Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft
File: 0AQf95gDebeYBJJWho3_OYGcJgQ.mft (raw, json)
Hash identifier: xWz97dKSNbLdtouNmLqHXvFFP3l4hBBs9y7qHyBkxpk=
Subject key identifier: 12:AE:85:50:CE:8B:D2:75:CE:61:71:00:78:47:58:53:78:53:45:A8
Authority key identifier: D0:04:1F:F7:98:03:79:B7:98:04:92:56:86:8D:FF:39:81:9C:26:04
Certificate issuer: /CN=d0041ff7980379b798049256868dff39819c2604
Certificate serial: 019D2703FD7304AB54C060252EB4A54673C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AQf95gDebeYBJJWho3_OYGcJgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft
Manifest number: 148B
Signing time: Wed 25 Mar 2026 22:01:05 +0000
Manifest this update: Wed 25 Mar 2026 22:01:05 +0000
Manifest next update: Thu 26 Mar 2026 22:01:05 +0000
Files and hashes: 1: 0AQf95gDebeYBJJWho3_OYGcJgQ.crl (hash: MSrnfX0109f/hK/t0VomSFVwJ7mIXzaBsgKcds3lmvk=)
2: _CbAIha09b2vkLLLEt-SwHJvLtA.roa (hash: rgmnLA63aETJnEB0DGJbTZ0etZiRckyQobaM7PylTRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AQf95gDebeYBJJWho3_OYGcJgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:fd:73:04:ab:54:c0:60:25:2e:b4:a5:46:73:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0041ff7980379b798049256868dff39819c2604
Validity
Not Before: Mar 25 22:01:05 2026 GMT
Not After : Mar 26 22:01:05 2026 GMT
Subject: CN=12ae8550ce8bd275ce61710078475853785345a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ee:ab:68:69:ba:70:4b:24:8e:49:82:35:59:
65:4f:33:1b:99:87:dd:bd:db:20:1c:bb:b1:d6:08:
2c:3b:6d:64:73:48:0b:ef:be:82:63:d5:4d:42:ab:
1a:3b:67:f1:2a:cb:17:9b:b9:b3:00:71:d1:6f:8c:
b7:09:1e:2a:9e:bd:0f:f7:d3:f1:ce:be:ef:59:09:
37:c7:1b:87:db:fd:27:36:9b:68:34:60:d7:3c:5c:
bb:a6:8e:fc:5c:ad:14:4f:32:07:db:d7:1b:b4:ed:
e4:c7:39:88:9b:d3:ce:9e:5a:79:8a:23:8d:69:d8:
6b:35:b5:c1:17:c2:2d:6d:f2:87:04:4a:f5:9d:06:
62:0e:4b:c4:b3:85:5c:87:00:78:fb:a1:85:7e:9a:
52:2c:9c:f1:b8:cc:82:d1:b0:d2:da:0f:13:4d:b9:
1e:fb:df:bf:96:91:3c:5f:c0:b0:b7:66:54:82:20:
bf:73:58:01:20:b5:88:63:ed:b3:fd:97:7b:2a:67:
5c:bf:58:f3:4c:28:ca:28:7e:8d:d4:8f:65:47:97:
8c:02:40:4a:4f:e4:a8:ac:30:ff:aa:8d:8a:50:72:
0f:50:ce:24:2b:87:cc:de:9e:ad:94:93:65:ac:96:
64:0d:5d:ed:c8:cd:93:cc:b5:d5:d2:32:61:d8:9f:
2e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AE:85:50:CE:8B:D2:75:CE:61:71:00:78:47:58:53:78:53:45:A8
X509v3 Authority Key Identifier:
keyid:D0:04:1F:F7:98:03:79:B7:98:04:92:56:86:8D:FF:39:81:9C:26:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AQf95gDebeYBJJWho3_OYGcJgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:9f:d3:21:ba:35:5b:8a:94:8d:16:b2:c4:88:5d:7f:c1:66:
65:c7:dd:b0:9f:7b:8e:fe:a0:53:05:c4:90:ae:ee:58:9c:7e:
84:eb:a6:75:8f:66:e3:c2:d4:23:5c:16:d0:a6:ca:23:ee:d6:
8d:be:89:9a:7e:cd:13:f3:5e:82:16:68:78:9c:7c:a4:ad:1c:
6b:03:aa:7a:6b:3d:49:f0:92:2b:e0:34:4a:a3:36:13:79:e3:
43:b6:a0:a1:f7:54:4f:af:fb:7d:cd:90:ae:62:c4:73:90:14:
fb:d9:e8:b1:70:0b:5e:c6:1d:76:dc:d1:93:d7:d4:04:f6:f8:
dc:2a:02:36:b3:04:d3:0e:2f:32:0d:b4:da:7b:1e:d5:fa:13:
74:a7:64:32:29:28:f2:e1:a3:6b:5f:15:ca:22:b2:67:1a:a4:
c1:26:3d:a3:c5:f3:38:6d:4d:28:f1:f0:48:d7:b3:d5:cf:ea:
8c:5a:17:29:43:5e:49:56:46:c6:34:56:cb:ea:91:ca:91:b9:
e3:ae:23:e4:50:30:48:7b:86:79:9e:07:25:e5:31:da:18:2d:
2c:fc:2a:a4:f5:c1:42:f8:e8:47:12:3a:99:92:88:0c:77:15:
a3:4d:81:87:81:b6:88:b3:8b:6f:66:71:a1:be:71:35:b2:eb:
75:3d:43:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:01 2026 by rpki-client