Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft
File: 0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft (raw, json)
Hash identifier: bwgDNsz9clPgvPs2EX39aaSxt/x8e/X88NYM7Neb/KA=
Subject key identifier: C0:C3:5B:49:59:3E:05:85:B2:13:0F:FE:B4:24:35:9E:1F:5E:2F:30
Authority key identifier: D0:2E:A9:01:48:D4:E6:88:C9:49:2D:94:67:15:9C:D1:05:75:59:1B
Certificate issuer: /CN=d02ea90148d4e688c9492d9467159cd10575591b
Certificate serial: 019D27049719304E9DAB76FEE7AD281D94B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0C6pAUjU5ojJSS2UZxWc0QV1WRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft
Manifest number: 09B5
Signing time: Wed 25 Mar 2026 22:01:45 +0000
Manifest this update: Wed 25 Mar 2026 22:01:45 +0000
Manifest next update: Thu 26 Mar 2026 22:01:45 +0000
Files and hashes: 1: 0C6pAUjU5ojJSS2UZxWc0QV1WRs.crl (hash: 2gxzp7Wix5bLVwgkqLiXWZWeyGX7zi6hURgk0cw7UrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0C6pAUjU5ojJSS2UZxWc0QV1WRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:97:19:30:4e:9d:ab:76:fe:e7:ad:28:1d:94:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02ea90148d4e688c9492d9467159cd10575591b
Validity
Not Before: Mar 25 22:01:45 2026 GMT
Not After : Mar 26 22:01:45 2026 GMT
Subject: CN=c0c35b49593e0585b2130ffeb424359e1f5e2f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:3a:2a:a6:4a:97:4c:98:7a:74:26:43:34:ee:
e4:39:24:b9:b1:c1:99:c7:bc:82:91:38:ad:43:63:
14:38:71:35:5f:78:95:f5:70:0d:57:64:28:ca:18:
3b:f5:39:8f:91:d8:4e:23:ec:12:90:6c:76:66:c4:
82:a5:13:a4:ba:45:03:37:00:d8:30:30:12:73:da:
ec:b8:82:b1:c8:0a:3b:5b:32:3a:e8:30:ee:f7:7c:
68:3f:1b:3e:48:ba:84:48:69:eb:f8:61:20:f7:12:
b9:fd:ae:d6:70:57:5a:2c:1a:17:1d:ff:b9:ac:5b:
8e:a5:cd:86:d5:40:a5:aa:33:3f:ef:3d:db:fc:cb:
9d:06:6a:32:21:5b:b4:40:d3:e5:a2:0d:ba:9b:cc:
39:84:f4:9e:65:48:53:99:49:71:84:d5:1e:90:d9:
46:a6:b2:00:f6:8f:9b:19:b6:a2:53:2b:e8:39:ac:
bb:16:94:89:58:30:49:a3:f0:b3:81:ad:54:90:1b:
91:48:57:73:c0:31:35:8b:b6:b8:a6:7b:0a:d7:06:
55:51:c3:90:11:dd:16:77:99:2b:7e:05:97:e1:a0:
a7:d7:01:f2:00:96:76:7c:4f:f5:a0:96:7a:60:0d:
20:62:5e:18:27:8d:3a:f3:bd:37:a1:10:bf:a1:8d:
e8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C3:5B:49:59:3E:05:85:B2:13:0F:FE:B4:24:35:9E:1F:5E:2F:30
X509v3 Authority Key Identifier:
keyid:D0:2E:A9:01:48:D4:E6:88:C9:49:2D:94:67:15:9C:D1:05:75:59:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0C6pAUjU5ojJSS2UZxWc0QV1WRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:2a:67:32:59:b9:86:08:15:33:c7:ac:bb:1e:c7:fa:a7:d1:
c6:c2:d3:09:5c:0f:3f:35:ed:5d:e2:74:c7:28:4b:e4:57:95:
bf:f4:9b:fd:f5:0e:9b:9c:cc:a7:8b:29:ae:d1:0b:a5:0c:f4:
e9:f9:b6:f0:2a:e7:5a:2e:65:ef:48:41:e7:18:85:b6:db:25:
41:70:80:f3:17:ad:4a:ae:93:09:e8:eb:85:92:56:95:b1:8b:
bc:ff:39:13:b3:7c:84:85:cd:a8:2d:48:31:1f:12:07:71:c6:
27:86:25:e0:fa:b1:f4:46:b2:c2:88:1d:91:f7:8a:91:96:d2:
5a:72:b1:2b:57:ea:e2:25:11:33:c3:8a:ad:e5:1a:9e:f3:65:
3f:88:bd:0c:ed:25:f8:39:8b:54:ce:62:79:78:7e:7c:80:59:
43:4d:13:9f:61:cf:62:18:9b:b9:27:7d:b0:00:0f:14:5a:14:
fe:46:3d:fc:08:0b:53:af:fd:4a:30:75:ec:09:48:62:09:2f:
de:31:bd:05:86:33:9f:a1:1e:ae:37:9f:d4:75:db:66:b9:59:
1b:8b:19:88:46:97:be:64:0b:18:d8:d7:7f:1d:26:29:1a:87:
ed:25:50:20:b0:9a:07:70:0e:22:22:f9:f8:88:85:b2:8d:8c:
ed:7b:34:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:04 2026 by rpki-client