Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
File: 0vHIhC58-JGyNNOh4OLg73PoQqo.mft (raw, json)
Hash identifier: GhO/YUufFnA3TyJASrs+zVm51Pio/qZ/xbpYFrUNULw=
Subject key identifier: 3A:AD:68:9B:CF:7D:FF:15:AB:4D:D8:7E:BD:AA:7D:11:C4:79:D6:2C
Authority key identifier: D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
Certificate issuer: /CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Certificate serial: 019D390A20103178AAAF24338A294BB8A166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 10:00:58 +0000
Manifest this update: Sun 29 Mar 2026 10:00:58 +0000
Manifest next update: Mon 30 Mar 2026 10:00:58 +0000
Files and hashes: 1: 0vHIhC58-JGyNNOh4OLg73PoQqo.crl (hash: AtDP156Aq9cQrmSMicUuuXqudUJgxwBBrH9nhc1qGDU=)
2: l9fT_tPQilc8kDDpXdmC63EbBTU.roa (hash: e0hhcAS9+zmOEL/7aF5yJ1rOw5m87GlUo2fUEzHI/tc=)
3: zZqdbpX91TjBbrVKBU--OsfsNgs.roa (hash: 5bqwY0fuE7qADoXdmI9CeMVMqqLQteAK+rBOtRg2eMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:20:10:31:78:aa:af:24:33:8a:29:4b:b8:a1:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Validity
Not Before: Mar 29 10:00:58 2026 GMT
Not After : Mar 30 10:00:58 2026 GMT
Subject: CN=3aad689bcf7dff15ab4dd87ebdaa7d11c479d62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7f:0d:47:7f:d8:8d:49:1c:1c:32:86:31:eb:
d5:d4:6c:d7:da:f0:fa:aa:11:f5:b6:3b:17:43:ca:
1a:ef:6b:25:66:cd:4e:87:a7:92:0f:a5:55:e0:bf:
4b:eb:2b:64:dc:fc:5c:4b:39:07:d7:ee:2c:c9:ba:
da:fe:d8:33:ee:f6:1b:95:d3:c4:c7:83:61:c7:7c:
64:9f:b9:a5:79:94:a7:75:cf:f0:06:e2:11:5a:54:
40:aa:e0:3b:af:8c:bc:56:aa:db:9e:67:35:c8:b4:
9f:bd:14:38:83:31:08:15:8f:d9:dc:99:1c:97:66:
76:dc:84:ea:16:f2:b4:42:0e:79:dd:a3:33:23:61:
3e:45:11:cf:91:64:a0:f9:e7:bb:b8:d6:28:f9:04:
b9:b9:ec:2c:c0:db:09:9e:7d:fd:3d:49:68:36:6f:
1d:e1:06:33:e2:22:35:14:07:59:24:08:fb:5c:d8:
79:6e:2f:f3:d4:6c:82:e6:5a:38:2f:d7:1e:8a:84:
21:1c:db:2a:b1:64:55:a4:f3:82:6b:98:fd:20:b1:
1b:c1:58:83:4b:72:d4:53:55:4b:31:66:68:ae:9e:
40:6e:57:48:73:23:30:ea:e7:e6:ec:fd:25:64:c0:
48:df:cf:ca:b9:db:e5:2e:fe:1f:46:80:1d:63:47:
e5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AD:68:9B:CF:7D:FF:15:AB:4D:D8:7E:BD:AA:7D:11:C4:79:D6:2C
X509v3 Authority Key Identifier:
keyid:D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:0c:89:4e:c0:c6:ad:1f:9e:76:d3:9d:26:6f:44:af:c3:c9:
10:e7:22:0a:09:7d:79:2f:42:b6:70:8a:6d:c8:b1:6d:7d:01:
75:5b:7f:c0:c5:6c:2d:84:3f:95:37:54:63:31:5f:f2:75:9c:
12:49:89:03:16:45:41:d3:c8:04:29:6e:f4:c4:84:d3:a5:16:
38:a5:44:5c:ec:25:83:17:8e:4c:17:24:d3:43:07:1d:be:b1:
4f:46:bd:22:9a:ab:2f:2d:c9:40:05:5f:36:18:3d:2a:d5:48:
03:34:c6:5d:f8:59:33:e6:8e:5c:21:33:f3:5e:52:10:ac:b4:
ed:35:67:16:22:bc:85:55:5d:09:f9:9d:68:d2:0a:df:41:ee:
1e:25:7f:1f:93:4b:f6:47:f0:d8:63:bc:9b:50:7a:e3:63:de:
5e:84:59:ee:62:9e:09:3b:57:e3:be:c0:98:9b:a3:d9:c2:84:
de:e0:86:c7:24:25:c2:a7:3e:ac:6f:61:49:43:f8:41:d2:a1:
d7:16:ec:5e:4d:83:d1:2e:15:90:d2:aa:76:de:cf:66:27:56:
8e:1e:42:46:cf:a4:32:c3:95:c8:57:1e:78:f4:a9:eb:10:a3:
18:9e:c7:a8:53:3c:2d:2f:19:15:bb:3b:38:b0:dd:ca:bf:6d:
14:7d:0f:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CiAQMXiqryQziilLuKFmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZjFjODg0MmU3Y2Y4OTFiMjM0ZDNhMWUwZTJlMGVmNzNl
ODQyYWEwHhcNMjYwMzI5MTAwMDU4WhcNMjYwMzMwMTAwMDU4WjAzMTEwLwYDVQQD
EygzYWFkNjg5YmNmN2RmZjE1YWI0ZGQ4N2ViZGFhN2QxMWM0NzlkNjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzH8NR3/YjUkcHDKGMevV1GzX2vD6
qhH1tjsXQ8oa72slZs1Oh6eSD6VV4L9L6ytk3PxcSzkH1+4sybra/tgz7vYbldPE
x4Nhx3xkn7mleZSndc/wBuIRWlRAquA7r4y8Vqrbnmc1yLSfvRQ4gzEIFY/Z3Jkc
l2Z23ITqFvK0Qg553aMzI2E+RRHPkWSg+ee7uNYo+QS5uewswNsJnn39PUloNm8d
4QYz4iI1FAdZJAj7XNh5bi/z1GyC5lo4L9ceioQhHNsqsWRVpPOCa5j9ILEbwViD
S3LUU1VLMWZorp5AbldIcyMw6ufm7P0lZMBI38/KudvlLv4fRoAdY0fljQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqtaJvPff8Vq03Yfr2qfRHEedYsMB8GA1UdIwQY
MBaAFNLxyIQufPiRsjTToeDi4O9z6EKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHZISWhDNTgtSkd5Tk5PaDRPTGc3M1BvUXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jOTlhZTctYjY3MS00MGI5LWJiMWUt
YTE5NDQ0ZjdhMzM3LzEvMHZISWhDNTgtSkd5Tk5PaDRPTGc3M1BvUXFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9jOTlhZTctYjY3MS00MGI5LWJiMWUtYTE5NDQ0ZjdhMzM3
LzEvMHZISWhDNTgtSkd5Tk5PaDRPTGc3M1BvUXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVgyJTsDG
rR+edtOdJm9Er8PJEOciCgl9eS9CtnCKbcixbX0BdVt/wMVsLYQ/lTdUYzFf8nWc
EkmJAxZFQdPIBClu9MSE06UWOKVEXOwlgxeOTBck00MHHb6xT0a9IpqrLy3JQAVf
Nhg9KtVIAzTGXfhZM+aOXCEz815SEKy07TVnFiK8hVVdCfmdaNIK30HuHiV/H5NL
9kfw2GO8m1B642PeXoRZ7mKeCTtX477AmJuj2cKE3uCGxyQlwqc+rG9hSUP4QdKh
1xbsXk2D0S4VkNKqdt7PZidWjh5CRs+kMsOVyFceePSp6xCjGJ7HqFM8LS8ZFbs7
OLDdyr9tFH0PZg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:38 2026 by rpki-client