Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
File: 0cSRMJSiEmjHOmdlOjc41z5cWac.mft (raw, json)
Hash identifier: V2NUO1VSgY+C4BPlOG0sgGTCYkyOatIlR6wCdT+kQIo=
Subject key identifier: 1F:56:7A:50:9B:E3:3D:5D:9C:25:25:3D:DF:2C:5B:97:BD:21:15:CB
Authority key identifier: D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
Certificate issuer: /CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Certificate serial: 019D389C3491AF053798BB114A701497F63C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
Manifest number: 1769
Signing time: Sun 29 Mar 2026 08:00:54 +0000
Manifest this update: Sun 29 Mar 2026 08:00:54 +0000
Manifest next update: Mon 30 Mar 2026 08:00:54 +0000
Files and hashes: 1: 0cSRMJSiEmjHOmdlOjc41z5cWac.crl (hash: 2mzIoJoM86ntyLFzXX22lHjHnykODXjUVJhdrkqKmzE=)
2: ZjZpopADEszQ-pk8iJcM4buK_Vk.roa (hash: kT/wMhqwMSPuX9SvpMfdYohIGO0Je1OedjWoKvA8CNs=)
3: jyVGCyGgEBWJDHp2JEn0ylLOQpw.roa (hash: Z172Tcqn6RnvzWrlqa5fx4IBPek1nFPjcCRMXGw3qXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:34:91:af:05:37:98:bb:11:4a:70:14:97:f6:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Validity
Not Before: Mar 29 08:00:54 2026 GMT
Not After : Mar 30 08:00:54 2026 GMT
Subject: CN=1f567a509be33d5d9c25253ddf2c5b97bd2115cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cf:6d:46:be:10:d2:8a:ef:51:59:5b:96:70:
db:dc:04:1a:1a:a9:7d:b4:5a:76:0b:db:bb:67:91:
7d:d2:54:7d:1d:ff:9b:14:be:33:6e:90:d9:54:6e:
66:83:28:6b:6e:c4:f9:ae:f4:37:ca:42:3c:35:cc:
e8:ca:31:c7:89:a2:db:ab:62:87:86:fd:a4:b8:7d:
6f:2d:0b:3b:22:d2:94:8e:1e:31:63:d7:7d:27:32:
d4:52:77:60:37:7f:74:fb:c3:3b:bd:75:44:ee:40:
3a:41:bb:c5:dc:d8:9b:d1:0f:33:50:10:0a:19:80:
46:55:09:76:ce:7a:b7:25:64:27:6f:ad:c3:39:0d:
f4:dd:a8:77:2a:50:ec:c5:62:8d:18:4e:75:81:53:
cb:03:43:76:eb:63:84:88:92:42:7d:5a:ca:f7:aa:
10:84:52:e2:4a:71:80:e9:72:3b:13:7e:69:b8:5a:
43:a0:e8:f7:16:9d:89:98:11:aa:6e:61:97:5c:99:
9c:55:da:a0:52:79:50:c7:72:d0:9d:77:34:b0:45:
7c:c3:30:89:34:1e:5d:8d:08:3b:b8:3e:2b:e1:8b:
99:19:cc:46:b7:06:e1:68:77:dc:2a:3f:b5:22:23:
39:72:10:cf:4e:af:17:54:d0:4e:78:a4:c4:56:2e:
95:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:56:7A:50:9B:E3:3D:5D:9C:25:25:3D:DF:2C:5B:97:BD:21:15:CB
X509v3 Authority Key Identifier:
keyid:D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:cf:7f:56:0f:b9:89:96:c8:c9:f7:1a:69:a1:86:29:2e:a1:
e0:a2:ab:c3:3c:62:39:b8:af:30:a4:33:e0:70:1a:3f:80:36:
c8:16:50:9c:a3:42:b2:bd:6b:77:6e:14:9e:d3:0e:47:9c:39:
bd:ee:5b:68:e0:05:43:49:86:99:93:c9:3d:0b:00:74:3f:09:
2f:6c:8b:a9:72:29:4a:a2:bf:6c:f0:8a:6b:bb:a7:2e:fe:67:
42:1d:ed:6b:1c:88:8e:f5:1d:cb:37:45:7f:ab:ad:8a:46:9d:
12:b9:0c:0f:c6:e8:81:c7:94:19:14:f4:8a:77:8a:05:d8:1b:
0d:7a:89:cf:b7:23:e7:73:5b:90:3a:fc:05:b3:e6:33:e5:6f:
a1:93:8e:e0:5f:9d:3d:a6:87:5c:e6:93:be:cc:3f:c8:40:95:
fd:9b:71:bc:aa:bd:f2:8d:a4:74:d4:c3:d5:1f:47:68:82:4e:
4d:95:b1:b8:58:ba:e0:5f:53:b7:0c:8f:4d:3b:94:c8:c7:77:
41:39:fe:71:85:15:d8:89:c9:88:c4:a6:ed:d2:ed:d4:d3:37:
86:35:f4:b2:4e:7d:44:f6:8b:ca:d3:c7:ce:2d:66:54:4b:74:
82:2e:e4:57:74:eb:4c:2e:3f:4e:d2:73:b6:b7:04:09:d3:33:
2e:59:78:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:28 2026 by rpki-client