Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/0WkNdbRvruYmp5o7Dn32tqcj8yk.mft
File: 0WkNdbRvruYmp5o7Dn32tqcj8yk.mft (raw, json)
Hash identifier: 6EW/NbM1tk3fcaa7xC9YS8YtaaCzaqNijCHwBBWDau4=
Subject key identifier: D3:CD:D0:8C:4C:17:BA:87:84:97:AB:3D:83:D9:19:18:12:C8:52:F5
Authority key identifier: D1:69:0D:75:B4:6F:AE:E6:26:A7:9A:3B:0E:7D:F6:B6:A7:23:F3:29
Certificate issuer: /CN=d1690d75b46faee626a79a3b0e7df6b6a723f329
Certificate serial: 019D2A049ECF498E2740F55F65E7C11C45AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WkNdbRvruYmp5o7Dn32tqcj8yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/0WkNdbRvruYmp5o7Dn32tqcj8yk.mft
Manifest number: 16
Signing time: Thu 26 Mar 2026 12:00:38 +0000
Manifest this update: Thu 26 Mar 2026 12:00:38 +0000
Manifest next update: Fri 27 Mar 2026 12:00:38 +0000
Files and hashes: 1: 0WkNdbRvruYmp5o7Dn32tqcj8yk.crl (hash: iHQlXO49kI7hZWk1Kbn/71ATKypzZ54QvoOz70a7Ddk=)
2: 1-yp1lR1t9CHfuX3rrZ9tBUSW6YU.roa (hash: ysaq9zqofJGOE0NIkNp0CsTNypyLgdEzk9CWYMwusP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/0WkNdbRvruYmp5o7Dn32tqcj8yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/0WkNdbRvruYmp5o7Dn32tqcj8yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WkNdbRvruYmp5o7Dn32tqcj8yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:9e:cf:49:8e:27:40:f5:5f:65:e7:c1:1c:45:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1690d75b46faee626a79a3b0e7df6b6a723f329
Validity
Not Before: Mar 26 12:00:38 2026 GMT
Not After : Mar 27 12:00:38 2026 GMT
Subject: CN=d3cdd08c4c17ba878497ab3d83d9191812c852f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ed:43:e4:a5:0f:4f:af:a3:ff:48:7e:73:5b:
f3:e0:79:64:76:92:0f:8c:82:b6:04:b9:6a:51:a7:
5e:50:96:3f:2a:b3:2e:51:2f:f2:07:e0:31:3f:dd:
d5:43:6f:d6:9c:a5:de:15:63:68:63:7d:1c:6a:38:
45:5c:e9:a9:d3:dd:0b:72:ac:5a:f6:c4:59:b1:0d:
f7:e5:78:68:2b:5c:b5:4d:6d:8d:9f:1a:f0:07:34:
78:a8:55:37:79:23:a6:58:56:77:a8:03:11:61:61:
26:28:fb:51:6d:ac:e6:fd:f7:f9:09:7b:b5:21:6b:
fc:e9:1e:ce:6d:89:3d:fa:39:4b:4d:38:e2:01:05:
0b:0c:79:8c:09:14:2d:4c:55:a2:6a:4c:e0:03:6f:
a2:01:2f:14:12:e0:13:f6:d7:a3:88:f8:fc:cb:c6:
4c:bd:ec:95:53:be:f3:1c:0d:c8:7a:0c:6f:60:1c:
c6:9f:22:bb:46:b9:3a:64:38:c0:03:1a:2c:fd:71:
56:05:23:21:2e:d8:76:b6:de:7d:c9:d4:e5:62:c1:
be:ca:98:3a:95:1e:05:12:ec:9c:c7:d9:47:f7:bd:
97:f2:45:a5:06:a1:da:bb:3d:41:b5:00:2c:7d:f8:
1a:35:ad:e8:7a:1d:55:5b:aa:a3:45:d3:9b:c6:80:
fc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CD:D0:8C:4C:17:BA:87:84:97:AB:3D:83:D9:19:18:12:C8:52:F5
X509v3 Authority Key Identifier:
keyid:D1:69:0D:75:B4:6F:AE:E6:26:A7:9A:3B:0E:7D:F6:B6:A7:23:F3:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WkNdbRvruYmp5o7Dn32tqcj8yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/0WkNdbRvruYmp5o7Dn32tqcj8yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/0WkNdbRvruYmp5o7Dn32tqcj8yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:80:93:b4:58:b4:09:20:72:c7:cb:c3:e5:3c:42:cb:4a:6f:
00:53:f0:5e:fa:1b:2a:f3:b9:47:ce:9f:8d:23:29:9a:e9:f2:
cb:56:64:32:a7:fa:82:f1:46:7d:e0:96:6d:8b:73:00:3b:24:
49:b3:5e:44:21:0a:ab:4e:bb:e9:d4:40:03:08:65:73:61:54:
30:fa:6d:c1:88:eb:07:60:96:ad:c1:85:c3:f6:f0:71:9f:19:
86:c2:92:af:3b:15:67:f0:71:04:5a:6a:22:6d:cf:81:1f:61:
cc:51:be:03:b8:6c:1d:91:b3:d9:22:0c:34:dd:88:24:10:78:
00:48:5d:6d:d3:8a:79:6d:46:68:e8:c9:ca:72:a2:92:c1:60:
7d:58:67:ff:14:9c:f3:3e:1b:ec:93:97:74:ae:c8:49:ae:bd:
cf:d0:b4:1b:c2:5a:b8:30:85:b9:ae:5c:12:77:c8:48:7c:b6:
4e:64:4f:f4:2f:ef:64:31:b2:42:31:3b:e9:e1:94:2d:68:5b:
f1:c5:9d:04:bd:f7:76:de:f6:c9:af:b8:83:17:cd:be:f9:9b:
86:95:c0:85:f3:bc:fd:82:38:53:a6:33:f0:2e:7d:c2:ca:53:
5a:b7:b6:1d:fb:d2:2d:d2:2d:72:74:f3:51:60:2e:b2:95:a1:
a8:f7:4f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:13:33 2026 by rpki-client