Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
File: 0H3DXrzYjdDiqNs6WghlS8O-AmI.mft (raw, json)
Hash identifier: RsvI4gk+FYVRsqLE8HUe+Q4WZD9mec1C+wRmIWLZPpE=
Subject key identifier: 56:5C:5A:5F:88:08:8C:DF:76:27:33:4A:88:1D:34:B1:D5:50:08:D7
Authority key identifier: D0:7D:C3:5E:BC:D8:8D:D0:E2:A8:DB:3A:5A:08:65:4B:C3:BE:02:62
Certificate issuer: /CN=d07dc35ebcd88dd0e2a8db3a5a08654bc3be0262
Certificate serial: 019D2816B11F607EACEF30364301C226A4ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 03:01:08 +0000
Manifest this update: Thu 26 Mar 2026 03:01:08 +0000
Manifest next update: Fri 27 Mar 2026 03:01:08 +0000
Files and hashes: 1: 0H3DXrzYjdDiqNs6WghlS8O-AmI.crl (hash: EairMgrJU0x+qM/UuwtVa2c++7Bjzx2vpkho4xSATBQ=)
2: 5S9zgsI7YdgCuLrcxrJgJGgaXio.roa (hash: 0SOHInOOcBkpkEBjrdDgxxRvZ1Vm8a53UcIVrdFkYco=)
3: 6rWLYcpP7TzQKUSgMq9oQds6Kqo.roa (hash: m4nWZTQSZpBwm2N4gNE+CRW9B3H0JjT5K3DxWrPCn/E=)
4: 7gj3qwzFulpZ74m7sX-j6kpzvWg.roa (hash: CZUn6B9GSjHpISyR7znrv7W2c0uiMaQCOD7zBfEJXUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:b1:1f:60:7e:ac:ef:30:36:43:01:c2:26:a4:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07dc35ebcd88dd0e2a8db3a5a08654bc3be0262
Validity
Not Before: Mar 26 03:01:08 2026 GMT
Not After : Mar 27 03:01:08 2026 GMT
Subject: CN=565c5a5f88088cdf7627334a881d34b1d55008d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:67:11:35:4e:b8:c0:ff:e3:85:30:70:97:ef:
9c:42:69:1c:54:3f:fa:7e:c3:39:17:c9:f5:96:0b:
d8:3c:2a:16:bc:6e:0d:f6:c4:1d:9f:27:e9:fe:e4:
ad:d9:79:fa:05:fc:ed:11:86:62:92:71:a9:e0:cd:
f5:58:61:34:af:cb:a4:91:9d:d8:f1:83:92:9d:7e:
73:a3:3e:f8:12:56:ee:a7:96:c1:16:8c:8f:0b:dc:
8c:99:c4:c1:71:69:3e:1d:3e:de:48:85:86:d0:70:
4e:43:8d:30:12:5d:ae:05:42:16:77:8a:3f:69:19:
0b:95:30:06:a0:92:10:15:4b:7a:a8:7e:d1:90:97:
95:99:c9:10:21:7f:da:ac:dd:34:c2:f7:e5:be:05:
9e:60:90:e2:ef:38:33:59:70:ed:e6:d6:ee:f8:09:
e5:cc:16:d2:d0:29:c4:b5:72:5b:0b:af:32:a5:69:
98:02:60:42:fe:a0:a6:fa:9f:ca:75:60:87:c9:be:
d2:f0:02:7c:6f:2c:60:5e:c8:ae:ca:d4:c4:17:35:
5e:d8:dd:49:d4:93:c8:fb:aa:bc:1e:1f:68:91:07:
e7:5a:53:87:84:59:c7:1e:0f:f7:d5:90:4a:c9:05:
40:87:5f:d9:72:32:f0:6e:10:7b:99:c5:f7:47:76:
11:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5C:5A:5F:88:08:8C:DF:76:27:33:4A:88:1D:34:B1:D5:50:08:D7
X509v3 Authority Key Identifier:
keyid:D0:7D:C3:5E:BC:D8:8D:D0:E2:A8:DB:3A:5A:08:65:4B:C3:BE:02:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:2d:df:fc:42:29:15:db:69:81:67:3a:5f:3a:69:5e:38:4d:
25:e7:b2:f8:27:70:22:b8:5c:80:0c:7d:af:ed:42:76:f8:47:
bd:54:22:e4:c7:e1:45:56:a8:fc:60:62:4e:e2:fc:b9:f6:3f:
0f:32:36:45:5a:45:d8:64:86:22:b6:e3:69:82:26:c2:0b:a4:
c4:c3:8d:e8:b0:2b:4b:99:e4:e7:3d:a4:17:7a:1d:18:5a:51:
1d:8f:7c:de:ab:49:ea:02:47:b3:87:94:19:0e:ca:b1:80:a6:
2c:26:43:2c:bc:7a:8a:88:4c:fa:18:f8:97:d5:0e:25:cf:79:
61:27:55:d5:c3:bd:a6:e3:0d:01:6f:d6:15:d5:9d:09:b4:92:
c5:8c:d6:20:62:cb:1d:ed:f2:14:52:66:b9:b5:07:0e:9e:83:
e8:d5:b6:2e:9c:2b:cb:90:ea:38:08:00:c7:6c:8e:9d:89:85:
cd:64:4b:74:b5:23:f0:9f:6e:85:d4:8f:da:70:47:b8:25:7a:
3d:1a:4a:16:bb:f9:8b:f2:84:d5:49:b9:55:43:34:38:e1:94:
51:85:ab:67:2f:54:bd:cf:1f:55:57:68:d4:df:31:e7:1a:a9:
f2:86:c7:f0:23:1c:25:c3:90:41:79:eb:fb:2b:5b:f5:ea:86:
e8:75:ae:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:17 2026 by rpki-client