Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.mft
File: 0GmJqc1r0vLDwN7GCKKL49O6ToE.mft (raw, json)
Hash identifier: jDIT0dl/eN/mAYgvtj4MSu08gAJnZwrehw6ys+WttLE=
Subject key identifier: 2E:03:2E:6B:A4:BC:29:EF:78:81:33:3D:C1:63:9C:B9:C9:6F:1F:B7
Authority key identifier: D0:69:89:A9:CD:6B:D2:F2:C3:C0:DE:C6:08:A2:8B:E3:D3:BA:4E:81
Certificate issuer: /CN=d06989a9cd6bd2f2c3c0dec608a28be3d3ba4e81
Certificate serial: 019D28BB9F26B29A0FD2EDB502A1D8238188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0GmJqc1r0vLDwN7GCKKL49O6ToE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 06:01:17 +0000
Manifest this update: Thu 26 Mar 2026 06:01:17 +0000
Manifest next update: Fri 27 Mar 2026 06:01:17 +0000
Files and hashes: 1: 0GmJqc1r0vLDwN7GCKKL49O6ToE.crl (hash: BxAoSuTLpOsZYPj2pFMzXAlO0t5Jrjmfm5pIma9/vrQ=)
2: wsFDs0k_i43xFHAOdnBr2BMkzX0.roa (hash: TtkJrd9Ep6l68yC5CkOYpRhWIjpFiNmgnjq9PKBAW0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0GmJqc1r0vLDwN7GCKKL49O6ToE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:9f:26:b2:9a:0f:d2:ed:b5:02:a1:d8:23:81:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d06989a9cd6bd2f2c3c0dec608a28be3d3ba4e81
Validity
Not Before: Mar 26 06:01:17 2026 GMT
Not After : Mar 27 06:01:17 2026 GMT
Subject: CN=2e032e6ba4bc29ef7881333dc1639cb9c96f1fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ef:b6:a0:e5:50:97:92:93:75:d1:1c:e4:6e:
e2:67:9a:07:47:af:63:0f:8e:84:ad:5e:9b:4a:ea:
92:45:85:cc:73:d7:74:3b:75:4b:f1:ba:8b:5d:10:
e8:3c:99:05:b1:ee:45:08:b3:d3:f7:e5:15:de:e9:
b5:a6:b8:d9:c1:65:0a:60:6c:da:c0:68:78:92:a2:
e2:ce:18:48:43:bb:a9:c9:52:43:ae:3b:77:bf:f1:
18:ed:c0:74:f5:e5:ca:0c:6d:a3:b7:63:df:08:65:
42:35:3f:10:30:1d:66:d3:87:08:e0:5f:ba:a9:f7:
ed:df:58:e4:6a:bd:ae:dd:6f:ea:05:d3:1d:98:17:
cb:b3:9a:8c:f2:00:08:94:7a:ea:4a:99:e6:30:8d:
67:62:1f:e7:a0:65:09:53:6a:14:7b:87:91:dd:d2:
dc:86:9f:1b:5f:8d:95:82:9c:a4:59:56:fa:ac:12:
ea:f7:c1:14:08:97:95:d2:b0:95:87:f6:2f:fc:a1:
1d:7f:7b:b7:7a:d9:c8:7a:58:2f:0d:14:a6:d7:28:
29:dd:b5:e2:80:8c:26:26:22:3a:5a:f5:8f:3a:8c:
3c:e0:17:98:a6:3d:d4:14:db:0a:7f:2c:4b:4b:26:
10:a3:c5:20:57:88:52:58:49:30:c1:e9:02:5d:d3:
fc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:03:2E:6B:A4:BC:29:EF:78:81:33:3D:C1:63:9C:B9:C9:6F:1F:B7
X509v3 Authority Key Identifier:
keyid:D0:69:89:A9:CD:6B:D2:F2:C3:C0:DE:C6:08:A2:8B:E3:D3:BA:4E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GmJqc1r0vLDwN7GCKKL49O6ToE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:74:86:7b:70:87:86:8f:a1:88:a5:63:17:90:fb:23:ef:33:
9e:e1:ad:3c:12:b2:e2:91:6d:ac:de:ed:c7:a2:f7:38:2d:02:
e1:e6:9d:7c:a1:e7:e7:0b:57:7f:75:84:b5:7a:d8:1c:75:24:
e9:95:64:03:05:58:b4:27:a0:81:49:f4:c5:47:97:65:26:e3:
e8:bc:84:6c:ce:82:20:b9:a2:fd:81:15:4e:56:6e:90:f9:c5:
03:72:87:20:8e:cb:27:01:0c:49:55:33:8a:f1:70:03:33:ed:
a1:bf:c8:04:3d:45:e6:37:96:3d:09:07:75:58:df:6c:c5:05:
da:7b:f1:51:46:64:98:2c:ba:dd:cf:b9:48:78:d4:6f:66:a1:
fc:ed:f2:8b:54:ba:ef:26:4f:10:b5:af:7c:45:ac:f6:73:d2:
d0:92:76:8e:0a:76:77:bb:5e:ef:e5:5a:56:01:34:ba:75:2b:
46:13:45:b6:bd:e0:ea:bb:5d:11:95:7d:ba:04:b5:63:6b:7e:
40:1c:a3:a4:29:97:23:88:6c:cc:21:b9:be:60:c4:f8:76:02:
f0:9f:0f:e1:b6:40:6c:f7:27:ae:c4:7e:14:52:4b:ff:8c:96:
27:ee:9c:af:20:69:09:92:39:7d:42:e3:36:0c:d3:92:ef:61:
a7:51:12:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:01:20 2026 by rpki-client