Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
File: 0VK0wfXUhO78KxWX9FUAOrZUsFU.mft (raw, json)
Hash identifier: +RK5+SSScpCorpFBExIFKegfgoAVDdoqoYQ7MpzPA/I=
Subject key identifier: 00:96:C9:CE:30:6F:E7:96:59:9F:9B:5B:11:6B:D2:7B:E0:A3:6B:93
Authority key identifier: D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55
Certificate issuer: /CN=d152b4c1f5d484eefc2b1597f455003ab654b055
Certificate serial: 019D39410F1C7C7C9E49EF507CC8B9D3C54A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 11:00:57 +0000
Manifest this update: Sun 29 Mar 2026 11:00:57 +0000
Manifest next update: Mon 30 Mar 2026 11:00:57 +0000
Files and hashes: 1: 0VK0wfXUhO78KxWX9FUAOrZUsFU.crl (hash: Tx9ra8sqsbUbF/UjMFxoHTcC4Urla8ZqqodcEGtnBb8=)
2: NP9SfFGYsYXsch7Dr3qELq74PLU.roa (hash: fuLAQTL3YUInXQtx9TnphHOeZzSHEh2X+xButoDoLCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:0f:1c:7c:7c:9e:49:ef:50:7c:c8:b9:d3:c5:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d152b4c1f5d484eefc2b1597f455003ab654b055
Validity
Not Before: Mar 29 11:00:57 2026 GMT
Not After : Mar 30 11:00:57 2026 GMT
Subject: CN=0096c9ce306fe796599f9b5b116bd27be0a36b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c4:35:6d:e4:91:8a:9d:64:3e:36:05:3f:da:
92:c8:91:c7:53:b2:14:a5:62:b3:c3:c9:e2:8f:8c:
06:e1:51:23:32:5f:75:c1:fe:d9:33:76:3f:d9:60:
e2:af:75:ca:28:02:80:ed:5f:63:9d:33:c5:a3:18:
e8:fc:cb:5c:90:d1:76:d2:68:c1:76:03:c0:40:59:
34:d2:8f:b1:a3:0c:c1:9c:19:12:28:69:c4:96:02:
50:91:c0:fb:90:a9:a7:ac:a1:f2:5a:d0:95:fa:7f:
5f:e5:ab:4d:9b:4f:f1:88:92:7d:17:b9:2e:4e:7b:
4b:f2:6d:18:cd:ae:83:3d:b9:b6:ea:00:72:57:04:
bf:de:47:d6:66:0f:f5:4f:d0:55:fd:9e:87:ae:7f:
12:35:3e:05:34:01:4a:52:c7:23:89:47:8d:ff:b9:
c3:0d:2f:95:6f:7c:7a:94:69:33:89:39:fe:9e:0d:
1a:92:02:38:97:05:92:6a:77:8e:97:53:20:f3:81:
7d:cb:94:07:57:31:3a:8e:a7:3c:c9:11:e3:9c:24:
c1:b0:77:7e:94:e4:6f:3a:fa:a8:95:23:59:aa:89:
39:81:d5:fe:7c:b3:dc:3c:b4:3f:af:5a:f6:bd:34:
e5:e1:f8:1c:8e:4d:4e:1c:2a:58:5f:be:98:cb:92:
d0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:96:C9:CE:30:6F:E7:96:59:9F:9B:5B:11:6B:D2:7B:E0:A3:6B:93
X509v3 Authority Key Identifier:
keyid:D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:2f:fe:29:ff:88:fb:dd:1f:bf:bf:99:78:ee:24:00:69:61:
2e:95:2e:ec:71:e6:50:00:f9:5a:e2:a0:45:98:6e:82:d8:f0:
70:63:13:38:29:ec:5e:2c:fb:31:02:c4:dc:d5:58:98:36:68:
b7:21:da:35:28:48:d9:bc:df:52:60:67:c2:09:52:d6:e3:4f:
73:3e:fa:ec:d4:d2:15:7b:71:0c:ab:d9:df:dd:ca:0c:fb:2b:
3e:2b:0f:8d:17:81:25:79:bc:ae:09:53:95:d1:04:d3:2f:21:
06:96:5d:0c:1a:f2:cc:3c:e0:8f:57:05:8b:69:3c:a3:9a:ca:
f8:e3:7b:a0:b2:91:f8:50:4e:bb:db:84:40:81:70:18:b3:17:
43:7a:37:e5:ea:fc:0e:db:68:45:7c:fd:d7:d5:4d:34:86:6a:
15:83:59:11:23:ed:80:8f:79:aa:e5:9b:d4:8b:bd:74:20:a3:
aa:ad:e6:ce:43:72:d1:06:a6:0f:f7:1d:e9:43:c5:e4:0a:89:
59:2d:96:41:9a:df:c4:dc:10:95:6b:3e:ce:82:ba:33:5d:cc:
ae:62:d4:a4:b4:4e:e4:6d:87:ec:03:96:c7:cf:8a:11:59:37:
8a:cd:c4:d6:34:34:d1:e6:42:ed:8b:a2:55:95:e1:08:56:4d:
b8:02:2c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:01 2026 by rpki-client