Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
File: 0SIIZtpI4MfP--jHOjUcKkexpNs.mft (raw, json)
Hash identifier: fZD025fTIpXM5LLPBZPZRZlu6ZhmOPaXozByRFVaXPE=
Subject key identifier: C1:CA:E6:C3:4F:AB:AF:12:A4:FA:DD:17:E2:5A:4E:27:7B:5B:D5:79
Authority key identifier: D1:22:08:66:DA:48:E0:C7:CF:FB:E8:C7:3A:35:1C:2A:47:B1:A4:DB
Certificate issuer: /CN=d1220866da48e0c7cffbe8c73a351c2a47b1a4db
Certificate serial: 019D273B1D7BF3D0425A6A8E97A90F31D8F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SIIZtpI4MfP--jHOjUcKkexpNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
Manifest number: 060F
Signing time: Wed 25 Mar 2026 23:01:18 +0000
Manifest this update: Wed 25 Mar 2026 23:01:18 +0000
Manifest next update: Thu 26 Mar 2026 23:01:18 +0000
Files and hashes: 1: 0SIIZtpI4MfP--jHOjUcKkexpNs.crl (hash: PwlyaxT+etu0q1uxJ2lCPuNfefn4TYDjZn9Xrnp8MVk=)
2: 4TxKwKRDQKF0yF_LCgtDfcD3WbA.roa (hash: Jse6W+LikeQvtYUhUSyUuHEBzEMpr4LWc8qS1sps7Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0SIIZtpI4MfP--jHOjUcKkexpNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:1d:7b:f3:d0:42:5a:6a:8e:97:a9:0f:31:d8:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1220866da48e0c7cffbe8c73a351c2a47b1a4db
Validity
Not Before: Mar 25 23:01:18 2026 GMT
Not After : Mar 26 23:01:18 2026 GMT
Subject: CN=c1cae6c34fabaf12a4fadd17e25a4e277b5bd579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d8:f5:40:08:02:7a:91:3e:34:5b:1f:3a:99:
38:52:31:56:1b:77:c6:51:c2:c7:24:d7:7c:97:72:
ab:c3:2e:2e:b2:e5:ec:d3:bb:a0:02:14:b1:b4:38:
9b:64:88:da:9e:4a:bd:ff:43:9e:fc:00:e1:6a:6a:
ea:b1:58:0d:1b:ba:bd:72:a9:70:6a:6c:95:92:47:
bd:5c:de:dc:71:0e:86:61:1d:28:9f:05:ed:29:10:
2e:96:69:26:e0:22:74:6e:f4:e0:1b:5c:01:27:88:
b9:8a:0a:bb:68:17:37:a7:5e:e6:34:2b:21:a7:70:
bc:ce:c4:0e:97:a1:ec:94:c0:95:65:b2:6a:9c:89:
d4:73:f3:32:d7:8f:5c:9e:01:7d:17:c4:98:8e:fc:
7a:98:8c:9d:f9:be:e9:d0:af:fe:15:76:46:68:98:
bd:4e:12:b1:72:9d:ca:74:7a:14:43:a6:76:49:5d:
9a:da:0f:28:b4:8a:bf:b7:06:e7:00:eb:64:fa:c0:
ac:ce:5f:f4:d3:21:f7:f5:4f:81:1e:cb:ab:e2:f5:
cd:a8:32:55:51:0b:66:81:d5:f7:31:fa:da:5f:29:
3e:11:92:20:75:ac:b7:5a:36:e0:3b:97:a6:d6:b0:
f0:7f:78:f5:ba:83:67:b1:03:6a:30:a4:77:96:3c:
5a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CA:E6:C3:4F:AB:AF:12:A4:FA:DD:17:E2:5A:4E:27:7B:5B:D5:79
X509v3 Authority Key Identifier:
keyid:D1:22:08:66:DA:48:E0:C7:CF:FB:E8:C7:3A:35:1C:2A:47:B1:A4:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SIIZtpI4MfP--jHOjUcKkexpNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:26:2c:15:ae:0a:5c:8d:00:7c:4c:2b:07:d5:c2:5e:93:b6:
cd:ea:bd:db:bd:0e:b0:70:30:f6:cc:ec:f5:dd:bf:62:b2:78:
92:e8:b6:a8:fe:6e:14:57:f5:6d:53:98:0c:c1:8f:66:10:00:
86:a0:21:4d:2a:7c:10:58:d3:e4:a8:86:e7:c1:ce:65:95:2a:
af:df:8c:bd:87:26:16:9d:a9:d1:2c:17:98:c7:6e:24:77:90:
ab:58:a4:12:89:62:46:0c:48:bb:4a:94:95:4a:da:a0:62:28:
bd:94:20:51:5a:37:c8:60:46:86:33:f3:1b:6e:47:d5:d0:42:
a5:77:b2:ce:64:b5:3f:2d:06:6f:47:25:74:06:0f:4f:22:d7:
35:b3:e5:fd:b0:5c:d5:c3:13:e0:af:7b:70:f0:7f:b1:89:93:
eb:78:91:5a:98:ce:43:dd:9b:68:39:65:18:b4:e5:6b:06:cf:
5e:64:36:00:08:75:cc:4a:45:04:f0:cf:5e:5f:5d:40:ec:00:
36:e7:a2:6b:a4:8e:e7:e4:9f:7d:e4:2a:b0:cc:f1:0d:59:44:
83:29:84:5f:90:2d:8f:aa:a7:d1:bc:ca:a7:c3:33:da:3c:40:
4a:78:6c:16:fb:a7:bb:f1:ac:d0:42:ba:3b:93:f5:12:63:a6:
d6:45:5c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:27 2026 by rpki-client