Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
File: 0kkXcM6bZjACp5RULZiG0aLOY6s.mft (raw, json)
Hash identifier: v4yZ8d9wZD5H4KXr5Ti8RRs0ZfQEsOoiL56S7sgGT6E=
Subject key identifier: D7:9A:14:2A:7F:0D:9B:42:95:2B:B4:D3:82:1C:4E:73:C2:1A:5B:30
Authority key identifier: D2:49:17:70:CE:9B:66:30:02:A7:94:54:2D:98:86:D1:A2:CE:63:AB
Certificate issuer: /CN=d2491770ce9b663002a794542d9886d1a2ce63ab
Certificate serial: 019D28847FBC2A18EAA8542B0210E6B37394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
Manifest number: 0AEA
Signing time: Thu 26 Mar 2026 05:01:05 +0000
Manifest this update: Thu 26 Mar 2026 05:01:05 +0000
Manifest next update: Fri 27 Mar 2026 05:01:05 +0000
Files and hashes: 1: 0kkXcM6bZjACp5RULZiG0aLOY6s.crl (hash: wLSbtygcjmeY25dXeQGbtFEz8Hitp6y3K9eiUwXpN+Y=)
2: bHXHREeiIlZobWnv85pxED889VM.roa (hash: h0DRcaf7usOPw3gm22x0Kelqp60qYrawYYvGluccU04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:7f:bc:2a:18:ea:a8:54:2b:02:10:e6:b3:73:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2491770ce9b663002a794542d9886d1a2ce63ab
Validity
Not Before: Mar 26 05:01:05 2026 GMT
Not After : Mar 27 05:01:05 2026 GMT
Subject: CN=d79a142a7f0d9b42952bb4d3821c4e73c21a5b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:24:82:7a:af:36:0e:8e:bf:4f:71:c4:2a:44:
70:62:38:75:45:1e:ea:5d:68:5f:cd:ca:30:17:10:
d6:84:fc:90:8e:77:47:ad:d1:c5:42:c2:f3:69:e4:
ac:e7:81:d0:45:08:f0:34:d4:f1:73:48:8b:a6:dd:
ec:12:6e:e5:cb:dd:49:fc:b3:41:9e:69:3a:b8:b6:
59:cc:5d:f1:0d:d5:b6:dc:cf:47:f2:4d:65:26:84:
81:3e:2d:97:61:1a:ff:e9:7b:f7:bc:0a:b5:32:85:
df:c8:89:e7:e6:c3:46:a6:d8:17:39:1e:9b:dd:e1:
a7:7b:67:b9:49:37:70:96:59:03:1a:81:57:a3:01:
ae:37:e3:d8:dc:46:ae:f8:fe:fd:17:12:a9:f5:8e:
e4:82:3e:7d:06:08:fb:ca:93:22:11:5e:64:a3:03:
5f:a4:d2:c5:25:48:04:4a:bc:f4:b4:a3:50:3b:69:
61:e2:30:91:4c:0a:1e:ef:0f:a0:cb:7b:98:5c:88:
29:8b:89:df:80:15:f5:9a:0a:22:c0:b5:a8:61:98:
8e:7f:71:d3:ba:99:c9:97:6c:c1:1e:8b:c2:02:97:
aa:50:f9:f0:ac:4b:9b:11:de:89:96:d5:ce:55:2e:
1f:cf:0b:0d:ac:73:ab:e1:26:20:e9:06:81:40:c5:
7e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9A:14:2A:7F:0D:9B:42:95:2B:B4:D3:82:1C:4E:73:C2:1A:5B:30
X509v3 Authority Key Identifier:
keyid:D2:49:17:70:CE:9B:66:30:02:A7:94:54:2D:98:86:D1:A2:CE:63:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:c1:8e:90:3b:8a:6f:f5:43:99:77:e8:d6:de:0b:dc:d0:11:
e9:fc:85:cc:44:28:97:eb:a1:48:c7:b3:ee:58:0b:15:c3:e0:
7b:e1:c1:6f:9d:ea:d6:aa:f6:74:cd:68:25:55:9a:d7:f9:2c:
ae:73:e4:cf:06:86:eb:af:8c:f8:dc:de:09:0a:6d:75:28:27:
0c:1a:df:74:63:e0:26:04:a0:26:b6:84:e7:73:a8:32:5d:3b:
1f:95:26:0c:6f:cf:85:53:73:bc:13:e4:d8:53:c1:b8:56:17:
5d:94:19:51:df:59:a9:05:d1:79:42:1c:86:3b:87:98:d3:c9:
ef:80:82:8a:47:1e:40:58:2f:cf:bd:ac:d5:8b:f5:15:50:65:
3b:0f:38:23:7d:a4:a3:da:10:ae:c7:8c:21:87:35:cb:c0:f9:
e3:02:b8:fd:11:81:e0:bb:34:2f:12:df:f5:6a:c9:18:72:76:
d1:2f:49:03:41:da:67:44:1e:3b:e9:7d:46:c6:6e:a2:d9:6e:
ed:f2:c4:fb:54:20:28:cf:7b:84:e6:fc:28:81:89:78:b8:06:
e9:14:8c:f2:07:1c:a6:2b:0a:4f:c3:d7:fe:bd:17:d7:2b:e1:
5f:0b:72:2a:ef:0f:9e:8c:b2:5b:e6:ee:c1:b7:d5:e9:68:3b:
4d:9c:eb:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:19 2026 by rpki-client