Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/94eafc-56de-43b4-a8da-ac767d4c4c8f/1/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.mft
File: x0-IJNSPQ_ZuVLpKQubRDtFaTkU.mft (raw, json)
Hash identifier: liAX3P1z4IUsbHI0Yd4OxD4BeAw/Me4q6cvkV/CH+zA=
Subject key identifier: 0F:BC:5C:2D:6A:4B:36:A6:DF:D5:36:9D:3B:61:40:D1:34:41:A2:87
Authority key identifier: C7:4F:88:24:D4:8F:43:F6:6E:54:BA:4A:42:E6:D1:0E:D1:5A:4E:45
Certificate issuer: /CN=c74f8824d48f43f66e54ba4a42e6d10ed15a4e45
Certificate serial: 019D386627E81FD8DE22A2B4887B118FD00F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/94eafc-56de-43b4-a8da-ac767d4c4c8f/1/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.mft
Manifest number: 028D
Signing time: Sun 29 Mar 2026 07:01:52 +0000
Manifest this update: Sun 29 Mar 2026 07:01:52 +0000
Manifest next update: Mon 30 Mar 2026 07:01:52 +0000
Files and hashes: 1: _H_5tniV6dHbOCPwrDiKfNRDtb8.roa (hash: jskBF4cI11f70k6sJJHhYYqgxXe9m3wOfO7FgPOCe8k=)
2: x0-IJNSPQ_ZuVLpKQubRDtFaTkU.crl (hash: 35qPj1LGjq/vVGmemGbwGI0xqLPCMPj/zKIZ5lK8dRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/94eafc-56de-43b4-a8da-ac767d4c4c8f/1/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/94eafc-56de-43b4-a8da-ac767d4c4c8f/1/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:27:e8:1f:d8:de:22:a2:b4:88:7b:11:8f:d0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74f8824d48f43f66e54ba4a42e6d10ed15a4e45
Validity
Not Before: Mar 29 07:01:52 2026 GMT
Not After : Mar 30 07:01:52 2026 GMT
Subject: CN=0fbc5c2d6a4b36a6dfd5369d3b6140d13441a287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c6:74:83:02:99:2d:93:bb:69:3b:16:65:cc:
89:78:31:24:ab:e6:82:98:f9:0f:78:15:b4:dd:a9:
2c:14:84:0f:2e:75:72:33:8d:ef:db:41:82:98:a0:
7b:75:d0:2d:a4:ca:21:10:13:d6:b4:a7:d7:b6:b0:
c5:0c:04:82:7a:52:cf:a8:75:f6:4f:08:b3:35:f4:
88:22:eb:bc:55:57:1a:b1:33:72:0d:99:8e:51:c9:
b2:0e:3a:11:ac:a4:10:a5:da:47:fe:11:71:43:90:
5a:07:be:bb:90:fe:76:1e:6c:c7:05:92:51:b4:be:
39:69:66:f1:5d:cc:c0:b1:50:cf:48:43:33:4f:3e:
65:73:47:e2:75:50:23:00:21:b1:97:26:6e:7b:58:
ee:5b:63:ea:00:32:58:75:92:90:47:a5:b7:30:13:
67:6f:80:03:62:79:f0:ca:c0:f1:0b:fa:ae:cd:ca:
af:44:32:dd:24:ff:03:81:a0:82:cf:ad:a3:27:d0:
7c:ec:e4:33:a0:52:a7:95:ff:59:83:81:f2:65:7d:
78:c6:f6:86:06:1e:e7:ec:5e:5f:96:0c:a9:34:72:
a2:01:a8:ad:91:8c:03:3e:96:01:33:80:31:37:49:
64:47:ce:e1:ae:aa:fd:51:63:e0:16:0c:2a:e5:e0:
f2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BC:5C:2D:6A:4B:36:A6:DF:D5:36:9D:3B:61:40:D1:34:41:A2:87
X509v3 Authority Key Identifier:
keyid:C7:4F:88:24:D4:8F:43:F6:6E:54:BA:4A:42:E6:D1:0E:D1:5A:4E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/94eafc-56de-43b4-a8da-ac767d4c4c8f/1/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/94eafc-56de-43b4-a8da-ac767d4c4c8f/1/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:55:7f:75:6b:ca:d5:2d:b6:b7:f8:c6:d1:ea:a3:8a:3c:3c:
c3:b9:fa:72:84:9c:ed:f8:76:6c:00:5f:3c:4e:a5:24:66:eb:
05:b9:6a:17:05:3c:84:67:85:77:f3:1f:9a:60:87:c6:2f:01:
70:e4:c0:7f:ea:e5:d8:73:0d:1e:c7:05:6f:5d:7a:d2:68:e7:
5e:89:b1:2e:ea:98:bc:de:c6:9d:c1:cf:83:c1:6e:15:9b:59:
bb:5b:eb:d7:a3:66:cc:04:42:bb:e7:3a:67:49:54:95:29:76:
38:05:78:29:11:9b:f0:71:94:9e:ba:81:96:d0:99:f3:30:c6:
fe:af:de:e8:47:3a:71:82:3b:fe:68:1b:dc:60:8f:ed:f9:8a:
05:9d:58:03:25:19:89:14:89:26:96:5d:5e:41:86:17:27:c5:
de:00:53:3b:65:c0:34:1f:09:39:7e:35:e1:5e:56:7e:c5:90:
65:24:e2:1e:da:07:51:97:cf:e4:c0:6d:04:e7:da:20:06:40:
e9:6f:23:2f:06:48:0f:08:fb:43:d5:af:8c:bc:69:29:bb:41:
3d:99:85:33:55:24:bf:3e:64:d2:99:ff:74:98:5e:f9:a1:9d:
6d:87:7a:f9:d7:cd:5a:cd:13:77:0c:a3:7d:1c:59:f4:13:5a:
d2:ba:73:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:25 2026 by rpki-client