Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.mft
File: 0IaqHaAvZwEYCywDQdYDB_FKLL4.mft (raw, json)
Hash identifier: ctvRdQ6vUlveIEJooHpq4ZQ1NjW4q6UDPiV1xPaLMP4=
Subject key identifier: 5A:61:BB:C8:18:DC:9F:78:3A:4F:14:31:B7:03:F2:76:B5:A2:F3:DC
Authority key identifier: D0:86:AA:1D:A0:2F:67:01:18:0B:2C:03:41:D6:03:07:F1:4A:2C:BE
Certificate issuer: /CN=d086aa1da02f6701180b2c0341d60307f14a2cbe
Certificate serial: 019D322BF8C193C6294A75CF53D907DD2558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0IaqHaAvZwEYCywDQdYDB_FKLL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.mft
Manifest number: 24
Signing time: Sat 28 Mar 2026 02:00:35 +0000
Manifest this update: Sat 28 Mar 2026 02:00:35 +0000
Manifest next update: Sun 29 Mar 2026 02:00:35 +0000
Files and hashes: 1: 0IaqHaAvZwEYCywDQdYDB_FKLL4.crl (hash: 6xl2ttw9FNfwwPzLx7mYPMsXGJWPcTL2XBl5IHAKccY=)
2: 3A95eT0-F8FWn0aRvaXeJYEs4vU.roa (hash: LYh5oBJnNPibPoXaGK/ua+lzHz0SVEi30h9T4GjLlU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0IaqHaAvZwEYCywDQdYDB_FKLL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2b:f8:c1:93:c6:29:4a:75:cf:53:d9:07:dd:25:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d086aa1da02f6701180b2c0341d60307f14a2cbe
Validity
Not Before: Mar 28 02:00:35 2026 GMT
Not After : Mar 29 02:00:35 2026 GMT
Subject: CN=5a61bbc818dc9f783a4f1431b703f276b5a2f3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fd:17:07:be:bb:ba:fb:07:ac:22:7a:59:b9:
23:86:f1:51:17:dc:f3:45:42:5b:1b:de:bf:71:1a:
0f:49:df:d6:95:a6:77:75:e4:d7:a1:e8:dc:c8:33:
42:60:c7:82:69:24:ec:ba:c2:3a:63:cb:d2:e1:2a:
18:69:d2:1e:b0:28:8c:e2:ce:20:a5:c0:00:41:38:
6c:fd:e3:fa:70:6b:b0:bf:0b:3b:08:31:ac:8b:c2:
48:e2:2d:37:b5:94:52:ec:3e:2d:b3:d7:c3:c0:29:
47:79:e2:e1:be:5d:98:48:ce:40:dc:8c:f6:c3:81:
26:10:91:07:89:94:21:f9:ef:14:08:45:39:7b:31:
80:7f:f9:3b:77:7d:ac:fe:3c:a1:42:29:83:fc:6b:
e2:8a:91:20:0a:1c:7d:c1:33:fc:05:f1:17:60:11:
94:d5:4d:b5:55:7f:cb:94:c6:be:0c:f8:ed:65:b1:
b0:5d:16:4f:1c:f8:9f:39:48:e4:31:f6:f5:e4:7f:
0a:74:7d:cb:ca:00:13:fd:1c:cc:36:fd:cc:0a:57:
c9:82:9e:16:43:a1:39:90:ca:93:be:4c:bd:d7:2e:
99:e7:63:16:11:cc:18:e4:7a:e2:38:73:91:30:28:
fd:25:22:d2:84:f9:2e:3b:7b:c1:74:d6:b8:e6:b7:
54:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:61:BB:C8:18:DC:9F:78:3A:4F:14:31:B7:03:F2:76:B5:A2:F3:DC
X509v3 Authority Key Identifier:
keyid:D0:86:AA:1D:A0:2F:67:01:18:0B:2C:03:41:D6:03:07:F1:4A:2C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0IaqHaAvZwEYCywDQdYDB_FKLL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:57:93:eb:59:1d:65:aa:ce:3e:12:4d:3e:8a:4e:2b:19:0b:
e1:ff:2d:54:03:3b:1a:0b:f6:d5:fc:8f:60:b1:33:f0:4c:7e:
50:84:6e:af:7a:ba:c5:97:47:9e:9d:ee:f6:49:54:65:de:21:
4d:8b:cc:cd:8a:0c:0e:f7:00:7c:a8:fd:6d:2f:0f:5b:21:6c:
b1:69:a8:08:bf:0e:5c:ab:9c:d9:28:65:79:21:6c:2a:07:08:
4f:5b:f4:88:06:ec:a8:39:9f:55:46:86:0d:cb:ee:0d:11:17:
90:16:22:7f:36:b3:b6:c1:69:61:3a:fd:ce:bf:f3:63:a3:35:
4a:bb:91:3f:c1:ca:84:09:9e:75:85:be:33:64:70:3a:81:f6:
48:4e:14:d1:4a:fc:1a:67:00:7f:88:d4:30:07:ab:5c:e0:d8:
ac:2b:c2:52:c3:57:02:24:39:0c:d0:8a:3a:69:2c:4e:b8:c8:
fc:4a:35:5e:29:ef:7f:35:31:49:9b:39:88:1a:48:2a:8e:23:
a8:1e:7c:5f:85:4d:86:97:8c:d7:d1:1d:a6:d4:73:16:0b:e9:
9b:2c:92:f8:dc:71:f7:b1:10:54:1d:99:84:85:45:65:e6:81:
9f:9c:b1:45:51:b3:3b:47:36:1b:e9:5f:07:1d:cf:04:fb:de:
d9:ae:78:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:46:46 2026 by rpki-client