Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
File: 0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft (raw, json)
Hash identifier: dIcaRztzNvtTcb2LscqsA/uGWG5r9OGL13cVDlAwuTo=
Subject key identifier: 77:98:25:FA:C7:12:79:35:D1:CD:CE:F3:E4:DE:DC:88:82:1D:8D:A4
Authority key identifier: D0:5B:26:23:A3:9D:55:6C:50:B7:04:6D:36:44:7F:B6:21:AF:97:4A
Certificate issuer: /CN=d05b2623a39d556c50b7046d36447fb621af974a
Certificate serial: 019D3A1C511333FB85B6B633919E3CEC79EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
Manifest number: 15CD
Signing time: Sun 29 Mar 2026 15:00:27 +0000
Manifest this update: Sun 29 Mar 2026 15:00:27 +0000
Manifest next update: Mon 30 Mar 2026 15:00:27 +0000
Files and hashes: 1: 0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl (hash: +Yampa07Waq/qvCJtDgr19J5E80TcTZoMvdDlB+SSik=)
2: pCWS_26lWVBmz3evvhhCPtQ3724.roa (hash: 169W7Abudr//3hW1olxvzVQxe6wwpkcYjx7dbhDz4D4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:51:13:33:fb:85:b6:b6:33:91:9e:3c:ec:79:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05b2623a39d556c50b7046d36447fb621af974a
Validity
Not Before: Mar 29 15:00:27 2026 GMT
Not After : Mar 30 15:00:27 2026 GMT
Subject: CN=779825fac7127935d1cdcef3e4dedc88821d8da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b0:4d:a8:82:87:b9:c9:99:3e:09:2e:8f:9a:
83:63:c4:98:88:85:b1:4b:e7:36:ec:c2:9b:97:7f:
96:64:ef:dd:83:0a:8e:34:73:e5:99:f3:bb:fc:8e:
f4:96:15:d5:6c:e4:54:8e:a2:d4:9c:a2:0d:4b:e8:
b9:1d:18:94:d3:3f:ba:89:a4:69:d7:49:38:c8:fc:
55:39:af:5f:77:ee:01:98:f0:47:19:15:d7:eb:04:
64:93:45:1c:c2:d9:d9:a0:79:1d:41:98:f0:df:82:
82:7c:af:3e:2e:23:8e:fd:79:a2:9e:4b:85:5e:a5:
c4:be:c1:eb:29:f7:2c:c5:3e:44:f9:f3:1a:ba:56:
ca:d1:15:ee:ef:08:b8:2f:e6:77:52:1e:86:6d:fc:
cf:13:15:a3:8f:13:ab:9f:81:2b:82:1a:64:53:9a:
67:bf:5c:54:0e:6e:3b:ca:64:22:63:ec:00:97:a9:
67:1a:e6:57:3d:a4:7b:5f:a9:91:64:48:d4:fe:d4:
d1:f2:f4:4e:f8:36:1d:d0:6b:18:fd:c9:7c:42:79:
9b:c4:b1:91:ad:f7:15:9a:79:e1:08:04:f9:8f:64:
94:79:44:ad:7d:0d:5f:5d:40:bb:d4:51:76:78:61:
7b:a8:a5:65:13:3b:b2:0e:48:6f:ac:cf:26:bb:98:
91:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:98:25:FA:C7:12:79:35:D1:CD:CE:F3:E4:DE:DC:88:82:1D:8D:A4
X509v3 Authority Key Identifier:
keyid:D0:5B:26:23:A3:9D:55:6C:50:B7:04:6D:36:44:7F:B6:21:AF:97:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:21:ef:ca:f7:d3:f6:3d:8e:61:fe:48:5c:e9:73:28:0f:8e:
05:bb:8b:b0:72:3a:62:40:c7:05:5a:3c:99:a0:a0:c2:64:a0:
25:d5:b6:ff:aa:d3:29:80:2f:56:25:68:d4:7f:fd:e6:c2:32:
c3:8a:f4:72:f5:d6:d6:dd:02:d4:67:5b:ec:b6:6c:d4:bb:81:
d2:55:a3:c3:04:ea:c4:fa:aa:89:13:e4:27:14:58:b6:38:5b:
11:7b:4b:86:53:e5:93:94:41:a9:b5:ec:54:be:8f:aa:ba:a2:
64:0b:b8:0e:35:c6:9d:a9:ce:8d:fc:0f:c7:dd:c1:66:30:41:
3b:92:c0:fd:f1:f2:4f:e1:6f:49:71:fe:5c:24:d9:a0:74:2b:
08:a2:1f:9c:ad:20:79:c2:4f:3b:49:96:a0:13:21:96:73:62:
db:16:d6:3a:86:ef:02:c1:ec:31:5a:69:e7:ee:3a:3f:86:5c:
0f:5f:23:38:c4:c9:80:47:e3:c1:02:00:2f:41:b4:0c:ea:6d:
96:df:ac:b6:95:06:e2:aa:69:89:43:c4:c2:2c:4d:9f:8d:5b:
23:db:5a:f6:69:12:40:6b:6d:e9:e2:94:3c:13:4b:81:fb:0e:
b5:09:09:fd:31:1b:20:4e:90:e0:8b:13:aa:a6:49:11:83:1f:
7d:fc:eb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:34:13 2026 by rpki-client