Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
File: 0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft (raw, json)
Hash identifier: M4KAT/2ewaEtDfJ4tACO8i0samyy4bVnkMEN1afGBCI=
Subject key identifier: 19:F7:9F:D6:ED:A0:F6:F9:42:BB:A3:B6:4F:9F:02:B7:9B:82:CD:45
Authority key identifier: D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06
Certificate issuer: /CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06
Certificate serial: 019D427B1626CD5CCFFA02E4AED83939C5B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
Manifest number: 1895
Signing time: Tue 31 Mar 2026 06:00:56 +0000
Manifest this update: Tue 31 Mar 2026 06:00:56 +0000
Manifest next update: Wed 01 Apr 2026 06:00:56 +0000
Files and hashes: 1: 0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl (hash: ZRc2++yg5QAFTgH8DSoJPktwVVaO9t+njCC3BSzKw4c=)
2: lNZ8b2GqipxFmFvx0Lw_q8EwfSo.roa (hash: qDLpSNqlibtH6zRBXzlD7tUyev4dQUA/1eIb4IG63oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 31 Mar 2026 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:42:7b:16:26:cd:5c:cf:fa:02:e4:ae:d8:39:39:c5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06
Validity
Not Before: Mar 31 06:00:56 2026 GMT
Not After : Apr 1 06:00:56 2026 GMT
Subject: CN=19f79fd6eda0f6f942bba3b64f9f02b79b82cd45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fb:06:fc:b5:e6:2d:ec:7b:e7:f9:8c:cb:4a:
2b:3a:c4:2d:69:75:a9:5d:2b:32:ab:be:78:f9:69:
6a:5b:bd:9d:a1:0c:bf:f8:c6:04:49:f6:91:ff:8c:
77:dd:e4:01:1d:5d:f7:2b:7b:3f:3c:c8:10:f3:ff:
d3:d3:be:0f:48:1a:cd:66:f9:f1:81:21:00:46:26:
f4:fe:43:e7:5e:ab:f9:77:b3:c0:fb:50:f7:4c:38:
ce:a8:97:82:fe:31:cc:2f:a2:76:c6:00:94:f1:e1:
60:78:d8:e6:f0:a4:a5:92:d7:28:eb:3d:20:b9:91:
d2:a8:85:d6:67:e2:e9:63:9a:8f:61:7f:e4:95:95:
5b:16:69:ba:00:f5:4f:dd:ab:b7:3c:9f:0e:9f:56:
fb:8b:24:a6:3b:e6:f7:bd:ad:65:5c:64:9a:96:37:
51:b7:76:cd:8f:b3:e5:b1:dd:13:9a:b0:16:cf:cd:
45:ba:ab:33:97:15:3d:7f:a9:c2:72:e2:2d:64:23:
ff:72:8f:30:4a:59:9b:68:ce:ac:f3:e5:a4:41:d5:
d2:0b:c5:bf:18:51:53:6b:c9:ad:14:ac:0c:a1:82:
a2:bd:79:c2:f8:ae:62:8b:61:b8:ba:53:29:63:2f:
95:79:30:1b:4e:d5:9e:a5:4d:5b:d3:eb:c4:63:a6:
4e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F7:9F:D6:ED:A0:F6:F9:42:BB:A3:B6:4F:9F:02:B7:9B:82:CD:45
X509v3 Authority Key Identifier:
keyid:D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:1e:29:51:e5:18:25:5c:c1:c5:59:9f:4c:d1:cd:64:50:85:
8a:be:a6:05:54:67:fd:01:8f:1e:3c:ec:b3:23:92:e2:01:f0:
4a:66:a9:1f:ad:4f:69:1e:e4:67:a9:74:b8:6c:bc:a7:1d:45:
89:67:dd:71:31:ba:69:d1:f7:1f:e4:18:16:01:de:01:86:3e:
64:f7:cf:04:82:18:6a:2f:3e:8c:03:76:92:5f:f4:02:69:82:
82:8b:c3:73:25:f8:cf:ba:21:0f:eb:43:47:43:8a:10:92:1e:
78:0d:cb:4c:87:50:7a:cd:85:bf:0d:78:e3:db:fd:85:1a:0c:
e8:72:86:99:ee:84:4b:61:13:53:c7:1c:1d:35:97:6c:4b:c8:
05:7c:21:a6:0d:36:8b:4f:61:dd:62:75:fd:c9:82:9d:df:67:
7c:c1:8d:47:15:e7:8a:aa:32:2c:31:2b:f7:e1:38:44:d1:e2:
c8:a2:46:17:3e:56:13:be:a9:df:a0:57:3a:ae:cb:bc:c7:83:
6b:45:bb:b8:18:6b:89:fc:b4:d4:51:84:a0:5f:48:64:89:aa:
15:48:63:61:0e:76:ac:96:24:17:dd:43:04:57:9b:f1:fe:87:
36:f6:19:85:56:c9:0d:7e:a9:96:6a:33:f3:9d:52:e5:48:b9:
26:4b:f6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 09:31:15 2026 by rpki-client