Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft
File: a0dcb7gDO14R19tfLJl8hLpyXKI.mft (raw, json)
Hash identifier: L2A2YnL1E1Niiq6ZvVZmV5p04lrtrGez8L2QTiWLthY=
Subject key identifier: 04:38:FB:7C:7D:29:AC:1F:B6:C7:F8:70:B5:50:E5:E8:DA:2B:04:81
Authority key identifier: 6B:47:5C:6F:B8:03:3B:5E:11:D7:DB:5F:2C:99:7C:84:BA:72:5C:A2
Certificate issuer: /CN=6b475c6fb8033b5e11d7db5f2c997c84ba725ca2
Certificate serial: 019D2C60F3FAB7231D2655811C6CF206E384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0dcb7gDO14R19tfLJl8hLpyXKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft
Manifest number: 181B
Signing time: Thu 26 Mar 2026 23:00:44 +0000
Manifest this update: Thu 26 Mar 2026 23:00:44 +0000
Manifest next update: Fri 27 Mar 2026 23:00:44 +0000
Files and hashes: 1: a0dcb7gDO14R19tfLJl8hLpyXKI.crl (hash: vZ0QoKOeNuK80Ro584seSVpzOfXn6tDgn76wRowHXsI=)
2: h2uRyyLQQ2Shtkyxrk1UdTyzOhc.roa (hash: 9VGK+pBjMxIsPPaRSCjbbR6f7e4NiPLTe+cZavCVZO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/a0dcb7gDO14R19tfLJl8hLpyXKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:60:f3:fa:b7:23:1d:26:55:81:1c:6c:f2:06:e3:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b475c6fb8033b5e11d7db5f2c997c84ba725ca2
Validity
Not Before: Mar 26 23:00:44 2026 GMT
Not After : Mar 27 23:00:44 2026 GMT
Subject: CN=0438fb7c7d29ac1fb6c7f870b550e5e8da2b0481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:30:c9:f0:1e:96:bc:f9:36:91:75:f4:6b:07:
da:2f:43:d2:79:a3:67:5e:ce:b0:d3:85:12:a2:97:
60:5f:88:25:df:6d:ae:7b:8a:c5:64:cd:d5:7f:d3:
6e:d4:e2:c5:b6:d3:2c:6e:c1:bc:08:79:45:34:b4:
6c:58:fa:14:61:cf:66:50:bf:9d:fb:52:68:8e:98:
32:f4:54:6b:b9:15:38:ac:f7:04:18:68:26:80:75:
56:63:98:7f:5a:0a:03:ef:e8:05:4e:65:da:b4:ad:
2d:2e:cf:d4:85:1e:66:70:13:5d:87:67:e5:ba:c2:
78:ef:d7:c6:d1:f5:5c:00:90:ec:2c:d5:c7:0f:26:
28:0a:b4:f7:25:a7:fa:7f:d0:48:13:12:bf:26:1e:
32:dc:10:3f:6b:e6:2f:49:bd:6a:c2:bd:10:f5:10:
ed:45:62:d2:8a:a7:ce:4e:1a:1f:1d:bb:9e:08:a3:
7f:59:34:65:f5:c1:8b:78:64:b7:c4:b1:a5:14:ac:
c2:db:50:b5:72:e5:3f:e7:da:c2:4c:13:e3:fd:37:
95:2e:a8:ef:4f:83:1f:eb:67:c2:8f:59:79:6c:b5:
c7:79:d8:45:74:cf:d3:04:e8:52:fa:a2:b7:70:3b:
22:15:86:58:9f:7c:7b:a1:70:3b:2d:0f:b5:73:12:
45:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:38:FB:7C:7D:29:AC:1F:B6:C7:F8:70:B5:50:E5:E8:DA:2B:04:81
X509v3 Authority Key Identifier:
keyid:6B:47:5C:6F:B8:03:3B:5E:11:D7:DB:5F:2C:99:7C:84:BA:72:5C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0dcb7gDO14R19tfLJl8hLpyXKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:11:76:ae:91:e3:9b:fa:06:45:31:3f:79:d0:3a:13:51:39:
05:96:59:ef:9b:59:f6:73:33:ab:17:6a:0c:0e:18:60:ed:8f:
45:3e:48:fb:ed:5d:8b:4a:3b:c5:dc:17:90:84:b8:c7:cd:53:
6f:d7:b7:c5:31:29:22:e9:47:f5:06:e6:59:90:60:f8:2a:ec:
01:4a:14:96:5c:d6:1f:e3:00:45:a9:61:5e:f5:ed:a2:55:a2:
38:5c:f5:d6:e7:44:b7:b3:11:aa:bc:59:d6:0b:a1:fc:3c:49:
be:96:b4:d8:e9:dc:a2:df:05:43:ed:3f:14:66:68:37:05:02:
02:ad:fe:0b:15:bb:a6:a8:66:8b:e2:7c:be:07:70:61:76:50:
9d:19:07:50:05:b6:85:d4:1d:a4:3e:7a:0d:5c:6e:d5:4f:c2:
ce:bb:3d:6d:32:42:ed:33:32:35:d3:a1:dd:f2:35:0c:67:ef:
73:c1:48:84:e8:3d:22:3b:4d:3c:17:0b:59:a9:30:01:e7:b1:
6b:99:f2:84:55:5a:79:7b:85:0c:c6:60:04:84:a0:07:d0:cc:
68:15:64:4a:af:eb:88:88:3f:4c:92:e5:e0:e5:f3:3e:21:fc:
f6:05:b4:d2:0b:1a:3b:45:97:c5:bf:41:75:7b:e3:07:a4:01:
b3:c0:03:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:29:05 2026 by rpki-client