Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft
File: 0QZfT7a2eefxy92ANflnRnAQ6pk.mft (raw, json)
Hash identifier: 1kDm8VFzsFLJ/H2BAO0FQABLGepsoO84ri7ag4Jg/rQ=
Subject key identifier: AC:41:9C:00:F7:7D:4D:19:4E:28:33:39:D6:74:02:19:18:4C:F4:1B
Authority key identifier: D1:06:5F:4F:B6:B6:79:E7:F1:CB:DD:80:35:F9:67:46:70:10:EA:99
Certificate issuer: /CN=d1065f4fb6b679e7f1cbdd8035f967467010ea99
Certificate serial: 019D28F28FB2A0F74E915F8D9D2F1CFA6A05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QZfT7a2eefxy92ANflnRnAQ6pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft
Manifest number: 0F01
Signing time: Thu 26 Mar 2026 07:01:18 +0000
Manifest this update: Thu 26 Mar 2026 07:01:18 +0000
Manifest next update: Fri 27 Mar 2026 07:01:18 +0000
Files and hashes: 1: 0QZfT7a2eefxy92ANflnRnAQ6pk.crl (hash: oBPn81rZkMc6fLUBd1TYDlzv7cIZ3dRqU7gJajSb9/c=)
2: 1-i4S5deTfU5Sh15fYqf5Jhusm2U.roa (hash: I950vcuKR1BNQlR6pb4t14q2i1wr101AxNTWsanHl/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QZfT7a2eefxy92ANflnRnAQ6pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:8f:b2:a0:f7:4e:91:5f:8d:9d:2f:1c:fa:6a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1065f4fb6b679e7f1cbdd8035f967467010ea99
Validity
Not Before: Mar 26 07:01:18 2026 GMT
Not After : Mar 27 07:01:18 2026 GMT
Subject: CN=ac419c00f77d4d194e283339d6740219184cf41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:16:4a:8f:4d:9a:cb:4f:bc:43:51:b1:f1:4b:
a5:0c:e8:b0:76:b6:06:56:01:e1:de:d6:f1:15:b7:
3a:73:23:6b:62:98:81:63:b2:f7:06:b2:f5:8e:6f:
45:dc:25:df:ea:80:98:2d:f4:e7:dd:0d:b7:e6:e9:
87:76:a9:87:1b:83:4f:aa:92:0d:75:c9:f0:4f:4b:
fd:bd:60:49:57:5a:86:d2:e4:16:10:ea:69:e8:cd:
b2:83:f2:94:6c:01:12:07:3d:6f:4f:44:96:10:9c:
07:6a:06:45:17:08:31:5c:16:e4:c5:5d:0f:b0:0f:
31:4c:52:05:4f:d0:cc:5a:8b:5a:f5:74:b1:f0:50:
ad:d4:0e:3d:fd:da:92:20:67:ea:25:4f:eb:98:ca:
d0:9a:41:93:c7:36:e8:b9:b5:b1:fd:f9:92:fd:1e:
b6:48:65:19:d5:7a:3e:6f:97:e7:fe:f8:80:4e:51:
11:e9:a9:32:61:91:90:06:53:ae:a1:43:db:42:6e:
74:7d:1a:95:45:89:34:4c:f6:b3:70:11:96:cd:cc:
4a:52:20:85:f3:a8:2c:38:e1:6e:dd:c2:80:df:80:
6d:fc:b3:3d:44:2d:69:f1:bb:21:b8:ce:ba:38:4d:
6f:b7:78:59:c1:99:f0:60:20:88:fc:92:53:ff:f0:
1b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:41:9C:00:F7:7D:4D:19:4E:28:33:39:D6:74:02:19:18:4C:F4:1B
X509v3 Authority Key Identifier:
keyid:D1:06:5F:4F:B6:B6:79:E7:F1:CB:DD:80:35:F9:67:46:70:10:EA:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QZfT7a2eefxy92ANflnRnAQ6pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e6:ee:d8:f1:83:86:6e:5e:dd:ac:53:a6:4e:b6:05:e8:d9:
7b:f8:62:8d:74:ab:c0:d0:e2:54:b8:3d:2e:ed:da:62:31:63:
70:d7:ab:61:91:95:b4:52:38:8e:bc:fe:9f:55:d3:52:ff:73:
47:b6:70:66:8e:0d:8d:51:a2:da:48:fb:a9:d6:92:bb:96:af:
65:72:2a:66:b8:33:50:83:a3:9a:a1:45:6e:35:4e:ce:9a:8b:
30:d9:de:c0:51:46:ab:be:97:68:99:7c:d0:e0:2f:df:36:64:
49:4e:ef:9c:cc:62:6d:2d:a5:00:e5:f1:f0:1d:80:89:c2:66:
b0:4d:f4:d0:6b:90:fa:7f:1e:ba:2c:fb:40:eb:36:24:dd:3f:
b7:52:86:05:35:48:f9:59:b3:2b:8a:99:55:b0:a6:9a:73:22:
ab:c1:26:fa:0b:a8:16:b8:0f:35:5e:5b:42:ff:10:53:7a:8c:
bd:c5:54:2a:59:e2:22:9b:ae:b9:27:da:c3:5a:cd:7f:bc:2b:
2a:c4:21:42:99:fd:68:da:f2:db:da:92:ef:96:da:22:3d:84:
0e:40:ab:31:53:3d:c2:34:ec:d3:75:ed:0d:e4:2f:ce:8e:59:
6f:4d:c9:81:46:44:8d:3e:4b:ee:5f:68:84:b4:d8:ce:2e:9f:
3c:3b:1e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:50 2026 by rpki-client