Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
File: 0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft (raw, json)
Hash identifier: cPE3LLlBBvz7EpENilMgoNYP6znMhxfFUn/w6XL2fWY=
Subject key identifier: 60:9B:09:AA:89:E9:B2:C6:47:4D:1E:B3:01:75:26:4C:15:CF:61:07
Authority key identifier: D2:6E:45:38:F1:DD:EA:77:F5:73:96:BB:93:B9:07:F1:52:DF:69:7C
Certificate issuer: /CN=d26e4538f1ddea77f57396bb93b907f152df697c
Certificate serial: 019D258327661BBDED11114C4C7FEAE406D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
Manifest number: 066E
Signing time: Wed 25 Mar 2026 15:00:45 +0000
Manifest this update: Wed 25 Mar 2026 15:00:45 +0000
Manifest next update: Thu 26 Mar 2026 15:00:45 +0000
Files and hashes: 1: 0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl (hash: 65EnVc7Z6e46bldS+ioy1hfjnUSZrxLV0X+ovXL3IoY=)
2: ChSIg1aH6Sa_zZYL915QNKTUErU.roa (hash: qJ341GmlhFr65YVSbjKJGdZNne3uNTbQkMWmODy8law=)
3: _NLIFql8UUtF6G08tYKMp6D5ryE.roa (hash: 2eEokZKG4mibWExmbuDz6Q/LrDTuFm+PXBKGxQPaBHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:27:66:1b:bd:ed:11:11:4c:4c:7f:ea:e4:06:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d26e4538f1ddea77f57396bb93b907f152df697c
Validity
Not Before: Mar 25 15:00:45 2026 GMT
Not After : Mar 26 15:00:45 2026 GMT
Subject: CN=609b09aa89e9b2c6474d1eb30175264c15cf6107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:03:19:5c:66:69:3d:f6:75:8d:fe:35:af:45:
72:1b:6a:82:a3:69:12:3e:18:bb:4b:3d:99:30:e0:
b9:5a:83:c0:79:78:b4:36:48:a1:7a:66:a7:53:19:
ee:65:5a:4c:e7:02:a0:6b:d6:fa:21:4d:d8:96:41:
41:06:0e:e4:af:ec:eb:7f:5b:02:52:5b:88:09:a9:
60:ee:b0:10:62:67:c5:06:5e:63:8e:ff:32:75:2c:
6c:ce:79:1a:3a:7d:90:d6:39:11:69:5c:d9:45:27:
0a:9a:eb:8c:74:14:1c:ca:6a:db:7e:64:3d:a8:54:
f3:bc:c5:29:bf:1c:59:7b:fa:f0:7b:ed:d3:9a:ed:
d5:a1:07:a9:b7:da:1c:43:02:07:b9:dc:1d:a5:59:
f2:19:46:e1:27:95:98:6c:6a:5c:5b:3f:07:08:fe:
54:4b:20:b0:ee:03:c3:02:14:22:f6:b8:e6:87:84:
03:1b:60:32:4a:a3:56:0e:44:ea:81:ba:56:24:70:
53:34:ca:b0:e2:73:6d:bc:97:6c:20:eb:71:5c:30:
49:18:39:e0:b7:2b:c7:da:46:04:4f:db:e3:0a:3a:
94:10:d3:18:ff:4c:34:a8:42:28:10:33:12:3a:30:
d8:20:99:d7:59:ea:94:a3:ce:09:8b:3c:07:cb:82:
62:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9B:09:AA:89:E9:B2:C6:47:4D:1E:B3:01:75:26:4C:15:CF:61:07
X509v3 Authority Key Identifier:
keyid:D2:6E:45:38:F1:DD:EA:77:F5:73:96:BB:93:B9:07:F1:52:DF:69:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:fc:b0:c0:fe:53:37:8b:0c:e2:3e:e2:54:e4:a2:e3:5b:65:
7e:a8:13:d1:a2:15:1a:2f:5e:6d:e4:7c:e3:6d:c7:83:0b:c4:
3e:44:71:a8:75:c7:70:f1:bc:ed:bf:e3:ec:70:86:91:14:30:
b9:54:2e:0b:35:ab:44:01:af:85:dc:12:c0:2a:53:af:34:9a:
63:cc:8b:e7:69:d9:5c:53:8b:69:f3:03:a2:a0:d0:18:e0:6e:
93:21:23:21:22:91:64:70:b2:98:22:f4:08:1d:03:ab:59:0a:
d6:c7:17:0f:0f:3c:64:bd:e1:bc:30:5b:63:18:f9:be:7a:31:
d3:33:28:ba:66:2c:f2:55:76:ca:12:6b:32:7c:52:76:10:f5:
5d:cd:82:0a:39:85:06:e0:45:b3:cc:66:4d:64:79:3d:e3:11:
1a:89:70:3c:b9:ea:91:0f:cd:37:47:cf:d4:ef:70:2b:bb:3d:
ee:c0:b4:93:f2:07:4f:f6:3d:6f:fb:93:0b:06:ae:30:18:b5:
df:66:e1:06:bd:f3:5e:70:fd:40:06:8f:67:57:98:aa:20:1a:
ee:e9:d1:3b:6e:79:d1:47:31:af:bb:97:4e:4e:3e:38:0f:a3:
b1:91:de:00:95:3d:3e:c0:4e:6c:4a:1e:b5:ff:c8:19:09:cb:
6a:05:68:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:38 2026 by rpki-client