Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft
File: 0MzQmlS_pjFBmXzWU7d7yZOS72I.mft (raw, json)
Hash identifier: 0mlILDOsSf6FrFysYfSasRU/aC0yUpBnpWtZEtWSGhk=
Subject key identifier: 68:B5:74:A8:50:89:B4:FF:5B:39:F7:5A:2B:BF:55:8A:41:B2:B3:42
Authority key identifier: D0:CC:D0:9A:54:BF:A6:31:41:99:7C:D6:53:B7:7B:C9:93:92:EF:62
Certificate issuer: /CN=d0ccd09a54bfa63141997cd653b77bc99392ef62
Certificate serial: 019D25F1F9E2CBAB1623CC522F1786C5A015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0MzQmlS_pjFBmXzWU7d7yZOS72I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft
Manifest number: 0A97
Signing time: Wed 25 Mar 2026 17:01:48 +0000
Manifest this update: Wed 25 Mar 2026 17:01:48 +0000
Manifest next update: Thu 26 Mar 2026 17:01:48 +0000
Files and hashes: 1: 0MzQmlS_pjFBmXzWU7d7yZOS72I.crl (hash: yPesVA+dEdxQxaDH5rsDwqdX3I/N+oi7cJGeWfGAqrs=)
2: VQtJlC9hHzZMq_K64NB0xltL3Qc.roa (hash: My9rgEJXYw1FAk2B4n4agl5BA61SBdcnSem0n0fXVFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft
rsync://rpki.ripe.net/repository/DEFAULT/0MzQmlS_pjFBmXzWU7d7yZOS72I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:f9:e2:cb:ab:16:23:cc:52:2f:17:86:c5:a0:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ccd09a54bfa63141997cd653b77bc99392ef62
Validity
Not Before: Mar 25 17:01:48 2026 GMT
Not After : Mar 26 17:01:48 2026 GMT
Subject: CN=68b574a85089b4ff5b39f75a2bbf558a41b2b342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a7:d4:54:ca:fb:27:49:06:2f:27:4e:55:9d:
cc:8f:75:e3:80:c3:e7:e7:d3:45:db:9c:ed:62:af:
41:5f:44:19:67:a3:50:cd:f1:47:b2:95:17:43:08:
ca:bb:08:5f:0b:2b:8b:76:d4:81:97:29:ae:d3:57:
ac:9a:9e:d4:38:a1:2f:28:6a:62:0a:5f:5f:36:17:
d1:05:5a:c2:69:a9:5b:61:e9:9f:c0:98:86:5e:49:
b4:6c:20:ca:18:8a:71:03:f8:69:b6:3b:32:ff:42:
92:96:61:5a:6f:04:7b:d9:50:f4:f4:ad:c2:80:69:
46:04:7f:9d:bd:2a:28:a4:4d:39:9e:2a:5f:d6:d5:
cf:ae:ab:88:35:ee:ef:7e:0b:b7:7c:24:63:a0:0f:
ae:32:49:af:8f:27:08:53:d4:62:18:97:3e:35:b0:
37:3b:4b:2f:ff:a0:4e:5a:5c:cf:14:e0:c8:e8:eb:
97:e3:cb:8b:02:46:e8:ff:1b:5a:00:80:b9:61:6b:
1d:01:20:68:4c:7a:a6:81:0a:af:df:6f:39:a4:14:
87:3d:2b:e9:7d:97:ea:d4:dd:de:55:3c:49:cc:ff:
f9:bd:c3:a2:f0:4e:1c:b9:62:96:8d:d3:5e:15:81:
b0:60:de:6e:b2:5b:41:70:11:1c:e4:b2:9b:e1:a3:
b5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B5:74:A8:50:89:B4:FF:5B:39:F7:5A:2B:BF:55:8A:41:B2:B3:42
X509v3 Authority Key Identifier:
keyid:D0:CC:D0:9A:54:BF:A6:31:41:99:7C:D6:53:B7:7B:C9:93:92:EF:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0MzQmlS_pjFBmXzWU7d7yZOS72I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a9:43:f5:20:a3:31:42:00:db:1d:bc:e4:c8:b2:de:4c:d0:
04:3c:1c:90:e7:89:a9:a5:0a:f0:2e:d3:12:88:96:7d:c9:46:
aa:c8:3f:7a:44:51:8a:d0:80:f9:0b:be:54:a1:fe:39:d3:e0:
cc:fc:f1:94:d0:ae:70:29:fb:a4:53:e3:37:7d:3d:d4:a4:7c:
d6:6b:10:d7:3e:c9:85:e5:bf:9a:98:80:3b:5c:0d:18:fa:39:
3a:75:95:0b:3a:a5:af:f6:a5:f7:e6:a0:c2:f3:22:42:c2:eb:
27:db:b7:e1:b4:ab:d4:00:f4:67:5e:95:2b:c2:d3:78:f4:55:
ec:4f:bb:aa:71:9d:ba:1c:2d:1f:37:e0:3e:29:89:f8:01:4f:
43:bc:33:77:38:81:26:67:5f:2e:a3:99:62:0d:ab:54:81:5f:
b4:77:d2:cf:04:cf:33:95:b7:23:75:54:93:c6:66:77:7a:99:
80:88:86:a3:17:77:be:4d:11:80:e6:fa:fa:06:b3:cd:2a:be:
8e:24:3e:70:6a:f2:ed:e6:78:51:88:12:e6:c0:88:ee:2f:18:
ae:f6:6f:76:a0:d8:4e:5e:0a:d0:f3:77:0e:4a:af:f0:a0:b9:
61:55:6a:5c:17:1a:1a:fd:5b:bd:0c:d2:6e:18:4b:c7:da:6f:
53:12:33:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:37:42 2026 by rpki-client