Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
File: 0i870LrmA6t5BgKpa7vEK1Mi6I8.mft (raw, json)
Hash identifier: 5/2KnXIR2kEazSTkTNPvwwYfVuQecLlyCXOv/zAFFMs=
Subject key identifier: 8C:C7:90:54:37:57:21:57:99:21:49:5C:2F:69:23:3C:FB:08:E0:5D
Authority key identifier: D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
Certificate issuer: /CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
Certificate serial: 019D28F32A214AAD6DAF81F11DFD75436479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
Manifest number: 0F07
Signing time: Thu 26 Mar 2026 07:01:57 +0000
Manifest this update: Thu 26 Mar 2026 07:01:57 +0000
Manifest next update: Fri 27 Mar 2026 07:01:57 +0000
Files and hashes: 1: 0i870LrmA6t5BgKpa7vEK1Mi6I8.crl (hash: ZJIgeuIW2DhnD4x71gsZej4Svll3R/9Hcikfbg7fncE=)
2: 8YQYzkkWSUbJ3UPPymYSW914MMg.roa (hash: 9lvLYcAIuT8e6AK3a0cVw0sCFSHzJhGpdm+DyXOpWt0=)
3: 96-EzPJNO2K_r89WsSa8F4wKfII.roa (hash: TgdBDufBqmIta91fueVV5ENNB6Zw3/BojYphtII6yZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:2a:21:4a:ad:6d:af:81:f1:1d:fd:75:43:64:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
Validity
Not Before: Mar 26 07:01:57 2026 GMT
Not After : Mar 27 07:01:57 2026 GMT
Subject: CN=8cc79054375721579921495c2f69233cfb08e05d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9b:23:41:36:a6:0e:05:df:5f:b7:6c:22:1a:
9c:ee:80:97:71:8b:b0:48:9a:37:c6:42:20:3c:38:
21:72:2f:27:cd:34:a2:e1:67:91:7f:6d:f3:cc:54:
1e:44:cb:49:bf:e6:db:d6:10:84:b4:df:bd:e4:b2:
2f:5c:a5:9d:13:67:b6:3a:e5:2c:bf:66:09:54:1b:
07:b3:1d:0c:6c:e5:b2:b7:39:d8:45:cc:09:ec:95:
8b:92:c1:73:b4:04:7f:3a:c6:c0:39:5c:fc:f6:90:
c4:6c:60:22:56:a0:2b:93:e0:df:ef:fb:94:e4:44:
07:d0:3f:15:af:ed:d7:e1:c1:7a:c5:ac:67:af:6b:
b9:c1:49:73:7d:58:01:c1:7c:57:f4:f1:e8:15:ea:
3e:10:51:8c:3d:e3:9f:59:56:d1:27:08:45:5c:3c:
e7:ff:22:30:95:d0:35:16:ad:37:0b:fa:38:d2:e8:
73:bc:97:f6:63:38:57:22:91:f8:61:73:b2:36:f8:
df:79:30:d7:bb:1c:e0:f5:68:d0:c2:85:fc:f9:e2:
74:b0:20:a9:34:e5:fc:d0:65:62:1a:06:f8:6e:c6:
7d:b0:50:ca:bc:53:56:22:ed:6b:98:6f:78:84:77:
e8:4d:8d:63:4e:67:7c:1a:8e:7d:b3:7f:24:e4:6a:
c8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C7:90:54:37:57:21:57:99:21:49:5C:2F:69:23:3C:FB:08:E0:5D
X509v3 Authority Key Identifier:
keyid:D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:67:13:e3:37:37:d5:06:7f:4b:38:37:49:6c:f5:67:09:31:
df:7a:5b:c9:be:3e:86:e3:0f:45:23:e7:a8:77:0e:55:5f:88:
b4:bb:b0:b6:c4:eb:b7:ab:ca:c4:84:5b:f2:10:0c:99:2e:99:
fc:2f:ee:38:16:79:27:be:ba:27:01:7d:c4:c8:6f:88:ba:74:
26:46:c2:de:1a:16:e9:11:7e:91:ea:f9:81:9a:7f:bd:7d:7d:
c7:07:a4:3a:1d:1d:2d:41:f4:a7:4a:b7:d8:b9:95:19:a3:5f:
3a:cc:36:a1:54:0f:21:0a:cb:af:0e:b8:72:5a:00:2a:a7:3a:
fa:9a:70:07:3d:08:23:ee:4c:da:95:2a:e2:8d:4a:72:b6:06:
1b:ac:a3:59:c1:fe:96:36:d5:4d:8c:af:a2:3d:38:7f:a6:ff:
31:a5:98:87:37:54:8a:54:16:99:78:b2:93:95:03:59:09:5d:
69:3d:bd:d8:7f:c1:85:ce:9d:36:19:4f:73:c9:46:cf:92:32:
e5:39:0d:39:e1:2e:35:33:50:dc:df:a9:28:1a:ce:5a:c7:4b:
01:39:57:da:3f:b5:e5:24:38:8a:c1:6c:20:b2:d5:a3:8b:20:
7d:fc:b7:ce:42:71:31:32:65:0d:ec:97:79:d7:ec:a8:59:75:
2e:86:92:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:08:51 2026 by rpki-client