Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft
File: 0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft (raw, json)
Hash identifier: WhmMW8AwxcNc9dG0HMy9VYA5n6B+td2BkqKK1CbPpmI=
Subject key identifier: 52:C3:EC:51:77:50:7D:C6:16:1B:E7:F2:B0:0E:B7:F8:41:14:DF:CE
Authority key identifier: D0:9D:A9:9A:73:BA:72:02:41:8F:73:71:89:32:DC:8D:7C:15:3E:32
Certificate issuer: /CN=d09da99a73ba7202418f73718932dc8d7c153e32
Certificate serial: 019D27DFED4A1C216FBA881A16C0D7406A34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0J2pmnO6cgJBj3NxiTLcjXwVPjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 02:01:19 +0000
Manifest this update: Thu 26 Mar 2026 02:01:19 +0000
Manifest next update: Fri 27 Mar 2026 02:01:19 +0000
Files and hashes: 1: 0J2pmnO6cgJBj3NxiTLcjXwVPjI.crl (hash: 5UW/1lPzwRVKa0gQBUUj3FldKPrAzi0HlH7b0iOfg+c=)
2: 2bJ2chGfdjROmt484R3iaMkBv5s.roa (hash: qIi6O0mX3eNR+7L75XDWNrvKkZYX8S4LP3pHsAXc7mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0J2pmnO6cgJBj3NxiTLcjXwVPjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:ed:4a:1c:21:6f:ba:88:1a:16:c0:d7:40:6a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d09da99a73ba7202418f73718932dc8d7c153e32
Validity
Not Before: Mar 26 02:01:19 2026 GMT
Not After : Mar 27 02:01:19 2026 GMT
Subject: CN=52c3ec5177507dc6161be7f2b00eb7f84114dfce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:be:d9:e2:79:46:70:c7:4e:97:52:ac:15:3b:
7f:a4:f8:f4:28:c0:87:4a:3a:fa:51:2d:2a:f5:1b:
0f:2b:45:6a:17:ef:e2:ea:dd:3c:66:20:96:ed:17:
f7:3e:00:aa:08:4d:c1:f2:6e:0c:6b:55:92:1d:46:
1a:a1:83:52:78:7d:6f:5f:f8:74:0d:78:f8:1e:5a:
fc:fb:91:34:86:51:04:0f:98:4a:d4:e5:65:b1:01:
66:ed:ac:21:63:87:b2:8e:c4:4e:a0:4f:43:ea:60:
2d:7c:35:26:11:6b:0b:a6:22:70:ca:a6:dc:a7:0a:
51:7e:2b:46:0b:cd:dc:cc:74:93:b3:b4:38:e7:3b:
95:74:23:30:07:26:44:f7:48:e2:72:6b:2e:42:6f:
6e:b2:29:3b:84:c5:41:14:7a:26:41:fb:44:45:1f:
ae:da:22:fe:c8:a0:0b:07:9f:f3:8a:31:f1:50:54:
f4:b7:63:a5:ac:04:ca:92:a9:12:f0:8a:58:f1:e7:
b1:98:43:e7:e7:78:cc:ad:e0:1a:d6:50:10:ad:5d:
d9:0c:ff:60:60:37:6f:01:6d:a0:7a:65:b5:02:e9:
00:75:c7:7f:97:db:3d:a6:83:26:04:21:55:35:0a:
88:33:c6:41:c4:ef:e4:a6:62:69:cd:7b:85:00:2b:
82:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C3:EC:51:77:50:7D:C6:16:1B:E7:F2:B0:0E:B7:F8:41:14:DF:CE
X509v3 Authority Key Identifier:
keyid:D0:9D:A9:9A:73:BA:72:02:41:8F:73:71:89:32:DC:8D:7C:15:3E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0J2pmnO6cgJBj3NxiTLcjXwVPjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a0:c7:16:45:e0:ad:85:c2:1b:72:9b:99:76:e4:8f:d8:8a:
13:02:92:2b:49:3f:6e:14:09:b4:5b:7f:80:af:54:d6:b1:0a:
b2:0a:9f:a5:f2:2b:dd:e3:e3:1c:ab:dc:34:30:ab:c6:e8:5f:
cb:f6:33:61:35:7b:13:c2:2e:65:c3:64:ea:ae:c4:71:a4:65:
78:42:f9:93:2a:cc:5f:9b:60:68:53:3f:3b:f1:a2:9c:98:fd:
25:59:44:d9:a5:f2:95:9b:ec:3e:23:68:3b:3e:b1:7a:62:ad:
02:8f:56:18:fd:be:21:e6:0f:e7:76:f4:7d:f9:3c:d3:57:b4:
45:5e:4f:cc:67:87:cd:51:aa:2c:c9:5a:9f:a1:06:e6:e8:e4:
ef:53:dd:44:c9:34:d3:3a:cc:fd:81:c0:e1:24:02:98:90:3a:
22:5f:80:cb:b7:b7:d6:34:b3:db:3a:58:9a:98:b5:fb:da:3d:
7a:15:b2:83:b8:11:f5:f2:39:f9:4f:bc:6c:46:f5:82:1a:ad:
24:25:1a:43:43:98:af:ba:57:0c:80:8c:60:f4:01:a7:f7:54:
59:2d:86:a0:b0:40:95:9f:42:88:fe:4e:94:79:94:5b:d2:27:
41:7e:db:79:fa:17:fe:4c:d0:21:a8:e0:25:30:00:8e:48:88:
15:de:06:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:46 2026 by rpki-client