Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
File: 0nuHf4mTQSab7GfG46CoiLp66Y0.mft (raw, json)
Hash identifier: QN8T2j1SFVWiHbbpJ/Fu+H/cO3SvpzMZ3YWmWYw3utQ=
Subject key identifier: DE:8A:91:F3:D8:75:0D:E6:30:ED:99:74:21:3D:DD:2E:83:05:47:0B
Authority key identifier: D2:7B:87:7F:89:93:41:26:9B:EC:67:C6:E3:A0:A8:88:BA:7A:E9:8D
Certificate issuer: /CN=d27b877f899341269bec67c6e3a0a888ba7ae98d
Certificate serial: 019D27E03D986240137000BED94DF5CD39FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
Manifest number: 0C8C
Signing time: Thu 26 Mar 2026 02:01:40 +0000
Manifest this update: Thu 26 Mar 2026 02:01:40 +0000
Manifest next update: Fri 27 Mar 2026 02:01:40 +0000
Files and hashes: 1: 0nuHf4mTQSab7GfG46CoiLp66Y0.crl (hash: y9IZzkA1YvuO4DKzkE1yatpM+qzRT95vu1nwvgjZGT0=)
2: ESKSicApbc_Lc7K1oxfrHyvWB2A.roa (hash: 9hp563pGKax4wS0ioE86wmQq8LK8c0yOcQLKfH9tKgk=)
3: GzzDQC3ubi3zt1X18DBGioGRdBc.roa (hash: D/wNKKfIUY9J0S4B/WgJwAFtRjUwUsHpDQtQvyp4Lvk=)
4: a8xxFezDGCmHsEOSRqb1XFyjzzQ.roa (hash: UKvCG+Ut498aH2KrK/T04+U4clxpUw2ygew8dg+YGZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:3d:98:62:40:13:70:00:be:d9:4d:f5:cd:39:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d27b877f899341269bec67c6e3a0a888ba7ae98d
Validity
Not Before: Mar 26 02:01:40 2026 GMT
Not After : Mar 27 02:01:40 2026 GMT
Subject: CN=de8a91f3d8750de630ed9974213ddd2e8305470b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:14:56:f1:87:29:21:ef:cb:5c:ab:69:c1:87:
b2:a0:fa:94:ce:f1:29:e2:d1:be:fd:41:93:94:68:
b5:28:cd:95:86:fa:a9:23:05:58:a6:15:18:a3:a2:
d7:18:cd:03:92:48:66:2b:3c:b9:bf:b0:7d:b4:9e:
2e:6c:87:64:67:30:3c:0d:ec:aa:ed:91:f8:7d:d3:
29:fa:88:c1:aa:d2:07:07:ee:35:bd:62:58:69:ad:
b4:22:2b:b5:70:4f:1d:41:25:3c:e9:57:8d:83:32:
6a:4a:02:4f:34:de:ca:d6:49:07:4a:e7:87:30:59:
c2:3c:ad:c7:43:30:e3:57:f6:ad:15:7a:bd:a0:3d:
3a:42:b6:d0:3a:00:7b:9c:6d:64:2a:e0:4e:70:0b:
49:50:ea:bb:9d:5f:93:e7:6a:c7:bb:1c:2f:df:99:
8c:46:ec:a9:4d:3b:30:f3:cc:a2:22:53:02:2e:2e:
77:12:a0:b7:97:2b:e5:5f:6c:25:bb:a5:70:af:3b:
95:ba:a2:35:5f:37:a9:3a:ca:2d:a8:9d:62:97:e5:
65:4b:13:56:ad:52:f3:8a:2d:48:b9:b8:3a:5a:1b:
d8:eb:e4:99:fd:ad:05:a0:c4:68:21:1f:8e:fc:31:
3d:4c:bf:51:20:02:61:80:b2:62:a4:07:a8:28:ea:
27:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:8A:91:F3:D8:75:0D:E6:30:ED:99:74:21:3D:DD:2E:83:05:47:0B
X509v3 Authority Key Identifier:
keyid:D2:7B:87:7F:89:93:41:26:9B:EC:67:C6:E3:A0:A8:88:BA:7A:E9:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:3f:4f:aa:90:26:5c:e5:81:ba:e8:51:11:e9:a3:45:4c:44:
35:d9:59:f4:90:91:ae:b5:7b:7d:23:e7:6b:fa:cf:6d:e0:d5:
12:82:9e:5a:d0:86:b3:ff:9f:15:6d:8b:f8:6b:f5:10:fe:e9:
77:24:a9:0f:28:bb:ec:64:24:e4:7d:92:ce:61:15:5a:ea:91:
15:f7:c3:a7:55:d4:a2:01:ac:e0:b1:e1:35:50:48:7c:7d:64:
6a:88:f0:f6:05:df:2b:94:9f:1c:9f:2d:f9:1d:4f:91:5a:05:
ce:6c:b2:b3:9f:cb:46:9b:c2:bc:31:04:bd:43:36:2e:b2:84:
2e:4f:79:b2:97:40:7a:4e:b1:49:a9:b2:36:4d:9f:96:2a:20:
23:7e:69:d8:96:71:0f:7b:45:88:84:5f:69:fd:09:8e:f3:f2:
bf:0f:16:77:2a:01:b3:36:42:58:2d:40:3f:94:a1:7b:44:07:
28:5b:84:af:93:67:2e:ab:4c:12:92:72:58:9e:1e:1a:e5:76:
0e:c1:39:30:d1:45:81:04:28:e8:fc:0f:1a:26:35:a1:e9:02:
ec:28:12:87:47:5b:f7:76:34:65:c8:77:c2:0e:77:49:7e:d3:
72:8a:85:24:7c:b8:bd:7f:7c:68:81:c6:54:26:4a:13:de:61:
8e:c3:b5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:33:38 2026 by rpki-client