Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft
File: a0dcb7gDO14R19tfLJl8hLpyXKI.mft (raw, json)
Hash identifier: zL7T/bRYjSMQVr4hqXsWk62MC3vUbW+lfpxnvQWVpiU=
Subject key identifier: 89:84:83:47:4E:0D:3D:71:77:F4:20:FD:07:86:93:EC:32:4F:3B:A6
Authority key identifier: 6B:47:5C:6F:B8:03:3B:5E:11:D7:DB:5F:2C:99:7C:84:BA:72:5C:A2
Certificate issuer: /CN=6b475c6fb8033b5e11d7db5f2c997c84ba725ca2
Certificate serial: 019D2A72EAE4F177AF72796EC356DE8EF53E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0dcb7gDO14R19tfLJl8hLpyXKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft
Manifest number: 181A
Signing time: Thu 26 Mar 2026 14:01:07 +0000
Manifest this update: Thu 26 Mar 2026 14:01:07 +0000
Manifest next update: Fri 27 Mar 2026 14:01:07 +0000
Files and hashes: 1: a0dcb7gDO14R19tfLJl8hLpyXKI.crl (hash: /0JiMrgRRBDoveycO4jCnxdvTweaE078AzM6huGBQ/o=)
2: h2uRyyLQQ2Shtkyxrk1UdTyzOhc.roa (hash: 9VGK+pBjMxIsPPaRSCjbbR6f7e4NiPLTe+cZavCVZO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/a0dcb7gDO14R19tfLJl8hLpyXKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:ea:e4:f1:77:af:72:79:6e:c3:56:de:8e:f5:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b475c6fb8033b5e11d7db5f2c997c84ba725ca2
Validity
Not Before: Mar 26 14:01:07 2026 GMT
Not After : Mar 27 14:01:07 2026 GMT
Subject: CN=898483474e0d3d7177f420fd078693ec324f3ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e3:f7:4a:25:43:dc:37:b6:a8:da:78:16:ef:
2b:25:5f:ee:95:8c:54:c5:4f:1c:b5:15:a6:69:64:
75:29:33:42:21:f5:30:fe:ea:02:68:d8:44:ad:82:
e1:09:5e:2d:df:15:bb:31:08:49:d6:16:45:a2:49:
69:ff:2e:a7:75:68:8b:b1:43:ab:ee:cf:b1:08:7c:
48:d0:41:c8:e6:4e:98:98:fa:a1:af:49:3c:81:30:
d9:7d:e0:ff:d5:18:8a:4a:6f:d8:3c:52:00:1f:76:
30:c6:a1:a1:77:19:f1:44:29:80:87:52:11:40:ad:
76:1a:80:64:80:19:81:b8:25:dd:e0:8a:32:31:bf:
89:00:a3:8e:ba:d7:27:c0:8f:88:4f:a9:b1:3a:22:
41:93:e6:1d:c0:76:30:9f:d0:60:d9:bb:34:ca:65:
0b:bd:e7:a2:0d:7e:6f:9e:3d:44:35:aa:ea:ab:e7:
b1:75:a9:19:da:14:a3:c5:3d:14:0f:3b:91:98:39:
6c:73:5b:fc:99:2c:2e:5a:c1:c4:8a:6b:1e:95:9b:
4b:e9:47:1c:a0:0b:6a:1c:e8:b6:ec:75:76:05:78:
e9:53:6c:02:cb:b2:e3:40:88:5e:9c:c6:1e:83:e9:
ed:55:b5:2c:bf:72:d9:b1:35:1d:be:d5:86:ff:ac:
96:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:84:83:47:4E:0D:3D:71:77:F4:20:FD:07:86:93:EC:32:4F:3B:A6
X509v3 Authority Key Identifier:
keyid:6B:47:5C:6F:B8:03:3B:5E:11:D7:DB:5F:2C:99:7C:84:BA:72:5C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0dcb7gDO14R19tfLJl8hLpyXKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:9a:be:76:fd:28:8e:36:dd:6a:9f:8b:a9:8f:db:4a:fc:4f:
ef:12:5a:85:56:5a:01:91:28:b2:2e:0c:ec:be:78:c0:11:a5:
cd:4e:d2:04:18:8c:4b:91:d1:b8:5c:ec:c2:a8:c4:63:d0:ee:
24:74:1c:b4:cf:ab:2b:17:da:2b:15:9d:0f:1d:bf:03:16:ed:
8b:38:8d:8a:a3:02:5e:81:2a:6b:01:f1:e1:85:38:4f:23:a8:
f7:88:20:7b:84:bd:16:1e:be:da:09:a6:7c:d6:4a:84:23:7c:
0c:ca:72:3a:80:6f:55:d5:dd:58:53:31:d2:79:a3:9a:47:91:
4f:ed:25:a7:95:52:bc:17:64:25:f2:93:25:c0:a8:05:ba:47:
59:e0:37:e0:04:26:52:aa:79:11:30:01:c6:4d:1e:9c:2b:d3:
00:73:ee:39:50:1b:24:c9:b3:fb:3b:c3:20:bc:17:7c:d9:56:
b3:5d:35:11:27:37:a4:8e:c2:cb:8e:d8:98:d2:b6:d9:63:8e:
2d:72:f9:fd:5a:dd:58:75:41:00:7d:12:9c:09:5c:50:e3:d0:
e4:26:17:82:09:6e:da:74:e5:fa:66:d6:d3:25:5e:45:3c:48:
ea:62:83:67:80:2d:b4:9a:b7:18:ab:d4:66:ff:40:eb:7e:90:
a5:07:4f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:31 2026 by rpki-client