Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
File: 0sHV_U4greXxG2avsQpUyP_ksEA.mft (raw, json)
Hash identifier: dIt1xRac7qIXHyOjdHQl3RsjB0836BLEuKBuU95lZqs=
Subject key identifier: 9D:91:FF:4E:FD:00:B9:DE:ED:BB:F6:0C:94:12:BB:7D:48:8A:3C:66
Authority key identifier: D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40
Certificate issuer: /CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040
Certificate serial: 019D28BB4BB1233A73BB527653DC62F67B0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
Manifest number: 1748
Signing time: Thu 26 Mar 2026 06:00:56 +0000
Manifest this update: Thu 26 Mar 2026 06:00:56 +0000
Manifest next update: Fri 27 Mar 2026 06:00:56 +0000
Files and hashes: 1: 0sHV_U4greXxG2avsQpUyP_ksEA.crl (hash: 0c7Vz2vYavwZFMm2jYqkyzofl8BKjTcVCokGspzhyZQ=)
2: HXdTxxWcJtGk43e4sYB_pqFMLTc.roa (hash: RsmEntoDX046XG0OnjFT3g2UwaVd62q2eGZGnABzJrY=)
3: aAz2084YN5AIEG28w26S7CIam4E.roa (hash: aLh2/I7u2RUBoHwMQV1fEF1N56viK2J9i2I4M3Pdo98=)
4: xjT1qO5EWxpQrrhnqAJVt7vBTz4.roa (hash: jjMJpW6iAOXQaad1T6wVanui4hCLnhsX9J2X5epM//8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:4b:b1:23:3a:73:bb:52:76:53:dc:62:f6:7b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040
Validity
Not Before: Mar 26 06:00:56 2026 GMT
Not After : Mar 27 06:00:56 2026 GMT
Subject: CN=9d91ff4efd00b9deedbbf60c9412bb7d488a3c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d7:f5:7b:c0:48:88:0e:3a:d6:d8:c9:28:72:
c3:37:40:02:c4:a0:d8:79:ca:4a:ac:f3:c8:aa:ae:
5a:82:20:6f:94:af:2a:81:cb:22:be:06:90:2b:71:
cd:ab:7d:a1:9e:8d:25:7b:49:ee:5c:94:f3:15:67:
3c:15:96:4a:a0:c8:22:2d:ad:b5:cc:ff:3b:08:88:
b8:7e:27:fc:2f:fa:fc:57:e0:72:dc:42:d1:4d:77:
3f:ea:9c:65:d9:e4:80:dd:ac:b5:9f:39:f1:4c:64:
32:13:c2:15:15:16:88:9c:bc:3e:7e:58:22:2a:79:
89:48:1d:5d:c0:d0:cf:f6:d0:f5:52:be:51:10:79:
93:f2:c8:85:be:6a:42:79:cc:4f:4b:25:5d:34:c3:
f4:e9:bf:61:b4:e0:34:ac:c6:d1:9b:4d:d9:89:1d:
4a:b2:6f:30:cf:12:b0:f2:08:ac:99:88:7f:df:53:
ce:73:5a:11:88:67:e0:30:e3:f4:fd:64:e2:00:35:
3d:35:aa:1c:56:4a:20:68:02:00:49:04:5e:85:36:
c0:d2:8c:31:39:d1:f5:3a:20:56:b4:4f:4d:db:15:
06:3d:2a:b2:59:22:d9:c4:22:2c:d0:5b:fc:a2:ec:
e7:f0:61:0f:05:ec:b6:68:1f:4d:4d:89:51:90:56:
58:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:91:FF:4E:FD:00:B9:DE:ED:BB:F6:0C:94:12:BB:7D:48:8A:3C:66
X509v3 Authority Key Identifier:
keyid:D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:0a:e0:c1:5a:d8:ed:04:09:43:9a:f3:ff:d2:88:79:4a:5c:
dd:ec:c8:a3:60:da:dc:aa:83:90:dc:10:38:5c:26:1e:2e:d1:
bd:76:b1:70:d7:c4:47:c7:47:2c:dc:2c:ea:f2:94:eb:4a:cd:
6f:08:a0:f2:ac:99:7b:dd:12:bd:65:ab:cd:0a:80:f6:c3:3a:
08:25:98:76:66:14:09:29:b3:2f:82:02:62:f4:9c:f1:15:6c:
ac:fb:dc:92:45:e5:4e:7f:cd:31:03:0e:b2:75:7b:3e:07:82:
71:a9:b5:55:d5:aa:52:59:a1:54:c5:d6:f0:11:b8:42:67:04:
f2:67:59:93:59:43:cc:b2:c4:fc:26:1f:fe:2f:22:5a:79:ae:
0a:14:3c:5d:32:f1:c8:dc:fc:e7:37:2c:51:81:1b:91:91:c4:
8f:87:45:c1:f3:df:27:d8:f4:6d:84:b5:7a:fe:b7:ed:a7:19:
aa:14:9f:32:e8:e0:c8:c7:4f:72:18:44:e6:b2:29:93:97:e2:
af:82:79:ae:14:6b:56:0c:60:a6:d2:28:53:50:b6:c8:b8:0b:
d0:94:92:2e:f6:cd:58:ac:2e:56:ed:7f:74:c1:6b:f0:40:10:
04:73:77:fe:97:3a:48:73:17:5c:a7:f9:eb:2b:23:a5:41:79:
08:e2:b9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:11:00 2026 by rpki-client