6c0ddf1bb866ae4e94703e155e
Certificate serial: 019D329A52A5125F6B94C53C752B1B73E0CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft
Manifest number: 1891
Signing time: Sat 28 Mar 2026 04:01:07 +0000
Manifest this update: Sat 28 Mar 2026 04:01:07 +0000
Manifest next update: Sun 29 Mar 2026 04:01:07 +0000
Files and hashes: 1: 0tOPRZcFG2wN3xu4Zq5OlHA-FV4.crl (hash: u/9KcamjzK5jHpGm7GjCtjDlTtawTmbQm9wt8pdtKM8=)
2: qKlROkZlk3DYFTmipBNFAH2SseM.roa (hash: 4ZEDkg/LHUGlc95hTTGad49qSD826UApgpQuVs6AZok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:52:a5:12:5f:6b:94:c5:3c:75:2b:1b:73:e0:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2d38f4597051b6c0ddf1bb866ae4e94703e155e
Validity
Not Before: Mar 28 04:01:07 2026 GMT
Not After : Mar 29 04:01:07 2026 GMT
Subject: CN=877df341255b746f2dcdbdfc6a68f8b822ff75cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4c:96:b6:48:59:26:42:eb:6d:e8:b8:68:a7:
90:06:30:c3:bd:11:3a:d4:d7:c9:1e:0c:12:40:4e:
cb:70:1b:dc:e7:3e:de:29:b0:f2:6e:19:6c:3f:d0:
53:a0:dc:f1:df:ee:97:84:7a:da:ab:4b:73:b3:47:
a6:43:30:6c:56:16:54:00:59:3f:7a:a2:b0:42:e8:
cb:d4:87:7d:cd:c2:c5:4f:7e:68:f1:7d:1b:e4:8f:
c9:90:da:57:9e:16:ff:cd:d7:0a:b2:7d:13:a0:2b:
09:43:d9:c0:72:57:f5:14:fe:50:af:ba:7c:45:0e:
57:fc:a8:d0:58:17:9a:19:fe:ee:e1:4b:88:78:47:
98:ed:95:7f:5b:6f:40:08:96:b9:59:ec:de:a5:4a:
d1:98:14:6b:48:55:9e:d6:d8:24:63:0f:ed:a0:51:
3d:0b:7a:57:40:47:4a:33:76:15:47:f9:b1:d0:21:
32:ee:14:5e:43:2f:9f:32:4a:76:b0:e1:7d:15:ef:
1b:7c:39:f0:ff:f8:a1:f3:a8:15:7a:75:7b:a2:aa:
bd:22:c8:12:e7:40:c2:0d:a1:7f:61:5a:06:6b:06:
20:21:98:42:47:9f:2b:10:8b:0d:0f:c6:c8:09:21:
9b:ae:07:75:02:33:9a:3d:e2:b2:76:56:3c:ac:a6:
9e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7D:F3:41:25:5B:74:6F:2D:CD:BD:FC:6A:68:F8:B8:22:FF:75:CC
X509v3 Authority Key Identifier:
keyid:D2:D3:8F:45:97:05:1B:6C:0D:DF:1B:B8:66:AE:4E:94:70:3E:15:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ec:79:46:f8:9d:ff:cc:c8:53:de:28:e5:04:24:73:8b:c3:
af:26:35:b7:96:cd:51:76:ef:ec:01:b0:9f:a5:9c:71:ec:38:
60:fa:6b:3e:f7:53:8a:74:e0:57:d3:59:1d:3e:40:50:05:63:
0e:f3:67:4c:60:45:40:54:bf:33:31:82:ca:44:02:3c:2b:97:
d0:63:75:4e:cd:e7:c8:48:c0:75:a7:16:b2:be:f3:d5:a1:01:
2e:89:c4:e7:57:bb:66:6e:00:14:0d:73:5e:18:9a:6f:0f:b3:
b1:96:53:2f:3a:b7:23:90:85:5a:ef:f3:7f:45:44:a0:10:a3:
b5:8e:37:7a:1e:88:6a:53:b0:c5:e1:1a:90:47:36:af:89:64:
cb:e1:1b:ab:99:02:80:a3:be:73:df:66:6c:c2:64:8d:f0:8c:
42:85:88:02:c8:e5:91:9f:20:c7:e0:78:e2:d0:f2:d1:42:f3:
d4:62:07:2c:94:4a:41:f5:c8:a3:64:fd:3f:94:6d:0d:c0:37:
c0:f3:6a:b4:cc:fc:5d:d6:75:3e:c1:1d:10:ba:7f:77:fe:67:
88:37:a7:e2:24:bf:e5:aa:98:e3:1f:65:cc:27:12:56:b2:3f:
16:0d:50:6a:25:84:1e:d9:10:38:34:40:f9:3b:88:06:d1:a8:
f9:8e:8c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:43:15 2026 by rpki-client