Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
File: 0lgUed7jtZlPEcnZVkYxv1pATAc.mft (raw, json)
Hash identifier: eYq0UZ4dA03Kg7BVy/oyrRjmAaOwo1nPmEbcnK42lwQ=
Subject key identifier: E3:5B:8D:86:9B:59:0C:35:6F:2B:90:DB:D4:7B:54:2B:6B:A7:17:4F
Authority key identifier: D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
Certificate issuer: /CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Certificate serial: 019D265ED13953C59520B3987DF248366801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
Manifest number: 0993
Signing time: Wed 25 Mar 2026 19:00:41 +0000
Manifest this update: Wed 25 Mar 2026 19:00:41 +0000
Manifest next update: Thu 26 Mar 2026 19:00:41 +0000
Files and hashes: 1: 0lgUed7jtZlPEcnZVkYxv1pATAc.crl (hash: THI89BYRQPZJx92SEb1r8K7sVIYKLMnmbBQREXDybnc=)
2: _anBuNNw0qAbfJJyR7NUzCXshEI.roa (hash: u/OzH4PvqgIz0IcQamVppLorgGwznO76WkLllc9zkBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:d1:39:53:c5:95:20:b3:98:7d:f2:48:36:68:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Validity
Not Before: Mar 25 19:00:41 2026 GMT
Not After : Mar 26 19:00:41 2026 GMT
Subject: CN=e35b8d869b590c356f2b90dbd47b542b6ba7174f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bc:56:67:11:9a:42:e0:c3:ac:1a:5b:34:df:
73:5e:f4:4b:eb:36:75:ce:87:c4:37:51:2c:18:d2:
90:24:27:4f:6b:0c:89:03:b3:2a:8b:34:2d:80:fa:
f7:5e:a7:82:40:a8:d3:8f:49:69:01:a7:74:dd:3d:
c1:b4:09:07:82:cc:00:53:9b:47:02:b7:9d:28:e7:
04:d6:57:16:4d:d9:68:99:85:86:16:7d:1e:ce:53:
86:d6:36:cf:f4:9c:c9:ba:34:96:54:42:12:40:f4:
78:ac:b0:b5:20:e6:e8:99:bd:30:f9:af:f9:ac:f3:
89:fd:a7:6b:c6:79:ef:fd:40:23:be:49:05:bf:76:
c2:56:51:7d:b9:84:08:10:78:b6:25:00:99:85:23:
59:a9:1d:8f:35:31:56:68:8e:a3:8a:84:60:9d:af:
63:f8:5e:59:23:c3:5e:53:1c:c9:60:39:e4:49:86:
58:2d:b7:cc:2a:86:79:87:1f:35:05:be:01:50:6d:
88:b2:27:3c:3f:fe:1c:1a:df:16:9f:39:b1:2d:8f:
69:de:d0:f0:9b:e1:4d:cc:f3:c6:6f:c5:74:c9:49:
ae:86:0f:c5:49:2a:4a:3f:1a:e9:9b:8b:19:a5:a1:
3c:51:ee:0c:6e:0e:09:0e:b8:c3:89:a2:20:2c:f3:
43:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:5B:8D:86:9B:59:0C:35:6F:2B:90:DB:D4:7B:54:2B:6B:A7:17:4F
X509v3 Authority Key Identifier:
keyid:D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b9:2c:e7:f4:79:e4:5c:11:bf:17:7d:6d:b0:9f:cb:c8:3b:
f2:89:88:bd:9f:f4:76:bf:4a:41:08:8a:e0:cc:7e:65:6c:d0:
61:5b:17:1c:06:c2:a7:4e:1b:12:f7:fc:8a:51:f0:07:37:09:
a3:58:83:60:de:db:6c:cb:0f:a1:e6:6c:e5:51:bf:4b:5b:10:
82:60:ef:65:02:1d:65:8f:87:f6:5c:fd:e5:49:65:92:87:73:
57:c7:4f:0f:39:a9:c8:b9:d9:5a:3d:d1:9f:92:29:57:f3:b2:
fd:f4:74:4b:7f:24:c7:d1:a8:98:34:e1:55:d9:c2:66:2b:12:
c9:0a:e0:2e:25:9b:35:60:35:9b:74:f5:17:4b:f4:ca:b7:4b:
1a:2c:74:0f:a3:5b:a2:f8:a9:17:ba:b0:bc:8f:47:2e:69:5c:
90:81:40:6a:6b:0c:2b:da:c8:71:7b:fd:1f:12:63:13:7d:90:
80:9a:0f:a1:f0:47:6b:3f:25:65:68:c3:ef:82:37:46:4d:1c:
50:2c:b9:4b:60:f3:a3:ac:6d:8d:a8:4d:99:71:a5:75:52:8a:
52:8d:92:2f:70:dc:15:3c:eb:ef:3a:a0:ee:4f:19:80:a7:f6:
3d:db:56:2d:bc:32:14:18:dd:44:8e:f1:ba:1b:33:88:8a:1f:
c5:a3:41:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:24 2026 by rpki-client