Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
File: 0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft (raw, json)
Hash identifier: 06FawJZhSDYwC3qeQdJRipGAvfCQg259AcUrg0VdVMo=
Subject key identifier: 0F:C0:D3:32:F6:7B:18:6B:09:D2:91:ED:14:50:6E:8F:33:E6:B6:F0
Authority key identifier: D2:DD:4D:DD:53:6F:18:A8:72:CB:AC:15:E5:89:54:2A:ED:CD:07:37
Certificate issuer: /CN=d2dd4ddd536f18a872cbac15e589542aedcd0737
Certificate serial: 019D2B4EE2AA5114F79942DF4486DFE5C04C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
Manifest number: 0A72
Signing time: Thu 26 Mar 2026 18:01:23 +0000
Manifest this update: Thu 26 Mar 2026 18:01:23 +0000
Manifest next update: Fri 27 Mar 2026 18:01:23 +0000
Files and hashes: 1: 0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl (hash: vFRSq+ji00UW1kCt3eZow1gGZlBYQXHWEr3V53b4nvs=)
2: X_8Np37khTcPCEtRXHbNQfqvQNE.roa (hash: XNLBBBK7IAMNXci8RcPDaNEkuHX48HSzOY+bMxN50u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:e2:aa:51:14:f7:99:42:df:44:86:df:e5:c0:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2dd4ddd536f18a872cbac15e589542aedcd0737
Validity
Not Before: Mar 26 18:01:23 2026 GMT
Not After : Mar 27 18:01:23 2026 GMT
Subject: CN=0fc0d332f67b186b09d291ed14506e8f33e6b6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b7:b4:a3:18:10:b9:7b:e1:af:2b:13:5f:46:
dd:8a:88:bd:c5:2a:a7:ec:df:55:e5:a2:ae:fb:79:
cf:6a:d5:d5:d7:43:a4:31:02:d3:91:a0:6c:b3:64:
13:ec:e0:28:ad:35:d0:eb:32:20:be:cb:05:68:51:
e0:01:98:d3:10:6c:fe:36:5c:ef:2e:75:4a:81:cd:
8c:2b:8a:ab:38:cf:1e:ac:c9:16:8e:76:d2:66:a7:
18:5b:a2:8f:0e:88:01:6a:38:8e:56:50:f8:65:55:
0a:90:e5:6f:b5:22:7a:67:3f:e6:a1:bd:1d:f0:35:
2f:58:47:41:90:1b:cf:61:5b:4b:69:8c:ff:86:2a:
ee:22:b7:ae:56:16:f9:2f:20:e6:5d:23:cc:32:17:
a0:1b:ba:9c:b3:17:9f:5d:6f:ff:f5:b5:56:5e:08:
65:50:4e:66:13:f0:6b:5e:4c:d0:77:10:5e:d8:40:
7a:56:e9:2d:d4:c7:ca:9b:c2:95:69:94:9c:d6:ea:
90:56:d0:af:49:d7:a9:d0:0f:37:46:75:a1:93:0e:
67:fc:e9:45:bb:1a:65:67:f3:9c:a0:e3:20:49:68:
cb:b3:c5:31:d4:90:45:fc:11:32:7c:e0:db:a5:4b:
15:f8:a0:ba:20:d1:72:08:e3:0a:a4:d5:48:71:e2:
3d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C0:D3:32:F6:7B:18:6B:09:D2:91:ED:14:50:6E:8F:33:E6:B6:F0
X509v3 Authority Key Identifier:
keyid:D2:DD:4D:DD:53:6F:18:A8:72:CB:AC:15:E5:89:54:2A:ED:CD:07:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:fd:d5:fc:c1:a3:2a:3e:45:32:ed:34:e2:ab:d4:57:a3:4f:
af:37:14:52:a6:a2:f5:79:24:37:3e:02:ca:22:81:55:80:8a:
69:66:5a:60:c8:41:50:27:3c:be:a0:3c:71:cb:14:5a:8c:a9:
5f:cb:12:a0:b7:5c:42:7a:0d:91:66:87:07:59:3b:da:fa:96:
80:0f:a0:e3:e6:65:ca:a4:f0:fe:08:6d:f5:de:87:c6:ef:bd:
4d:6d:12:9b:76:f2:0a:02:93:b9:34:9a:6a:49:0b:5a:df:57:
c6:65:d9:fa:06:9b:2f:48:83:5e:dd:ac:cc:c7:fd:57:e9:a7:
43:35:98:f3:c5:ec:6b:c7:18:28:48:6f:e1:1c:ea:09:0d:6b:
6a:da:70:a7:66:fb:80:22:8e:2e:e2:e8:b8:17:88:66:58:3b:
c0:1b:42:6a:5f:d1:51:16:d8:41:f3:b7:29:3b:4a:2c:b9:1f:
5c:e1:b9:c9:99:8b:d8:50:fa:5d:22:ca:bb:de:fe:f6:48:c7:
e2:81:cd:ea:a9:ff:b4:43:f4:1c:8a:08:84:32:22:69:bb:5d:
a1:73:3c:99:30:fa:05:39:7e:10:97:18:c7:74:25:44:5e:87:
bc:9b:5c:a9:df:af:a0:87:5d:46:95:d8:2a:38:2d:04:d2:ce:
e8:4e:c9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:00:15 2026 by rpki-client