Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft
File: 0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft (raw, json)
Hash identifier: e4eiemdZ8VPBLrwE+ZNh9rd36RdzCIZ1lHYpOfkjZoE=
Subject key identifier: 02:34:71:5D:37:D8:72:EB:7B:86:13:6B:6F:90:67:41:07:7A:E7:82
Authority key identifier: D2:91:74:12:52:BB:9C:4C:DA:80:04:7D:FB:01:CE:98:C2:19:D1:80
Certificate issuer: /CN=d291741252bb9c4cda80047dfb01ce98c219d180
Certificate serial: 019D284D8F5A80A555997A40557FBD669A85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0pF0ElK7nEzagAR9-wHOmMIZ0YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft
Manifest number: 173B
Signing time: Thu 26 Mar 2026 04:01:04 +0000
Manifest this update: Thu 26 Mar 2026 04:01:04 +0000
Manifest next update: Fri 27 Mar 2026 04:01:04 +0000
Files and hashes: 1: 0pF0ElK7nEzagAR9-wHOmMIZ0YA.crl (hash: d8PHGpDyYA0KxO+w8X5Ytm6j+LhLO7BikrrI+SrpxVY=)
2: DmoDqDPowCrVpCCkIKS4Nf6g_kI.roa (hash: 7od5f7R8DSJPoJQHbrlbRFv+w64a+rw+WvHvRvhjbSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0pF0ElK7nEzagAR9-wHOmMIZ0YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:8f:5a:80:a5:55:99:7a:40:55:7f:bd:66:9a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d291741252bb9c4cda80047dfb01ce98c219d180
Validity
Not Before: Mar 26 04:01:04 2026 GMT
Not After : Mar 27 04:01:04 2026 GMT
Subject: CN=0234715d37d872eb7b86136b6f906741077ae782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dc:9e:2d:94:92:80:fd:0f:23:0b:f4:f0:e4:
3a:5c:68:3a:23:5f:57:b5:36:59:30:38:d6:9b:88:
c5:3d:2b:1b:03:5f:70:84:5d:d9:2f:02:29:8c:31:
f2:62:22:5f:5b:ea:2d:b0:8b:da:c8:ea:be:df:d2:
da:1d:8f:8b:48:06:ff:73:0d:2b:04:b3:47:6b:31:
c0:ba:b9:7a:4a:bd:5b:d1:cf:13:09:68:e4:4d:48:
88:e8:f4:b9:e6:17:31:0e:35:05:77:fa:28:5a:3f:
29:41:85:55:37:66:61:5f:f8:09:4e:84:83:a6:17:
89:50:26:b0:75:92:d3:10:03:1b:c8:a9:9d:fe:e1:
94:9a:34:be:6c:24:f7:22:22:7c:7e:d3:37:23:14:
fa:6b:e1:32:65:5b:dd:0d:f3:2a:7a:79:f6:6c:e5:
2d:35:ca:45:2b:fd:ee:58:72:a1:f4:e6:f0:df:33:
0a:09:42:71:80:c8:07:c1:72:a8:41:13:68:1e:70:
b3:7e:ea:24:ce:0f:3d:ec:8e:44:de:68:a4:bd:b5:
80:88:61:d6:07:83:02:a9:e8:3b:c9:7c:36:92:cf:
e5:ea:fd:f8:de:15:f1:a6:15:c9:c4:5a:e5:9a:b1:
07:60:ef:22:0f:4c:95:82:90:71:e2:57:d0:54:d2:
5c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:34:71:5D:37:D8:72:EB:7B:86:13:6B:6F:90:67:41:07:7A:E7:82
X509v3 Authority Key Identifier:
keyid:D2:91:74:12:52:BB:9C:4C:DA:80:04:7D:FB:01:CE:98:C2:19:D1:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0pF0ElK7nEzagAR9-wHOmMIZ0YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d4:0b:b3:05:e9:21:68:72:a6:f5:3f:40:4b:c3:a5:d0:6c:
2e:5c:2f:74:71:13:a5:e0:c3:71:63:e1:9d:39:27:62:e2:1c:
bc:78:f0:93:f1:0a:21:1f:fb:06:5c:98:3e:f9:ff:53:51:03:
cb:31:05:20:1f:d4:db:cd:a5:9b:56:a4:97:5d:19:fc:45:f6:
8f:3c:91:37:31:3d:bf:54:01:36:6a:19:62:38:19:06:e7:2a:
08:76:23:e5:de:77:62:16:26:48:6f:22:68:7d:20:38:26:81:
38:2e:bb:c2:ae:97:e9:b6:35:a4:01:fa:88:eb:ab:0f:ee:5e:
f0:46:89:c3:1b:39:cd:aa:fb:3c:d2:f4:55:c2:4e:5d:a0:2c:
c5:4b:ec:49:a5:0b:cb:10:88:9f:3a:5b:5b:02:95:98:e0:55:
24:34:bb:bb:d1:2e:35:eb:42:45:67:1e:c4:93:82:66:e3:11:
d7:69:59:b1:81:89:37:eb:87:3c:f8:34:26:13:62:f1:76:10:
6d:da:90:a2:18:11:f0:be:84:5e:b3:09:e0:a7:52:40:5b:24:
27:33:dc:cf:65:7e:1f:9f:66:d4:24:b7:75:d0:22:98:3f:4d:
cd:77:41:94:0d:30:e3:34:0f:f3:1c:3b:24:28:9a:90:4b:b0:
09:7a:97:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:48 2026 by rpki-client