Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft
File: C0ojfRF9934LiqUS9vJfsgf5orE.mft (raw, json)
Hash identifier: I5nVUwFR+Yj5hKBaz6D59CKMx2TKVeRAf5t0bUN57Kc=
Subject key identifier: DE:93:EB:D0:5D:0B:9A:56:B7:BC:0B:F8:5F:82:A5:F9:2D:1F:BE:FB
Authority key identifier: 0B:4A:23:7D:11:7D:F7:7E:0B:8A:A5:12:F6:F2:5F:B2:07:F9:A2:B1
Certificate issuer: /CN=0b4a237d117df77e0b8aa512f6f25fb207f9a2b1
Certificate serial: 019D2A3B83E26BD66C3A1809721509027F9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0ojfRF9934LiqUS9vJfsgf5orE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft
Manifest number: 1423
Signing time: Thu 26 Mar 2026 13:00:36 +0000
Manifest this update: Thu 26 Mar 2026 13:00:36 +0000
Manifest next update: Fri 27 Mar 2026 13:00:36 +0000
Files and hashes: 1: C0ojfRF9934LiqUS9vJfsgf5orE.crl (hash: qG8mFtWOn/xgeTq7nZY2Y0DCIuqJjsUGnYLrjIbOH/g=)
2: sV7_z3SZk6LqLitV-wqEx_InYyY.roa (hash: uJQknWD1q4gFVKPsqZnSjyh2z6Bj3wZE5RXoYc2FcBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0ojfRF9934LiqUS9vJfsgf5orE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:83:e2:6b:d6:6c:3a:18:09:72:15:09:02:7f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4a237d117df77e0b8aa512f6f25fb207f9a2b1
Validity
Not Before: Mar 26 13:00:36 2026 GMT
Not After : Mar 27 13:00:36 2026 GMT
Subject: CN=de93ebd05d0b9a56b7bc0bf85f82a5f92d1fbefb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:44:ad:66:7e:5c:2f:a7:74:cf:26:84:ba:8d:
63:bc:8f:75:24:50:64:42:7b:11:5a:51:c9:ca:e0:
80:47:08:8e:6b:33:c7:96:50:78:83:53:cc:59:10:
ce:8f:6f:0b:0e:e8:d9:5d:de:e5:09:ba:c8:9b:62:
11:3e:e4:cd:d1:40:b9:93:10:dc:d6:81:91:a5:25:
4a:d3:3d:b6:08:75:ba:37:d3:3a:a9:e0:f2:2d:e8:
6f:9b:7b:e5:1b:7f:99:90:aa:9b:e5:00:05:0e:23:
eb:0e:27:a8:47:1d:f3:0a:0d:61:e3:2b:1f:e0:8d:
a8:e5:4d:20:7b:b8:93:b3:f3:f2:7e:ab:ac:81:35:
6f:e1:55:06:9a:29:65:44:d6:65:73:02:97:91:ab:
22:b4:8d:3d:94:99:f0:0a:46:60:3b:4a:02:fb:e8:
9a:35:15:ea:f4:08:de:c9:92:60:9b:42:8e:e6:32:
17:e4:df:95:fa:76:9c:98:0e:d8:3a:e6:84:6f:99:
25:70:ed:33:d9:30:87:e0:df:5a:4d:04:48:5a:16:
a9:54:91:5f:07:02:f4:03:7e:04:67:59:65:1a:88:
eb:b1:4f:13:ad:c3:47:16:bb:f5:77:29:78:a8:e9:
08:fb:6b:b5:99:6c:49:1c:38:28:b5:bb:4f:19:72:
47:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:93:EB:D0:5D:0B:9A:56:B7:BC:0B:F8:5F:82:A5:F9:2D:1F:BE:FB
X509v3 Authority Key Identifier:
keyid:0B:4A:23:7D:11:7D:F7:7E:0B:8A:A5:12:F6:F2:5F:B2:07:F9:A2:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0ojfRF9934LiqUS9vJfsgf5orE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:b2:bd:8d:cf:cd:16:2a:99:2a:d4:92:f5:87:18:5d:9e:46:
ef:be:62:8d:74:62:99:e7:79:32:36:9d:fc:5c:3c:c8:05:3f:
97:b6:12:f9:c5:3a:2f:d2:bf:b8:fb:28:68:a5:1a:8a:d7:69:
49:ee:fc:45:db:f2:16:cb:a4:b0:40:21:a6:4d:fd:47:12:28:
68:71:8d:7c:3f:2c:50:3e:e1:73:9e:4e:f4:f0:fd:a5:56:f8:
88:d9:05:97:fb:6c:77:75:b8:3f:ef:44:ad:b6:b5:9a:7e:a2:
20:c1:07:7d:02:46:2a:f8:73:0c:e1:6f:2c:80:46:40:7c:01:
f8:ab:e1:b1:f9:a4:81:5c:30:3e:b2:7d:00:c3:20:ee:5c:42:
c5:41:31:a0:84:d9:40:bf:26:75:1e:a3:92:83:96:de:eb:57:
7e:ed:ce:a2:5a:17:8f:20:99:e1:44:29:35:96:ce:71:ec:16:
a6:f1:0f:62:cb:5d:c6:8e:0d:50:76:d6:a1:02:2d:47:a2:e2:
38:8f:24:e9:a4:f0:00:d6:6d:7f:85:57:7b:b9:5c:25:a8:80:
49:a5:f7:90:a7:c9:83:a3:0b:2b:a9:cc:6d:54:0d:e4:f8:4f:
e5:46:19:a8:91:38:93:1f:0b:d6:e3:c8:64:55:50:7e:0c:b0:
f1:ce:42:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:29 2026 by rpki-client