Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
File: 0As3tvS0RWReaZOpxexghJJCXw4.mft (raw, json)
Hash identifier: Cu4SkjtwJM/XgdMDkgeCunvY7Tk4Jxh6PMZsfxNRTDc=
Subject key identifier: BD:7F:0D:F4:F4:CB:1A:3B:58:55:DB:CE:69:A1:BC:25:92:07:9A:78
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial: 019D2627F8969D43C4E5C7878D1CEF9A3F91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
Manifest number: 0C36
Signing time: Wed 25 Mar 2026 18:00:46 +0000
Manifest this update: Wed 25 Mar 2026 18:00:46 +0000
Manifest next update: Thu 26 Mar 2026 18:00:46 +0000
Files and hashes: 1: 0As3tvS0RWReaZOpxexghJJCXw4.crl (hash: uA70yUPpYp7fwhNzZszCX6a+sTc4V2A8sB9qodVMgdQ=)
2: A895E3Nb3C65o8ijPlK8Lorwh00.roa (hash: tqCw5dUoNXqxDnqcOXcynHp1qTbqM0KgkUMFlaWbuSQ=)
3: GBY268elKXl97npV4jXZBGsnzcw.roa (hash: puRSSX8DZwtYE+mawU0837aHCzln32Frk5qp7mgeh8Y=)
4: NCC353pQrNx8eGiSxSQfU2T_0X8.roa (hash: x5reXqO96nT5gM2bNozGLs+YENzOaeTSR3ek69LYolg=)
5: XX639XievMdqJ8SDTTjke_CjH90.roa (hash: eFHYg4wIZNajc7SdejcYRKfEHVh83hlLOw8omNGRsMs=)
6: bQ2Z3MpaRAN6Ght6WnEtUcjPZgg.roa (hash: 5jTz/OfVAorDmvszopQ0R2vKYBjIj8qCbrV2KmrXO8I=)
7: gs6phYuCPMyOMTxhcDdZ3qJlA9I.roa (hash: 5oHY1r24RUQH5fxNUDlPxQ1Hw8bNGQ4ZLPSvu4mNt/E=)
8: llhcsYDLkm4Ou2uZaJyDW3EMdA0.roa (hash: v77F3OYndH+vxoqA2hOKsJpKUx5tr3Ki2/ZCUFpENYI=)
9: uGQWNyg5237Zm0UUhjGg8gARmn0.roa (hash: li0m/zbSxgzFDwh2iasmSHBN8irzYLoTvtgSIVNzWfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:27:f8:96:9d:43:c4:e5:c7:87:8d:1c:ef:9a:3f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Validity
Not Before: Mar 25 18:00:46 2026 GMT
Not After : Mar 26 18:00:46 2026 GMT
Subject: CN=bd7f0df4f4cb1a3b5855dbce69a1bc2592079a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7d:7c:b3:f1:37:c2:fa:18:0b:30:d5:6f:95:
e6:4c:36:cd:40:ec:08:81:eb:df:21:f3:0e:26:d1:
34:33:c7:2d:ba:34:c2:59:d1:0e:d4:85:d6:5e:c8:
5a:be:f9:1d:9e:74:ff:70:fe:9e:a5:84:55:57:be:
65:2b:cd:3e:d9:fb:1b:33:bd:bc:07:0d:54:82:6c:
f1:70:9c:10:b1:a3:3e:c5:c1:b7:56:ac:fd:b9:94:
dd:55:ba:e8:2f:b4:60:0f:64:b5:09:fd:9c:b5:a2:
34:22:5b:50:39:10:b6:52:80:5d:ba:32:16:c5:a4:
75:b2:72:a5:71:aa:f1:30:7d:59:35:80:d7:99:06:
9b:80:e4:16:38:eb:16:03:3f:c1:37:5b:44:3a:75:
e4:fa:c4:c4:bf:03:61:5a:0b:83:10:5d:dd:5f:30:
8b:f4:b7:fd:f9:68:72:c4:b2:ca:63:3a:60:48:00:
df:01:dc:ec:55:09:a8:08:73:be:26:7d:58:78:67:
6e:5e:17:57:ae:ae:ac:ec:e6:38:db:3d:ee:56:1d:
11:2d:c1:a0:1b:e5:24:a5:d1:a1:35:8b:7f:32:82:
af:3a:08:a7:94:e0:31:cd:07:3c:c3:48:05:9a:1a:
3d:cf:4f:1e:5a:fc:f5:e4:4d:94:b2:b9:20:b7:97:
fc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7F:0D:F4:F4:CB:1A:3B:58:55:DB:CE:69:A1:BC:25:92:07:9A:78
X509v3 Authority Key Identifier:
keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:39:9f:6d:ea:bc:77:19:e2:fa:25:b8:53:07:c1:73:79:c4:
c1:c3:2d:ba:8f:d0:24:12:bd:30:52:ee:5e:fc:84:64:0c:a0:
5a:80:5b:31:19:cb:33:41:06:da:70:d2:63:8f:9f:ee:83:9e:
d1:de:be:67:01:e0:95:e4:ac:4a:69:0e:a3:f7:1c:87:01:9c:
11:8e:34:07:e3:72:52:b3:a2:fe:4d:7d:4c:94:e0:d9:d8:4a:
16:c1:55:39:fd:3f:ec:5d:cb:99:5c:4f:51:31:5e:56:cc:1c:
f7:1b:c8:81:7a:c5:60:f9:ed:10:32:aa:75:15:94:7b:88:49:
4d:2c:46:68:23:a2:01:15:75:98:de:4e:ea:57:11:eb:8c:a5:
b7:02:d3:dc:31:bd:3c:c4:b1:ac:6b:5e:bb:cd:35:4d:37:74:
fa:05:48:8f:f7:58:cc:c9:f4:99:9b:ac:ed:6e:6c:f6:c6:38:
b3:5c:1f:e8:9e:63:9e:e3:6e:07:38:62:1a:93:34:1f:e9:a3:
d7:f6:79:71:b0:08:63:be:bd:ba:7c:95:f7:f5:f7:31:0b:dd:
a5:7a:63:d9:10:a8:52:59:91:d6:83:a7:e7:49:43:6d:2e:ea:
65:80:6d:fd:26:09:89:b1:8d:36:97:57:b4:3b:26:15:26:d6:
53:72:4a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:33:09 2026 by rpki-client