Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
File: 0u2k-NnkgpUqESsu9aTyObf2JVE.mft (raw, json)
Hash identifier: rUl8M+RNEt9FLxUlsD1kVk7k9czPrj22+xi0jckhzOw=
Subject key identifier: 0A:9A:4A:52:86:F4:97:DF:54:C1:F1:B9:52:9E:29:EA:8B:89:BC:1B
Authority key identifier: D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
Certificate issuer: /CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Certificate serial: 019D28846AB9AA7BE82F7485830A7FB09F0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
Manifest number: 0D1A
Signing time: Thu 26 Mar 2026 05:00:59 +0000
Manifest this update: Thu 26 Mar 2026 05:00:59 +0000
Manifest next update: Fri 27 Mar 2026 05:00:59 +0000
Files and hashes: 1: 0u2k-NnkgpUqESsu9aTyObf2JVE.crl (hash: QH9iIA7stMUV9piZ/yIKPi6jtG1mBTibsmwnEfeH0dE=)
2: cH1uhcXR4yA_j8slffa5H1Hj5PM.roa (hash: 6BjMFM7dbeXnopz6sC8hF0DrckNn2/Fq1fNIhGQIPa8=)
3: vQ3Onh8zAP8fN-K_wTaZqAaUruI.roa (hash: ycldYOHAUvLotQf8PVaaFzvXxeLDOJ2gpiZO/0/3jvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:6a:b9:aa:7b:e8:2f:74:85:83:0a:7f:b0:9f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Validity
Not Before: Mar 26 05:00:59 2026 GMT
Not After : Mar 27 05:00:59 2026 GMT
Subject: CN=0a9a4a5286f497df54c1f1b9529e29ea8b89bc1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:21:42:2b:8a:9d:c0:fb:1c:2e:23:0d:ba:43:
11:3c:76:71:aa:e7:ca:82:0d:e5:91:cf:ae:5c:41:
4f:6f:49:34:9d:c3:37:42:45:87:c6:ef:73:69:5b:
23:13:09:d5:e7:4b:18:c0:e8:80:00:8c:99:2f:c0:
1b:f6:5c:8c:5e:01:6f:0a:ed:9e:61:e3:d0:f3:4d:
50:c2:fb:9f:f4:db:b2:fe:e3:f9:ff:b2:62:91:b3:
18:0c:05:8a:c5:65:a4:9b:00:ae:6a:11:2a:7c:db:
81:d3:62:b4:81:f2:f5:66:53:2e:6f:18:1e:b9:5d:
3b:aa:c4:36:45:95:24:b5:80:a0:c4:34:42:10:c5:
61:88:59:e7:9f:bd:2e:d7:95:3a:23:c7:ff:96:15:
78:62:b4:e6:cc:4d:8d:1a:2a:be:4e:b1:db:9b:f9:
78:cb:bf:10:ce:36:ad:19:3e:e8:d2:81:7f:88:a1:
0f:58:b3:cc:86:fb:51:ec:4e:3c:7c:5e:ba:ad:f9:
a7:c2:c3:03:3e:d3:33:6f:6b:3d:f6:1f:4d:e2:62:
62:e1:bd:b5:a2:93:de:5b:b2:7c:41:7c:0d:f7:92:
f2:22:ab:15:e8:55:fe:e3:66:0d:5c:2d:37:ab:a7:
dd:cc:46:db:6c:36:1f:74:03:6b:93:0d:09:67:b8:
bf:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9A:4A:52:86:F4:97:DF:54:C1:F1:B9:52:9E:29:EA:8B:89:BC:1B
X509v3 Authority Key Identifier:
keyid:D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:07:44:36:ef:b2:87:36:9e:af:f9:c8:bb:f1:c8:06:2f:23:
17:85:62:d9:fd:73:a5:c9:d7:f2:b0:2c:a8:5d:23:8e:d3:7f:
37:88:a3:c3:8a:c4:3c:14:b9:95:5c:c2:e8:d9:f7:07:9d:d6:
e6:4e:a5:0a:41:69:51:98:16:7d:69:8b:bf:de:db:61:68:47:
1a:a9:c9:f4:9a:b3:ed:b3:82:2a:85:5a:c3:54:69:bc:e4:b1:
09:90:e0:3f:65:62:f0:16:2c:e3:b7:9d:24:ec:c5:cb:ac:ca:
e7:1b:81:39:33:45:fa:9c:b2:b4:46:67:78:04:b5:51:8e:a4:
6d:41:5a:9e:48:fc:b4:80:03:ef:40:89:f0:71:71:3f:b8:94:
7e:bf:22:2b:ff:9c:78:ef:1d:f8:df:d9:e0:9d:23:d3:6f:8b:
c9:53:e5:7f:73:6c:72:f3:97:f5:f2:da:aa:7e:98:c2:08:1b:
52:34:7e:bc:ad:da:f7:41:d6:45:16:19:5f:35:b6:36:42:90:
ea:05:2e:2d:1a:0e:17:bf:f1:fb:2d:12:a0:e9:fa:b4:28:eb:
c4:ed:4e:ed:9a:32:ef:06:1a:ad:1c:54:d6:e7:c6:f3:9b:2f:
17:ef:fc:b1:22:76:d6:e1:7f:ca:8f:9e:97:25:97:ee:38:f6:
1d:ae:22:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:33 2026 by rpki-client