Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
File: 0SFb_EiHbDZRg1bv1uKAJVod7jw.mft (raw, json)
Hash identifier: NiWk+X3BBKKogpiXy/IQ7gewUpfPO51mg36n4H5erCA=
Subject key identifier: 9C:FF:63:73:AF:03:43:C8:AA:E1:F5:85:B4:A8:6C:D9:FB:3B:EE:B7
Authority key identifier: D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
Certificate issuer: /CN=d1215bfc48876c36518356efd6e280255a1dee3c
Certificate serial: 019D3375C6498601E811306BC0B8A66006F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
Manifest number: 1008
Signing time: Sat 28 Mar 2026 08:00:49 +0000
Manifest this update: Sat 28 Mar 2026 08:00:49 +0000
Manifest next update: Sun 29 Mar 2026 08:00:49 +0000
Files and hashes: 1: 0SFb_EiHbDZRg1bv1uKAJVod7jw.crl (hash: lnqLnr8Bszl+VjXJ1dOj529ojDt5uNUIpp3UQfE+nxI=)
2: V85y9LeDqS5T_7Jp3kZ3KBVJA_Q.roa (hash: dqwbGll0ZQp3qCkA8FJVoE9Przjq1Z276l8w8WiwoPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:75:c6:49:86:01:e8:11:30:6b:c0:b8:a6:60:06:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1215bfc48876c36518356efd6e280255a1dee3c
Validity
Not Before: Mar 28 08:00:49 2026 GMT
Not After : Mar 29 08:00:49 2026 GMT
Subject: CN=9cff6373af0343c8aae1f585b4a86cd9fb3beeb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bc:e4:72:3e:66:43:63:60:3b:c7:09:83:af:
88:8a:81:ca:d5:1f:bb:c1:04:2b:78:26:c4:48:34:
22:41:b0:12:15:96:17:2f:67:05:df:63:ea:bd:57:
cc:46:16:ff:0b:3e:2e:c5:5d:b1:ff:ea:0d:85:d0:
72:99:36:51:9c:a3:cd:4e:72:12:21:d0:68:91:29:
6f:29:a9:47:a9:20:50:60:ad:f5:00:bb:27:31:f5:
b6:d3:8c:05:89:d8:98:f7:97:c2:9b:9a:fe:3c:34:
ab:fa:0d:94:cd:07:81:5a:bf:3e:40:a7:54:1c:02:
14:71:d4:58:fe:6d:49:2f:fa:71:11:90:63:e6:b4:
fa:0a:6c:12:ab:d9:fd:53:44:cc:77:fe:0e:58:bb:
1d:b6:6e:38:81:fa:af:ab:f3:b9:cb:76:30:84:25:
dc:42:5d:23:af:94:3a:4c:74:c8:20:48:3d:94:ce:
a9:d5:7e:fd:d7:13:8d:a1:34:98:5e:bf:96:40:83:
25:f2:62:c7:3b:fe:7a:f1:02:de:f7:01:e6:57:b6:
13:66:05:84:ef:40:5c:53:cc:cc:79:c5:b2:a5:e5:
03:7a:93:11:6d:6c:c3:fb:7a:b0:9e:f1:df:d6:b4:
93:25:23:c6:94:72:e7:2b:4f:52:db:b9:bc:fd:c4:
52:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FF:63:73:AF:03:43:C8:AA:E1:F5:85:B4:A8:6C:D9:FB:3B:EE:B7
X509v3 Authority Key Identifier:
keyid:D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:eb:58:44:82:b3:64:28:6e:08:c1:48:53:3b:28:c9:49:33:
b0:57:f1:24:e1:cf:03:93:93:6e:26:e9:cd:5e:f0:95:e6:80:
c6:48:b5:a8:e0:32:df:d7:80:2d:af:e3:ba:a5:22:4d:3c:ad:
a4:a6:3c:16:46:fa:85:1c:d1:a1:83:7f:6e:7f:e0:7e:4e:1f:
f7:3e:38:cf:52:c4:4a:22:bc:71:cd:63:51:98:7a:f1:eb:06:
c7:6d:43:61:26:f5:71:c5:a4:ca:e8:19:76:56:81:36:5c:3f:
93:45:ee:bd:50:41:e7:c9:5c:16:d6:18:69:35:d3:99:a6:72:
a6:47:0f:45:2f:b6:c9:1e:f6:b2:13:2d:10:30:30:cf:ee:47:
39:de:e1:84:b5:f1:11:9d:93:0e:84:09:82:09:31:e3:99:7b:
5e:de:e9:89:8a:c9:9b:09:08:0f:22:d2:56:01:b7:65:05:4a:
a2:b9:db:cb:1f:dd:31:86:6a:e2:4d:6a:af:04:a6:04:f0:b8:
28:98:2b:f3:16:96:b6:9f:d2:63:ef:d9:85:0a:c2:95:db:29:
12:d0:56:18:c4:23:97:c5:83:08:15:39:3a:d4:9a:e4:33:59:
ca:ae:1c:ad:4d:f7:94:32:03:b0:0b:87:64:b7:ce:33:82:a3:
80:e6:46:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:07 2026 by rpki-client