
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
File: 0luQuJgbWR11p-k14TBKdAdWAv0.mft (raw, json)
Hash identifier: 5ma80IJFccelFin3bUPINYlsTtqGn6jUQS3EzrmfSWo=
Subject key identifier: EA:BF:FB:EB:61:60:C0:6C:7A:9A:C2:BF:74:D7:89:A7:0C:28:98:81
Authority key identifier: D2:5B:90:B8:98:1B:59:1D:75:A7:E9:35:E1:30:4A:74:07:56:02:FD
Certificate issuer: /CN=d25b90b8981b591d75a7e935e1304a74075602fd
Certificate serial: 019D265F85B58F51A79620F766686E19151C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
Manifest number: 1760
Signing time: Wed 25 Mar 2026 19:01:27 +0000
Manifest this update: Wed 25 Mar 2026 19:01:27 +0000
Manifest next update: Thu 26 Mar 2026 19:01:27 +0000
Files and hashes: 1: 0luQuJgbWR11p-k14TBKdAdWAv0.crl (hash: Npp/jCBeVW7osReW4ExFWiWqi7aHeriwp7FqKM4Burc=)
2: PzBJvCvuKoLcfTByzdz7KrKT9g0.roa (hash: 3oZ6E/qyPFCkNxJX9IOFDQ5m/aqdqH2CkJ/hq3ptHGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:85:b5:8f:51:a7:96:20:f7:66:68:6e:19:15:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25b90b8981b591d75a7e935e1304a74075602fd
Validity
Not Before: Mar 25 19:01:27 2026 GMT
Not After : Mar 26 19:01:27 2026 GMT
Subject: CN=eabffbeb6160c06c7a9ac2bf74d789a70c289881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:db:01:f0:5c:55:14:aa:a2:32:97:9a:d8:3c:
48:e2:27:10:9a:f2:95:22:f9:14:78:e4:36:94:83:
cf:9f:1c:e8:92:dc:be:6c:7e:b2:5d:57:85:46:10:
46:c6:df:07:1a:9b:46:5a:e4:21:87:f9:92:0e:75:
c3:50:c1:c5:3e:6c:87:9c:f8:58:b5:ae:dd:dd:f9:
f4:6b:8b:45:7d:1a:fc:8c:c1:2e:c9:38:6e:be:1e:
af:8b:77:b1:bf:a5:9a:75:27:3f:9c:b7:e7:8b:56:
48:e0:d6:34:84:9e:2f:a1:d8:71:c4:a7:d7:fa:82:
6d:6a:3d:4c:f5:58:3c:6d:68:4d:de:a8:62:5a:aa:
e1:7a:11:56:46:07:e8:d7:17:de:b3:d5:2a:14:06:
52:11:3f:af:ba:bc:50:aa:62:a5:e0:0e:68:8d:45:
6e:cf:af:c1:41:58:14:c5:d7:4d:2a:0e:94:ae:cb:
be:29:ce:08:0f:20:6a:cd:c9:7d:3e:bc:ba:d4:8f:
d5:15:69:0f:0d:f4:c0:8a:3d:57:48:5b:91:61:cd:
2e:49:eb:f4:5b:4d:ae:50:d7:61:3d:b0:a0:d8:ab:
be:1e:53:4a:b4:c3:02:fe:32:ab:bb:4f:68:bd:c1:
6e:ba:3a:b3:dd:ce:c9:e5:9c:ec:b8:92:6c:51:5c:
50:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BF:FB:EB:61:60:C0:6C:7A:9A:C2:BF:74:D7:89:A7:0C:28:98:81
X509v3 Authority Key Identifier:
keyid:D2:5B:90:B8:98:1B:59:1D:75:A7:E9:35:E1:30:4A:74:07:56:02:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:9e:64:4e:2e:84:dc:7a:44:73:12:48:33:66:be:5a:aa:22:
e3:bf:95:13:f8:44:a8:ae:5b:84:81:bd:5b:7e:09:f6:61:c1:
2e:33:9d:20:55:89:7d:f4:9b:9f:b6:c3:87:48:a1:87:8c:2c:
dc:5d:8c:97:b4:36:3f:7d:1c:0b:47:3c:25:18:d9:cd:b1:a6:
e7:e6:61:41:71:6e:66:9c:ed:5a:06:52:fe:98:a7:2f:41:8c:
3b:ac:a8:4f:8c:a0:53:84:2a:72:1d:94:7f:30:9c:7a:0a:d6:
8d:af:09:44:c4:b0:de:7e:f0:13:42:74:17:f1:79:99:63:f4:
2f:2d:4f:87:e5:fe:ad:57:56:bb:60:5e:dd:01:f9:92:16:6e:
3f:7c:b3:c2:2f:f5:b9:54:65:ef:e0:60:27:1e:85:f6:59:9b:
25:d7:8c:0d:19:fd:fb:c3:c3:7c:07:77:f1:11:4d:a5:ba:2e:
cb:58:2c:dc:81:53:95:8b:48:19:74:a4:84:d5:52:0d:da:1a:
c9:c1:22:11:68:9c:a8:29:1e:c4:63:ae:f4:f2:83:5c:bf:fd:
d3:68:89:83:b9:40:ab:c7:7e:5f:10:80:1a:0b:26:6d:f3:0f:
66:16:53:af:ba:f6:3a:6c:a7:9b:1e:ff:5a:21:3d:7b:71:3e:
36:0a:1e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:00:22 2026 by rpki-client