Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
File: 0uQqWD-iUbQyz8HcqL00HVBmC5U.mft (raw, json)
Hash identifier: o1y1+nbtkcnS8aIyoDWpSG1cIa+PI4QeIX9LkUwYV5I=
Subject key identifier: 94:20:06:A2:62:3E:98:C2:8A:44:BA:39:FF:DD:10:03:93:96:6A:4B
Authority key identifier: D2:E4:2A:58:3F:A2:51:B4:32:CF:C1:DC:A8:BD:34:1D:50:66:0B:95
Certificate issuer: /CN=d2e42a583fa251b432cfc1dca8bd341d50660b95
Certificate serial: 019D31F51B68D28BDD78F1410327CB6C43AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
Manifest number: 0FDB
Signing time: Sat 28 Mar 2026 01:00:40 +0000
Manifest this update: Sat 28 Mar 2026 01:00:40 +0000
Manifest next update: Sun 29 Mar 2026 01:00:40 +0000
Files and hashes: 1: 0uQqWD-iUbQyz8HcqL00HVBmC5U.crl (hash: PmPScmLeXvE3xkgQIYA73WbPus06NX1SXtuqsyoS4NM=)
2: q5abuoJZ1lm7pVfvA-IRNmZlgVc.roa (hash: 7Qb1m3fC7oeeHX74Shhd+okw0uSYANuxfkJI/afC/Y8=)
3: sAohPtqx4W8kbrtZbUQNGGMPcSE.roa (hash: apcfGmWEVMl7UGdf8o+sQrkZqcdAwR7qpF48CSMj6SI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:f5:1b:68:d2:8b:dd:78:f1:41:03:27:cb:6c:43:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e42a583fa251b432cfc1dca8bd341d50660b95
Validity
Not Before: Mar 28 01:00:40 2026 GMT
Not After : Mar 29 01:00:40 2026 GMT
Subject: CN=942006a2623e98c28a44ba39ffdd100393966a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ee:ab:a2:20:cb:18:19:41:0c:88:c0:a7:32:
5a:c5:8b:68:79:93:c5:ad:a5:d9:51:7c:cb:30:fd:
7f:0d:40:0d:ed:17:a4:47:3c:de:b1:dd:33:1e:c4:
c0:2b:5a:83:cc:68:71:6e:41:07:17:c3:24:82:dc:
31:c0:49:ee:1f:83:3b:ab:f3:0d:e5:24:6a:23:84:
21:c9:3e:77:fe:b0:b8:b4:d1:c9:5e:ac:d8:ba:4d:
5a:55:84:6c:cb:0b:9e:f0:95:f7:6f:59:c2:28:c6:
72:3a:76:77:83:47:bf:81:1b:b9:a8:37:14:df:b4:
c2:4b:c7:a2:6b:14:1c:8e:fb:72:72:7d:ca:e6:cd:
6f:82:74:d2:99:53:45:c9:8e:b8:1e:16:4b:3e:43:
de:61:27:d5:f9:4e:ef:bf:86:12:cd:1a:fa:01:be:
8c:af:f5:dd:b4:6d:2f:5d:78:fe:2e:8d:13:ff:54:
2c:30:c6:6e:df:8f:00:a5:b9:24:7a:f4:6e:e1:97:
47:75:28:6d:c9:e8:0f:68:89:5e:67:81:7c:c0:6d:
dd:cc:b2:93:ca:00:71:1a:3c:08:ea:ad:74:49:3e:
9a:20:c5:7a:27:83:ba:85:ed:68:e2:2e:07:8b:6d:
3b:14:dd:c7:f6:18:d1:6d:a5:79:e1:8c:5d:e0:0d:
c5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:20:06:A2:62:3E:98:C2:8A:44:BA:39:FF:DD:10:03:93:96:6A:4B
X509v3 Authority Key Identifier:
keyid:D2:E4:2A:58:3F:A2:51:B4:32:CF:C1:DC:A8:BD:34:1D:50:66:0B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:2b:1a:3a:99:e6:d9:84:ce:84:e0:0b:72:5a:6f:79:f6:0f:
13:56:d0:a3:a1:c1:30:ca:83:b5:e0:6f:9c:c0:79:ac:33:9d:
5e:ec:a6:48:3c:70:53:88:62:f8:83:ac:d6:2a:52:bd:e7:d7:
db:3c:9d:d8:c0:50:88:45:44:15:36:f4:15:99:8c:be:d5:68:
bf:4d:c8:8d:98:5e:c0:5c:fc:07:9b:6f:e6:22:80:bb:9d:a7:
1e:ea:b3:57:db:f0:72:1d:e8:9b:d8:1a:b9:ee:5a:8b:1c:7a:
af:53:70:70:52:58:05:fa:ef:30:2a:0e:7a:2e:92:06:d2:ee:
14:94:f0:16:e7:47:49:66:0c:3b:6d:ac:ea:15:05:08:f4:7d:
22:62:48:21:90:a4:3d:e8:74:7a:9c:d4:35:18:33:67:fb:73:
f6:f4:ff:8d:29:aa:c1:52:6f:b0:57:99:45:f6:9d:71:c7:74:
07:cc:4c:2c:0b:41:bb:f7:21:b9:a6:0b:9b:e8:49:46:ac:ec:
5b:d9:2b:02:94:90:fd:a0:5f:1f:dd:71:7d:6d:59:33:90:a8:
d3:e4:42:82:63:78:df:18:c9:8a:00:13:f5:2e:59:49:10:71:
b8:3f:4b:bc:d4:06:3e:a8:92:7d:d2:52:56:dc:d6:11:1d:5e:
4f:35:78:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:34:05 2026 by rpki-client