Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
File: 0KHbRmz4CCBik9B-ZfISH-tJoz4.mft (raw, json)
Hash identifier: QVzuWmRA8FmdbrEfRe7T4zcDNsejdGClzXbM8PjJiBs=
Subject key identifier: E7:D9:95:19:49:84:EB:82:CF:BB:6A:DB:F2:CA:9A:88:AB:1E:D9:7C
Authority key identifier: D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E
Certificate issuer: /CN=d0a1db466cf808206293d07e65f2121feb49a33e
Certificate serial: 019D382E3E13207C9A94A4DE6230A9687F38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
Manifest number: 167E
Signing time: Sun 29 Mar 2026 06:00:47 +0000
Manifest this update: Sun 29 Mar 2026 06:00:47 +0000
Manifest next update: Mon 30 Mar 2026 06:00:47 +0000
Files and hashes: 1: 0KHbRmz4CCBik9B-ZfISH-tJoz4.crl (hash: ZuOVm7kEIIHLm3wFXAHIcXK+X3sF06RAdroQ64tp/Sk=)
2: DhRuJkYL3BPnAOF_5KLHFOS7fEU.asa (hash: sQIfeWLpZ4jVR+U6OfuhrXRMEOMO8X/NhFz0LDGhKGs=)
3: yq5Siwl4i3jmM8YcRC0pxHMIUlk.roa (hash: nGkz7j5CjWTfBWr6c+S9Cs2//HPjWw5q8jEucRFb/jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:3e:13:20:7c:9a:94:a4:de:62:30:a9:68:7f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a1db466cf808206293d07e65f2121feb49a33e
Validity
Not Before: Mar 29 06:00:47 2026 GMT
Not After : Mar 30 06:00:47 2026 GMT
Subject: CN=e7d995194984eb82cfbb6adbf2ca9a88ab1ed97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a0:50:b2:99:12:88:aa:a5:57:80:cc:da:50:
93:13:64:ff:9b:1d:18:59:96:71:b1:06:a6:58:1d:
ad:65:29:40:96:0a:70:ce:6a:ee:24:c3:bb:68:81:
6b:58:eb:ac:12:53:f2:13:db:ec:ca:99:9a:14:d6:
46:82:ab:a0:f4:08:63:20:36:4a:e6:05:1c:80:7d:
4b:9c:24:3f:9a:c2:4d:a6:59:b4:e3:59:6b:a1:4c:
f7:ef:5e:89:42:af:9a:32:22:c0:37:81:9e:1f:5f:
ec:19:40:8a:cb:62:a7:b7:28:4a:1e:89:5f:4b:09:
3f:24:b2:96:78:2d:3a:27:6e:0b:a2:e9:6a:c5:ad:
ce:7d:3d:bc:a7:1e:ad:a1:35:78:e9:f4:a7:f0:81:
64:f2:08:14:65:78:fd:c3:db:4c:a8:b5:9c:1f:f8:
83:18:42:a5:fc:d2:f6:e2:49:c7:75:01:41:9e:f9:
4d:75:76:c2:1c:dd:f8:27:c2:02:e5:f6:cf:9f:b5:
10:0d:bf:66:1a:71:93:7f:0e:8d:9d:9b:10:ee:29:
24:ef:b9:c7:19:43:c1:7a:5a:07:0a:6d:f0:1e:9d:
66:36:09:96:cd:bf:2b:73:7c:1c:c7:ec:ed:4f:78:
e8:66:e2:19:50:d2:e1:ae:12:d8:9b:da:11:b8:92:
63:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D9:95:19:49:84:EB:82:CF:BB:6A:DB:F2:CA:9A:88:AB:1E:D9:7C
X509v3 Authority Key Identifier:
keyid:D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:5e:77:be:96:bf:72:71:12:b4:91:1c:c9:fa:45:8c:f4:a5:
40:bb:86:13:be:d8:38:01:90:f1:7b:aa:85:2d:8d:c7:f6:0d:
63:6f:44:8f:f5:8f:9f:b4:25:2d:1d:76:6d:97:7b:45:82:c4:
78:85:64:a0:09:a3:c8:f2:1b:f3:56:c4:14:88:e9:b4:1d:73:
42:d3:83:2c:8e:ad:66:2b:6a:3f:20:91:c7:28:7c:8b:ac:d0:
93:fe:da:4e:d5:73:ca:64:63:b0:3f:68:8d:e0:f5:db:bc:a1:
01:a3:09:3d:d5:07:63:06:f8:8a:88:d9:ea:f9:a4:96:a9:22:
2a:bf:fb:9a:07:9c:83:b2:2a:e9:a4:88:29:2c:d6:b5:83:d2:
a3:f2:d0:19:05:9f:6a:68:d8:0f:04:46:b7:12:a2:40:0c:77:
09:02:e3:09:6c:1c:b0:00:36:e2:00:f2:85:9d:c7:1b:e0:6c:
2a:0a:68:11:4d:9d:7d:a9:c1:05:40:75:c6:f7:a2:47:7c:00:
2d:65:d2:38:b4:70:81:00:04:9f:f6:76:a5:5c:b1:d2:ba:a4:
37:a2:e8:c7:85:22:4a:5c:2e:1f:15:7e:09:68:af:e9:56:24:
80:c4:98:6e:35:07:a7:a0:7d:ff:1a:de:79:76:b6:16:1a:01:
27:d6:4a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:15 2026 by rpki-client