Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft
File: 0VZGo8mstqSyAbtjJqnwB0Ik84c.mft (raw, json)
Hash identifier: mnRdxDkYdnxYTxDg93E7thf00VhGQ3wPB5aLQRk5PWk=
Subject key identifier: 52:3E:B7:44:76:D0:E6:85:C9:1B:D3:19:37:21:46:49:EB:BE:17:A1
Authority key identifier: D1:56:46:A3:C9:AC:B6:A4:B2:01:BB:63:26:A9:F0:07:42:24:F3:87
Certificate issuer: /CN=d15646a3c9acb6a4b201bb6326a9f0074224f387
Certificate serial: 019D29979927EB98070C326E29CDC0583BCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft
Manifest number: 0A1D
Signing time: Thu 26 Mar 2026 10:01:33 +0000
Manifest this update: Thu 26 Mar 2026 10:01:33 +0000
Manifest next update: Fri 27 Mar 2026 10:01:33 +0000
Files and hashes: 1: 0VZGo8mstqSyAbtjJqnwB0Ik84c.crl (hash: KaMOC+1sJ0TlcXC27ZD5BiGEj3kRPHrwJVtajUx/vgc=)
2: svbZ3xnzSZtEiOKXO_TW25acCTk.roa (hash: opv9wDSI8/zZJZrpAhEN95Q4AkFIV4SP2QjFUJ853yU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft
rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:99:27:eb:98:07:0c:32:6e:29:cd:c0:58:3b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d15646a3c9acb6a4b201bb6326a9f0074224f387
Validity
Not Before: Mar 26 10:01:33 2026 GMT
Not After : Mar 27 10:01:33 2026 GMT
Subject: CN=523eb74476d0e685c91bd31937214649ebbe17a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6f:35:81:4e:b9:eb:51:b5:c4:79:7b:9d:fa:
60:3e:36:5f:c3:79:4c:59:b5:45:f1:41:27:38:3b:
e6:63:b0:4d:06:ef:c6:45:e0:aa:1a:03:ad:ad:4b:
01:fa:e5:7f:cd:ae:ec:60:38:2c:3e:00:18:64:59:
f5:f1:dc:b8:d7:ed:b9:9e:91:a0:80:f1:0e:14:92:
82:9c:ff:49:47:d7:6f:22:23:3d:ed:cd:ec:3d:6b:
a3:eb:c9:8d:9f:4e:ad:5f:20:b2:91:eb:eb:ee:48:
86:ee:ce:f6:3e:bc:85:ba:72:67:9a:e6:c5:ca:31:
82:4f:20:51:38:52:ca:33:c7:9f:c0:f2:9c:5c:59:
c0:f3:2f:26:5d:f3:c8:82:d8:63:37:67:e4:71:15:
51:c7:dd:4b:db:46:a5:9d:a1:24:b9:44:f9:b4:f3:
25:54:00:12:94:2d:96:cf:44:3b:3b:85:4a:84:62:
5f:1f:38:f6:49:3f:36:0c:22:83:2d:27:fe:21:07:
55:13:dd:63:17:e9:bb:eb:9f:74:db:82:31:cc:3c:
9c:00:75:4a:cf:61:b7:d2:18:39:a8:b0:da:26:91:
42:c5:46:db:14:e5:28:ef:1f:2d:1d:31:45:a1:fe:
a7:63:8e:2f:23:6d:86:2d:6a:fd:6e:42:89:a1:c5:
87:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3E:B7:44:76:D0:E6:85:C9:1B:D3:19:37:21:46:49:EB:BE:17:A1
X509v3 Authority Key Identifier:
keyid:D1:56:46:A3:C9:AC:B6:A4:B2:01:BB:63:26:A9:F0:07:42:24:F3:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:73:16:44:c9:22:8e:32:e7:e0:44:2d:e4:df:79:17:75:72:
2c:77:77:38:79:31:83:1b:fd:c7:04:ad:3c:39:d7:17:ab:09:
b5:64:c9:df:f9:c2:ab:73:6c:51:74:bf:24:e3:14:c8:f4:c2:
ac:cb:3c:e8:4c:3d:1e:b3:d6:4a:dd:29:3e:3d:b7:45:6e:a6:
a8:02:bc:6b:17:7b:65:2f:da:ea:a9:75:f1:5b:18:d2:10:ed:
cd:bd:08:1f:89:5c:11:6b:47:a5:7f:09:65:c3:79:59:e5:f5:
1e:44:bf:3e:d9:30:27:58:64:40:69:e6:29:14:2b:c3:d5:62:
29:8c:09:d8:b9:13:83:bb:9b:05:e4:03:6e:44:a4:53:2b:14:
81:6c:54:a6:29:d1:41:b6:10:f3:a8:0b:5a:82:00:db:26:c0:
f0:6a:a8:25:40:f7:2b:18:16:1a:61:f5:59:a3:55:50:82:9f:
e3:50:ee:80:7f:a6:fb:b7:74:65:8b:ff:54:3a:67:ae:43:5d:
65:1e:90:15:52:8a:1c:12:cf:a7:2b:fa:d5:ca:29:79:cf:f4:
6a:0d:9c:d2:62:e7:a4:e2:92:79:08:5c:98:b5:6c:b9:4f:9d:
5c:34:98:f5:e6:39:df:cb:22:23:08:f7:62:cd:38:24:26:1b:
1a:4f:9e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:32:05 2026 by rpki-client