Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
File: 0o_L31cryvk-FUTeEKF2yzARBrs.mft (raw, json)
Hash identifier: f9yiohH6KAY7p9jukNfa0l1Num8jEvvWhz75jStAdrw=
Subject key identifier: F6:06:61:B8:7F:E7:C3:45:FE:7E:04:AC:42:E3:BC:FE:7D:9E:81:C4
Authority key identifier: D2:8F:CB:DF:57:2B:CA:F9:3E:15:44:DE:10:A1:76:CB:30:11:06:BB
Certificate issuer: /CN=d28fcbdf572bcaf93e1544de10a176cb301106bb
Certificate serial: 019D25F17EA53D99E751A874A05EFCEF1FAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
Manifest number: 1785
Signing time: Wed 25 Mar 2026 17:01:16 +0000
Manifest this update: Wed 25 Mar 2026 17:01:16 +0000
Manifest next update: Thu 26 Mar 2026 17:01:16 +0000
Files and hashes: 1: 0o_L31cryvk-FUTeEKF2yzARBrs.crl (hash: ZG4CA9GPhRFnffttSRqhb5WMl56dH3+M3fm/bkVych0=)
2: cjgT7b7LYeNp4gJNcn-t-JKsvkw.roa (hash: 8t1u0wHQqLOP5QRswUwGb0F26EqFaE1jpZ2Y496m/4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:7e:a5:3d:99:e7:51:a8:74:a0:5e:fc:ef:1f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d28fcbdf572bcaf93e1544de10a176cb301106bb
Validity
Not Before: Mar 25 17:01:16 2026 GMT
Not After : Mar 26 17:01:16 2026 GMT
Subject: CN=f60661b87fe7c345fe7e04ac42e3bcfe7d9e81c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a1:77:f4:bf:8a:44:20:1c:ae:75:32:a1:40:
f6:43:93:2d:b7:fd:2d:96:47:d5:97:e1:f3:54:02:
08:c1:71:5e:45:19:da:70:e5:fa:61:ce:01:2f:47:
b1:2c:1d:d7:91:21:07:6b:ad:bb:ea:0f:56:5e:31:
e3:d2:5e:87:5c:6b:d1:87:a0:36:cb:ca:24:04:12:
b7:31:d9:65:66:34:4e:5b:a0:12:16:11:b7:a6:6e:
a1:91:0e:43:a5:92:c4:e8:dc:7a:a0:6c:e6:63:3a:
3c:18:28:f7:65:28:d9:4a:ef:ab:c2:a4:45:ae:60:
6d:31:58:ef:cd:cd:28:2d:21:00:85:80:d9:f4:4a:
5b:b6:15:36:8a:26:17:33:b2:9a:9b:41:bf:0a:11:
9a:8c:58:40:7e:a6:ff:ac:b3:27:96:43:20:49:e9:
4d:95:b0:b9:8f:42:89:29:d3:6f:49:fd:f5:de:f6:
d1:62:c3:d5:9f:a6:ee:6e:de:d8:e9:4a:e8:cf:f4:
8c:d4:45:22:cb:a1:12:4a:8a:34:da:ba:8b:f3:04:
a3:14:d1:af:c5:0f:09:9a:04:20:63:99:cf:a4:56:
ac:08:9f:00:2d:3f:fd:b4:ed:21:d9:13:28:26:7e:
3d:d7:51:f1:6f:5c:6e:b5:4e:24:7e:5c:d6:31:1f:
0c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:06:61:B8:7F:E7:C3:45:FE:7E:04:AC:42:E3:BC:FE:7D:9E:81:C4
X509v3 Authority Key Identifier:
keyid:D2:8F:CB:DF:57:2B:CA:F9:3E:15:44:DE:10:A1:76:CB:30:11:06:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:ba:94:e5:60:89:14:82:be:84:f6:35:5c:43:5d:97:84:80:
d9:4f:ff:e2:a6:de:0c:0f:13:58:b4:df:cb:7e:30:67:aa:50:
51:e0:5a:50:07:af:8b:fa:7f:11:fc:ec:53:44:d8:81:f6:4d:
d9:9b:35:53:f5:7c:cd:4d:eb:b3:17:10:5e:41:b8:2f:61:d9:
7e:77:04:c4:ba:40:52:24:97:20:5c:d0:b7:be:b4:51:01:ee:
87:de:34:91:eb:5b:db:e5:5e:a3:4b:02:2b:5f:28:40:7e:83:
1d:6c:83:b8:ab:e7:9e:9e:9b:3b:fd:ca:c3:4e:e1:ca:7d:07:
25:ec:a1:8d:7c:cf:e4:cf:39:15:7b:48:bd:1d:8f:44:68:5f:
16:ea:57:6b:59:d9:e9:98:8b:91:f5:91:d2:58:f3:b4:57:f9:
c4:26:92:e9:10:83:30:6d:19:6b:28:19:aa:7d:14:0f:99:dc:
92:89:1a:fb:5b:b8:ef:26:c1:e8:ba:3e:cc:c8:da:35:22:c6:
9f:cf:c7:28:21:ac:42:a5:e2:40:fe:d4:5c:93:84:bc:e1:73:
ed:30:9c:dd:1b:c3:39:75:76:f7:43:84:d5:2f:52:bc:1b:dd:
4d:06:e9:8c:01:18:b0:cb:d7:95:5b:a9:48:be:be:82:6c:d3:
63:30:f9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:00:10 2026 by rpki-client