Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
File: 0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft (raw, json)
Hash identifier: aDhmTUnunzXSA/amtBBVA4bylpkHLF5dPhVFXEMGl0w=
Subject key identifier: 10:63:FF:BE:BA:30:35:DB:CA:26:2B:E3:C3:E6:A3:F2:54:2C:3D:5B
Authority key identifier: D0:5E:D7:A5:81:47:AA:51:4C:8E:6D:AF:BC:C5:D8:75:7C:7D:32:72
Certificate issuer: /CN=d05ed7a58147aa514c8e6dafbcc5d8757c7d3272
Certificate serial: 019D2772AFEE36BA9C9ECF7FC6A485AA24B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
Manifest number: 0376
Signing time: Thu 26 Mar 2026 00:02:00 +0000
Manifest this update: Thu 26 Mar 2026 00:02:00 +0000
Manifest next update: Fri 27 Mar 2026 00:02:00 +0000
Files and hashes: 1: 0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl (hash: YOEjHsxFwaicN7Wg3xeyETIWsaNJHUh31W5eOmuBY+o=)
2: RRSohk2nwrUzuw9Rw-D24vHj4iw.roa (hash: cMUbM2/hxrn9h126Zdm7DYzjZuRiajCmosfkit3vk8Y=)
3: c0Owme8MxYD620tsBpkMHThjdrE.roa (hash: Gh6CiZ1DobVHlOo0S4vuXYLdOtBEQiYqATFSpfC1Cik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:af:ee:36:ba:9c:9e:cf:7f:c6:a4:85:aa:24:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05ed7a58147aa514c8e6dafbcc5d8757c7d3272
Validity
Not Before: Mar 26 00:02:00 2026 GMT
Not After : Mar 27 00:02:00 2026 GMT
Subject: CN=1063ffbeba3035dbca262be3c3e6a3f2542c3d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ff:1a:fb:32:15:4e:1e:41:ba:fe:28:f8:e0:
77:5d:85:70:43:e3:7c:82:c2:00:18:07:d0:61:46:
1e:db:4a:14:cf:cb:dd:45:26:c8:17:cb:dd:e6:53:
47:14:ca:c9:34:e2:df:0d:e5:f5:c7:d4:fa:57:d1:
6c:4d:c0:4d:87:f2:bb:f2:fd:86:e1:89:b8:79:3e:
9e:9a:a6:a2:6c:b9:b8:af:bb:b6:64:6d:2f:06:92:
e9:e3:db:2a:78:a1:5a:fd:05:07:b3:4c:1a:a3:bb:
f6:8f:7e:40:93:74:41:fe:f5:0a:db:65:f1:97:02:
a4:1a:76:41:fb:dc:d8:51:8e:1d:e5:de:59:5e:00:
e5:d8:d9:d3:9e:71:ba:a6:65:3b:30:b2:a8:9d:70:
a1:39:12:ec:ce:81:56:3d:be:ba:5c:04:c5:1c:25:
75:a6:4d:74:88:3b:fa:17:28:35:81:aa:4f:0f:db:
6f:b9:5a:34:40:82:06:8b:7b:c0:15:3e:c5:15:39:
3c:ce:45:56:a5:82:22:22:80:e3:45:40:61:e1:83:
bb:9d:51:fd:a1:08:2d:40:8c:a2:75:0c:4d:be:29:
86:2e:88:2f:01:0f:f2:9f:5c:6a:93:72:8b:bb:d0:
37:9f:5e:3e:9d:7a:6f:03:69:4f:cf:87:fe:8d:b2:
90:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:63:FF:BE:BA:30:35:DB:CA:26:2B:E3:C3:E6:A3:F2:54:2C:3D:5B
X509v3 Authority Key Identifier:
keyid:D0:5E:D7:A5:81:47:AA:51:4C:8E:6D:AF:BC:C5:D8:75:7C:7D:32:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:39:24:57:0e:d5:ca:a4:27:79:d0:af:87:d9:5f:cf:65:62:
69:fa:ba:43:99:30:86:50:d9:6e:0d:92:90:de:14:bb:e2:16:
02:36:0c:30:0e:10:fa:13:c4:f3:06:99:a5:9f:98:6e:e2:35:
09:cd:3e:3a:d1:ef:c7:ee:cc:a9:10:f5:73:f1:ee:42:d0:80:
17:eb:73:03:2e:86:91:2e:47:ed:7f:5d:71:f7:43:fd:77:d9:
9b:07:f7:7c:47:b6:79:15:80:0b:44:5f:44:9c:1d:6f:b0:cd:
bb:28:41:d3:1e:dd:3e:3a:1f:4d:30:65:50:a9:c1:e0:72:f1:
b7:b1:e0:6c:8f:8e:18:9c:82:93:f8:f1:9f:fe:71:45:4e:b8:
83:6c:25:cd:b9:da:58:7b:29:68:a7:67:fc:f7:db:dc:c4:56:
1c:bd:ca:37:3f:dd:a2:7f:72:bf:c0:29:fa:51:39:08:0c:40:
1e:14:19:06:df:ff:f9:7c:e0:97:7b:25:94:1a:74:a5:5d:c4:
8f:75:9a:b6:53:b3:51:77:e3:c0:5c:5c:04:04:c3:40:f1:51:
54:84:91:db:74:f2:c5:b7:dd:f5:f7:3b:81:64:93:79:f2:40:
fa:b1:8a:1a:b1:b4:f6:41:22:b7:9f:6c:39:be:1d:55:d1:d5:
26:5a:6f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:37:22 2026 by rpki-client