Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
File: 0d4HoaH2W9EW4R-fEQhgS26VzP0.mft (raw, json)
Hash identifier: xSMJN2Dxo3BHTHGMgBrUE1Zsj8IrFNiqCTBL/qjX0QQ=
Subject key identifier: 29:EA:F4:D7:A6:1B:31:67:72:CC:A5:DD:7E:05:1C:D0:22:86:9D:9D
Authority key identifier: D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
Certificate issuer: /CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Certificate serial: 019D2AA95C2798FCC16DB68A377C3ECE20E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
Manifest number: 141E
Signing time: Thu 26 Mar 2026 15:00:35 +0000
Manifest this update: Thu 26 Mar 2026 15:00:35 +0000
Manifest next update: Fri 27 Mar 2026 15:00:35 +0000
Files and hashes: 1: 0d4HoaH2W9EW4R-fEQhgS26VzP0.crl (hash: eUNYxVhuEU7hYUveOSe0j3+RHmfAbpf2FP0kNMv3MwI=)
2: 6AcW6a22cinoLIymW2byGAd7uWo.roa (hash: RoxEP6kBPzD8q8xHwCRknSTvIS7/SOyyVCFWMK8wKF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:5c:27:98:fc:c1:6d:b6:8a:37:7c:3e:ce:20:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Validity
Not Before: Mar 26 15:00:35 2026 GMT
Not After : Mar 27 15:00:35 2026 GMT
Subject: CN=29eaf4d7a61b316772cca5dd7e051cd022869d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ce:e7:fc:67:2a:94:29:f1:ba:7a:69:a1:df:
1a:4a:29:c2:6f:81:e9:67:8d:66:77:9d:1e:ea:0e:
d6:60:a6:04:28:ae:87:af:59:8c:51:42:a2:38:c8:
ad:ed:c9:70:66:76:6c:ce:22:59:8b:e5:0b:81:a0:
71:e6:41:06:8d:b4:b5:45:c2:73:af:da:36:7f:fc:
6f:15:29:8b:86:bb:da:37:dc:78:8d:7e:dd:3e:78:
f7:6b:91:6c:8d:55:8a:8f:1c:92:cd:7e:a1:9a:7d:
02:3a:94:be:a8:72:69:88:fd:57:03:d9:99:c3:ca:
fb:f9:91:48:46:1a:81:c8:b0:b9:a9:16:88:53:a8:
08:f7:9a:a6:d3:3d:b9:05:a7:18:d5:46:4d:0d:a0:
48:65:0f:4a:f2:1c:4b:8f:0f:51:12:02:d5:20:d7:
71:d1:a8:b5:0b:a7:58:03:e3:45:f3:d3:1b:65:34:
56:b3:52:64:1a:f5:84:b4:d8:fd:27:e3:75:e3:15:
66:4e:64:74:74:6e:a3:c6:d6:63:1d:27:b6:3e:7c:
9d:32:d8:5f:fb:5a:e2:75:f4:f0:f4:f3:c0:ef:cc:
ce:a7:91:eb:f2:92:cb:73:2e:52:ce:2c:c9:78:f1:
46:6d:db:3e:50:10:c9:b9:8e:9b:47:25:70:47:ee:
fa:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:EA:F4:D7:A6:1B:31:67:72:CC:A5:DD:7E:05:1C:D0:22:86:9D:9D
X509v3 Authority Key Identifier:
keyid:D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:eb:43:7e:72:77:83:80:ec:86:22:da:56:2a:ef:e3:f8:44:
30:9b:63:8a:54:73:0b:2f:d4:b9:ce:29:33:a8:d8:d2:5a:6e:
32:8e:1a:74:02:98:42:ae:a2:94:2c:ac:76:14:3f:50:a9:93:
d8:1d:a7:1e:69:46:16:f7:45:1d:81:b5:76:c5:f4:d6:f9:a1:
92:37:54:b6:a2:4f:84:fd:30:6e:69:45:70:91:64:23:81:56:
67:b1:54:c9:53:70:4c:bc:35:2f:e8:ec:91:23:41:ac:86:cc:
d5:d8:7d:a9:ed:f2:f0:55:be:1d:88:c9:3e:0a:03:d2:5f:17:
07:e0:12:59:b7:43:ae:56:25:c5:b7:2d:71:2d:00:95:b8:02:
b1:42:f9:2c:12:e4:d4:80:84:1f:80:cc:50:61:81:27:4b:e9:
17:bf:6d:e4:60:16:3c:f1:b0:c7:8d:18:38:80:1b:91:19:c2:
5e:d1:87:fe:8b:e4:c1:77:e5:c1:b6:90:b4:b7:b7:7d:8d:98:
4f:04:ee:f9:16:3c:91:4a:28:c2:9c:5c:30:90:34:09:8c:7a:
3a:39:6a:2c:88:c1:c4:2c:ee:f7:bb:c9:17:dd:c0:69:0f:71:
b5:15:5e:84:06:af:a9:7b:51:66:ee:03:43:d7:c6:32:65:a9:
88:cc:ed:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qqVwnmPzBbbaKN3w+ziDjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZGUwN2ExYTFmNjViZDExNmUxMWY5ZjExMDg2MDRiNmU5
NWNjZmQwHhcNMjYwMzI2MTUwMDM1WhcNMjYwMzI3MTUwMDM1WjAzMTEwLwYDVQQD
EygyOWVhZjRkN2E2MWIzMTY3NzJjY2E1ZGQ3ZTA1MWNkMDIyODY5ZDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvM7n/GcqlCnxunppod8aSinCb4Hp
Z41md50e6g7WYKYEKK6Hr1mMUUKiOMit7clwZnZsziJZi+ULgaBx5kEGjbS1RcJz
r9o2f/xvFSmLhrvaN9x4jX7dPnj3a5FsjVWKjxySzX6hmn0COpS+qHJpiP1XA9mZ
w8r7+ZFIRhqByLC5qRaIU6gI95qm0z25BacY1UZNDaBIZQ9K8hxLjw9REgLVINdx
0ai1C6dYA+NF89MbZTRWs1JkGvWEtNj9J+N14xVmTmR0dG6jxtZjHSe2PnydMthf
+1ridfTw9PPA78zOp5Hr8pLLcy5SzizJePFGbds+UBDJuY6bRyVwR+76zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnq9NemGzFncsyl3X4FHNAihp2dMB8GA1UdIwQY
MBaAFNHeB6Gh9lvRFuEfnxEIYEtulcz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGQ0SG9hSDJXOUVXNFItZkVRaGdTMjZWelAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80OTYzZWMtNTc2Zi00MTY3LTk5M2Mt
OTlmMTgyMjEzZDRmLzEvMGQ0SG9hSDJXOUVXNFItZkVRaGdTMjZWelAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy80OTYzZWMtNTc2Zi00MTY3LTk5M2MtOTlmMTgyMjEzZDRm
LzEvMGQ0SG9hSDJXOUVXNFItZkVRaGdTMjZWelAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvOtDfnJ3
g4DshiLaVirv4/hEMJtjilRzCy/Uuc4pM6jY0lpuMo4adAKYQq6ilCysdhQ/UKmT
2B2nHmlGFvdFHYG1dsX01vmhkjdUtqJPhP0wbmlFcJFkI4FWZ7FUyVNwTLw1L+js
kSNBrIbM1dh9qe3y8FW+HYjJPgoD0l8XB+ASWbdDrlYlxbctcS0AlbgCsUL5LBLk
1ICEH4DMUGGBJ0vpF79t5GAWPPGwx40YOIAbkRnCXtGH/ovkwXflwbaQtLe3fY2Y
TwTu+RY8kUoowpxcMJA0CYx6OjlqLIjBxCzu97vJF93AaQ9xtRVehAavqXtRZu4D
Q9fGMmWpiMztrQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:44:04 2026 by rpki-client