Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
File: 0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft (raw, json)
Hash identifier: 74PMsHTa9etKw3dh5FJScO05KQXiTjFhrv0q5uI9KPY=
Subject key identifier: 2A:BA:91:D9:06:96:9C:E2:E2:84:64:8B:32:82:E9:B9:E5:3F:ED:A4
Authority key identifier: D0:DF:33:09:B3:F1:8F:BB:EC:99:9C:41:2F:DE:F1:DC:44:20:E4:2C
Certificate issuer: /CN=d0df3309b3f18fbbec999c412fdef1dc4420e42c
Certificate serial: 019D29292544C21FB0E7893C6F885C9CABBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
Manifest number: 0853
Signing time: Thu 26 Mar 2026 08:00:55 +0000
Manifest this update: Thu 26 Mar 2026 08:00:55 +0000
Manifest next update: Fri 27 Mar 2026 08:00:55 +0000
Files and hashes: 1: 0N8zCbPxj7vsmZxBL97x3EQg5Cw.crl (hash: vL1Pm3cIyR5Nla2nPjt/JxXemzcQPqhzelgsIJ5DAUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:25:44:c2:1f:b0:e7:89:3c:6f:88:5c:9c:ab:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0df3309b3f18fbbec999c412fdef1dc4420e42c
Validity
Not Before: Mar 26 08:00:55 2026 GMT
Not After : Mar 27 08:00:55 2026 GMT
Subject: CN=2aba91d906969ce2e284648b3282e9b9e53feda4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c1:1d:d2:39:85:2c:9f:1a:9d:fb:aa:9b:83:
50:16:70:f7:e4:19:21:4b:91:d1:ac:f4:75:b7:79:
08:5e:c4:aa:5b:61:1c:51:ea:78:58:4b:c8:2b:57:
26:83:d3:7c:5d:dd:aa:94:4f:a6:33:b7:28:eb:76:
25:6a:97:1d:86:cf:ac:bb:5f:27:0e:33:0a:a4:eb:
93:76:b3:b6:4b:26:fd:81:52:ea:f6:52:f3:10:51:
79:d3:6a:cf:af:45:e1:c0:47:aa:13:88:b7:89:98:
26:82:f6:96:f1:5a:68:9f:3b:64:b4:10:9d:8a:5b:
44:cf:83:2e:0a:72:91:07:9c:1f:5b:f0:5e:ab:28:
22:41:f8:74:03:d6:0b:00:ab:b7:08:8b:d8:74:e5:
ed:29:b9:77:d9:ba:96:17:8f:cc:db:fc:e3:96:03:
57:d8:b9:15:23:cd:d5:59:4e:40:62:d4:d5:19:63:
3e:b2:61:68:ee:b8:50:b3:a3:7d:b0:79:c9:4a:6f:
cd:b3:31:64:09:e0:a1:1f:7a:cb:ba:99:12:17:d9:
c8:a9:af:92:9a:aa:b2:a8:d3:55:62:5c:8a:d9:18:
39:cc:ce:26:f7:a7:1a:3c:24:5d:fd:34:3a:79:18:
51:16:d7:b2:76:ec:b9:6e:ff:1c:1c:0a:93:d5:60:
a6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BA:91:D9:06:96:9C:E2:E2:84:64:8B:32:82:E9:B9:E5:3F:ED:A4
X509v3 Authority Key Identifier:
keyid:D0:DF:33:09:B3:F1:8F:BB:EC:99:9C:41:2F:DE:F1:DC:44:20:E4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ee:bb:3d:bd:f1:22:c7:69:80:15:47:63:a6:36:43:53:85:
f9:4f:71:e8:84:9d:60:0e:26:84:4d:66:3c:4a:27:25:b0:a6:
72:02:d0:b0:51:81:e0:1b:dc:71:02:ee:e7:a9:3d:ff:14:30:
c9:c3:4c:54:38:32:c5:ce:79:b8:21:cf:28:1b:66:33:02:fa:
6c:3f:07:48:f5:86:b9:25:e3:45:92:0a:71:1f:e3:fa:7a:c3:
d6:5f:d3:86:6c:99:41:fe:21:90:d1:7c:d8:9d:3b:fb:28:92:
13:69:33:dd:57:f0:e9:4d:d2:1c:cc:3e:19:83:de:74:91:a9:
21:82:63:e1:e0:50:0e:6a:2b:d7:48:29:25:6d:2e:3c:1c:8c:
39:87:02:92:1a:04:b3:31:44:40:fe:a4:c0:4b:be:75:df:3f:
b7:f8:8f:46:d6:8d:28:1e:cc:77:9d:06:62:48:4e:e8:a4:14:
88:93:9d:61:c4:3b:d7:bd:8d:41:ac:6d:0d:56:85:be:ca:c2:
26:1a:5c:6b:46:c9:db:c9:b7:74:ab:0a:60:7b:31:d7:af:1e:
d7:9c:af:a9:63:b1:ae:51:30:30:e5:e3:f0:cc:a6:74:c8:79:
a8:70:2e:27:dc:1c:f8:53:f2:e7:1d:d8:42:ca:e5:6b:c1:a3:
d8:b8:c5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:06:39 2026 by rpki-client