Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
File: 0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft (raw, json)
Hash identifier: ZIjev4/NVNZKDh7xR4u/RVCCFuMldVbEFLkS6tpTAug=
Subject key identifier: FA:3A:D0:BA:7A:66:3C:0B:3B:60:89:B7:95:BA:CB:DA:D5:7E:64:EA
Authority key identifier: D0:A1:09:44:70:4D:72:3C:8D:D9:CE:73:0C:AB:F9:6F:E2:6B:AB:25
Certificate issuer: /CN=d0a10944704d723c8dd9ce730cabf96fe26bab25
Certificate serial: 019D2A7259AB28D9CE0898FF845CC2FCB8CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
Manifest number: 0F93
Signing time: Thu 26 Mar 2026 14:00:30 +0000
Manifest this update: Thu 26 Mar 2026 14:00:30 +0000
Manifest next update: Fri 27 Mar 2026 14:00:30 +0000
Files and hashes: 1: 0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl (hash: u+0SCSS146leytPGJqls/0GOqSxVPsR0G7gfmoey2xE=)
2: VM-fKezFR4SnE_FueP0yvublPPU.roa (hash: NLdH6ARZYMD17vttDtKMAsBhjz+U3ES+mnznmPgNe9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:59:ab:28:d9:ce:08:98:ff:84:5c:c2:fc:b8:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a10944704d723c8dd9ce730cabf96fe26bab25
Validity
Not Before: Mar 26 14:00:30 2026 GMT
Not After : Mar 27 14:00:30 2026 GMT
Subject: CN=fa3ad0ba7a663c0b3b6089b795bacbdad57e64ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c5:26:7c:1f:44:a2:5d:a6:9e:04:fc:64:38:
71:a5:19:66:b8:8c:78:24:a5:2b:e9:4d:6b:09:77:
74:02:48:43:65:05:4a:01:f4:95:de:53:ab:80:cb:
ee:b3:46:db:f1:cf:61:c1:c6:89:36:0a:49:79:13:
5c:b5:c5:d2:8f:6f:d6:fb:af:92:f9:50:cf:cd:eb:
99:33:57:08:1f:b4:f8:2a:b8:3c:4b:7b:0b:d3:5c:
d1:86:8f:27:75:79:9b:da:20:90:3e:98:2c:5e:c0:
7f:75:41:e7:a4:cd:9f:b2:91:a0:0d:3c:70:a4:b7:
50:42:df:73:c6:c7:56:64:06:6e:07:2b:6c:4e:ad:
d3:c2:7f:1a:66:62:68:46:8a:fb:87:d2:f5:54:28:
12:6d:36:5d:23:b4:36:37:b2:fb:fb:55:48:bb:c0:
81:13:85:9c:70:c3:19:7c:b5:ee:08:4c:31:4d:38:
41:75:87:20:cb:c3:a7:01:78:eb:1f:60:96:5a:05:
71:cc:c0:9d:dd:b4:47:1c:0d:30:af:34:d7:74:7f:
9d:b7:a3:a0:18:79:47:ac:09:b2:ae:b2:bf:22:e8:
aa:c6:99:46:ef:27:90:47:0e:68:18:38:95:86:1b:
2b:28:43:9e:fd:d5:83:28:22:02:c7:25:1e:6e:9b:
e7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:3A:D0:BA:7A:66:3C:0B:3B:60:89:B7:95:BA:CB:DA:D5:7E:64:EA
X509v3 Authority Key Identifier:
keyid:D0:A1:09:44:70:4D:72:3C:8D:D9:CE:73:0C:AB:F9:6F:E2:6B:AB:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:0c:96:fa:10:97:97:1c:09:57:29:19:c5:22:ac:4b:e1:5d:
d7:47:92:a7:9f:d8:c0:45:3e:b0:ce:b1:8a:09:b3:e0:6c:36:
a8:4a:5f:a5:b1:a6:29:c9:e3:fd:a6:6f:fc:08:71:c2:0c:d8:
b1:94:de:5f:25:cb:dd:82:5c:de:b5:7b:af:3d:6b:f8:a6:7a:
19:9d:08:79:5c:86:eb:da:e2:46:4a:09:e1:73:27:89:35:81:
23:95:67:5e:13:1e:fb:f5:93:45:7e:db:7f:04:fd:cd:d5:ba:
c1:b9:2f:89:ed:10:d8:61:5b:a0:ce:b1:53:ae:2a:03:fa:72:
be:fc:f3:3a:82:d6:fc:8a:a2:22:2c:7e:cf:37:c1:dc:3f:10:
86:0f:17:f5:d8:c6:b2:d9:d2:82:86:03:ac:61:ad:87:36:8c:
5d:de:5d:bc:08:f4:b0:22:96:04:df:36:f7:12:8b:4f:6d:91:
15:94:fb:bc:7c:b2:54:b8:31:ad:83:06:04:2f:a1:84:77:d2:
0f:11:99:f1:c7:60:4c:73:3a:c6:4f:61:72:56:d1:92:e2:c1:
72:c0:cc:58:7a:42:6b:a5:50:7d:9a:a9:b1:e7:46:f5:c0:10:
40:58:49:98:32:9d:cb:92:65:00:60:93:34:36:77:93:60:18:
5f:d4:43:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:33:42 2026 by rpki-client