Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
File: 0u0bbMpTCR9vkNGllQzrbVOwOq0.mft (raw, json)
Hash identifier: nNqyC/w+mNmYQ/1oiS+0Gu+g4nkeOGvrqG8/QiMJ0Ko=
Subject key identifier: 43:71:8B:9F:6C:0D:51:C6:AE:D5:45:09:0F:DC:FD:93:CB:7E:FA:1B
Authority key identifier: D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD
Certificate issuer: /CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
Certificate serial: 019D38656B1A7D3C34E6497D2639CEB7309D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
Manifest number: 0C9B
Signing time: Sun 29 Mar 2026 07:01:03 +0000
Manifest this update: Sun 29 Mar 2026 07:01:03 +0000
Manifest next update: Mon 30 Mar 2026 07:01:03 +0000
Files and hashes: 1: 0u0bbMpTCR9vkNGllQzrbVOwOq0.crl (hash: rJ81/lPgf+q/tMYhZp+0im4hao26CWlxNaozM4GNH+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:6b:1a:7d:3c:34:e6:49:7d:26:39:ce:b7:30:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
Validity
Not Before: Mar 29 07:01:03 2026 GMT
Not After : Mar 30 07:01:03 2026 GMT
Subject: CN=43718b9f6c0d51c6aed545090fdcfd93cb7efa1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7e:9e:b3:12:fe:f2:1c:15:f0:57:4c:35:5c:
2b:39:c7:cf:70:e0:2d:1f:34:6d:35:2c:bc:f0:2c:
c1:83:72:83:7e:5a:99:e9:f8:6f:84:fd:e4:d2:8d:
45:88:e7:4c:3a:ff:02:cd:2e:74:dc:ab:fc:6b:d5:
51:6f:79:d1:f4:f2:0f:60:cf:53:dc:43:a1:6f:1d:
55:b5:6e:7f:5e:23:29:e7:c6:2b:aa:68:3f:a3:19:
e6:d5:cf:4c:3d:64:e1:0c:7b:fc:cb:88:23:7b:a6:
3b:00:7f:d1:99:0a:3a:25:fa:9b:5f:8a:49:40:9f:
ad:6c:7d:7c:33:55:d3:d1:eb:01:f8:d7:e6:4f:5c:
0b:74:96:55:a4:7d:9c:72:31:2e:b6:c8:c5:66:3a:
7a:d9:b9:04:a6:ee:ed:6a:b3:dd:54:68:9e:4c:9f:
be:91:02:79:4f:11:e4:80:3b:98:e4:7c:c2:a9:92:
ed:47:3c:da:5e:50:78:1f:50:45:3e:04:b5:2b:6d:
e0:ed:f0:37:f1:c4:c3:48:9d:07:bb:62:d0:3f:30:
f0:a3:39:6a:aa:c4:b6:91:66:4a:bf:14:ee:83:2e:
23:59:ee:36:d4:1c:33:b5:10:f5:a7:b0:5a:17:a3:
3b:38:f8:e7:55:e2:3a:7e:d2:98:91:cc:15:e8:b1:
0d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:71:8B:9F:6C:0D:51:C6:AE:D5:45:09:0F:DC:FD:93:CB:7E:FA:1B
X509v3 Authority Key Identifier:
keyid:D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b3:dc:6c:ad:90:69:9b:fc:c8:6e:6f:0c:85:1c:7e:fa:f9:
b2:43:47:dd:8f:f1:ed:2a:08:a8:a5:7a:7f:68:95:8d:bb:ca:
2c:d0:0b:e7:18:69:e4:e6:ce:75:1c:07:62:99:a4:bc:1c:34:
a3:ab:24:12:8d:ea:1e:e0:79:d2:ee:64:a7:90:1f:ad:c0:84:
66:38:a1:e8:56:b4:d2:d7:9b:51:2d:73:27:07:89:73:57:dd:
f7:c3:ea:38:e2:4c:58:c5:52:82:14:fb:7b:cc:11:94:3b:88:
4a:75:2b:12:07:9a:7e:c0:32:ca:19:af:3d:de:69:4f:91:61:
aa:ef:b7:c7:58:d6:ea:4c:40:d5:e5:5e:bd:6e:3f:7a:db:dc:
5a:d7:00:d3:8a:45:01:da:8f:be:d7:34:bf:85:99:15:b1:95:
1e:98:bf:0a:76:32:bd:bc:71:8e:6f:62:84:a3:7e:08:8d:3e:
82:ba:e2:52:f4:50:00:c9:d6:de:70:46:80:46:63:d6:5b:b9:
95:5f:a7:f3:1b:69:7e:60:e3:00:05:27:ae:2c:ba:74:5e:f9:
14:6b:fb:1b:97:52:27:70:11:18:50:94:ab:ec:33:74:a4:57:
68:02:6c:be:59:93:3e:b9:e9:f4:ee:99:07:2e:fd:28:dc:24:
2a:9e:c2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:51 2026 by rpki-client