Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft
File: 0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft (raw, json)
Hash identifier: 3xDEhRlnLZmiDpRPXxRpQw1jTMEMrjE3mVsbc6/wPnc=
Subject key identifier: 0D:4F:7A:AB:30:52:52:54:51:62:DC:C4:46:78:04:0D:EE:9C:C6:02
Authority key identifier: D1:0C:88:D8:2D:2F:AC:82:20:3D:42:A2:42:D6:EB:76:3D:13:BB:F8
Certificate issuer: /CN=d10c88d82d2fac82203d42a242d6eb763d13bbf8
Certificate serial: 019D2AE0568D0B79CE00DB280194A418DC61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 16:00:38 +0000
Manifest this update: Thu 26 Mar 2026 16:00:38 +0000
Manifest next update: Fri 27 Mar 2026 16:00:38 +0000
Files and hashes: 1: 0QyI2C0vrIIgPUKiQtbrdj0Tu_g.crl (hash: EgndqXruRJsUoFmc1fUMN7xXENifyWVPgUa55Q20l+g=)
2: spphO4hOBArOq2uvlMH_udCd6UY.roa (hash: lnnK0oGEj0iFi7KFhOVFgJ9Aw/tzmzgnPmc7SqloDLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:56:8d:0b:79:ce:00:db:28:01:94:a4:18:dc:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d10c88d82d2fac82203d42a242d6eb763d13bbf8
Validity
Not Before: Mar 26 16:00:38 2026 GMT
Not After : Mar 27 16:00:38 2026 GMT
Subject: CN=0d4f7aab305252545162dcc44678040dee9cc602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:35:3e:5b:30:6c:52:29:ff:d6:d0:22:2e:95:
6e:c1:01:c8:43:70:95:1e:2b:84:bf:47:57:c4:4c:
f4:42:97:5b:25:13:65:ed:4d:7b:0b:2b:60:7c:8c:
b9:48:a1:a4:0b:76:36:ee:2e:9d:24:10:46:5d:83:
6f:a4:3a:65:02:da:7d:d0:e6:3e:d3:d0:bb:25:99:
06:a6:c6:83:9b:ac:c0:81:de:0e:8e:45:55:dc:b0:
84:ed:ac:b2:51:b0:84:b0:20:e9:1f:99:22:8c:3a:
8b:1f:43:cb:7e:d9:e5:7e:67:d3:39:c6:cd:0c:14:
4f:c7:7b:bc:84:9e:eb:7a:01:e7:4c:ef:0f:23:e7:
d2:56:6a:7e:3a:87:1a:fa:39:87:24:73:eb:fb:a3:
4c:6f:a2:e8:8a:db:45:c5:a6:d7:7a:aa:af:03:7d:
9c:ba:49:42:d8:55:c7:f2:55:82:32:59:d2:f8:26:
11:d1:02:0a:98:cd:d3:b3:06:96:c3:50:bf:34:2c:
5e:17:84:01:65:52:93:4a:5d:c9:40:f2:02:43:d4:
84:d1:40:cc:7a:91:24:79:22:ea:be:75:83:b4:2c:
8a:9f:d9:68:12:fb:a1:6d:23:36:a4:a8:93:72:d0:
1d:16:69:56:01:f2:37:7b:d1:02:e0:06:61:2e:f1:
01:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4F:7A:AB:30:52:52:54:51:62:DC:C4:46:78:04:0D:EE:9C:C6:02
X509v3 Authority Key Identifier:
keyid:D1:0C:88:D8:2D:2F:AC:82:20:3D:42:A2:42:D6:EB:76:3D:13:BB:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:4e:e3:82:c2:ed:d0:a6:13:3d:2f:b0:1b:a2:3a:c3:b2:e0:
c4:bc:51:07:51:1b:48:ea:5c:91:83:35:98:a6:6a:f7:a7:10:
99:07:a0:eb:51:73:f7:30:63:d9:23:dd:c8:2e:3e:4c:a3:2a:
a2:00:56:44:17:aa:e5:3d:0a:69:7f:dd:b1:2e:07:52:2f:2c:
85:73:de:08:a6:69:59:80:d0:45:8c:1f:0f:7e:b7:99:17:06:
99:8d:99:b6:29:7d:2a:e1:4f:df:32:ad:da:c7:17:85:0d:5d:
6f:8d:5c:fc:3f:c5:87:46:64:e7:35:b2:85:51:3d:3f:5e:03:
5e:54:32:6f:32:b4:a2:9a:a0:e4:c2:7a:e0:c1:0e:5b:c9:37:
5b:bc:35:25:8d:68:e8:54:37:53:7a:36:b3:e5:5f:45:f8:3c:
b0:69:b5:1d:21:f2:55:9a:ba:6b:60:22:b2:b8:50:cc:c7:b9:
95:bf:bd:8d:3d:cb:bc:9f:b4:1f:f2:2e:4d:26:c9:6b:8d:99:
37:1a:50:1a:ca:50:bd:4f:23:bc:5f:7f:e1:41:3e:76:eb:fb:
5f:45:cc:45:ad:e1:45:a7:0e:27:35:6c:e7:67:18:0b:aa:0b:
15:f9:cd:71:a4:cf:33:4b:f2:a9:11:2d:d9:80:c6:17:1f:49:
b3:54:40:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:27:47 2026 by rpki-client