Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
File: 0nXXqLrAR39VCd_xG5GVymDfh9o.mft (raw, json)
Hash identifier: wX/ubnCDYZVXu6CefJBiQgy/Q3z4o5MUOjYjZmzTjww=
Subject key identifier: 52:4B:0D:0F:05:C8:5F:80:D6:9E:45:44:77:F2:13:2C:5C:94:74:F6
Authority key identifier: D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
Certificate issuer: /CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Certificate serial: 019D389C55D7F44204CB05A964B309EA14D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
Manifest number: 189A
Signing time: Sun 29 Mar 2026 08:01:02 +0000
Manifest this update: Sun 29 Mar 2026 08:01:02 +0000
Manifest next update: Mon 30 Mar 2026 08:01:02 +0000
Files and hashes: 1: 0nXXqLrAR39VCd_xG5GVymDfh9o.crl (hash: RA4QIo17lYd8uQG04pytRBqQK6nR3X+9ng/AiJn9RI8=)
2: GtnEFJvKTM3dVz-bb1HbpXYUrYs.roa (hash: cDuGcuctwovPIbS70GWqGpssgtZhA8cTCgHfI3MencU=)
3: WuVc3nuSKHmp3Zm0YnwHWiUHPTA.roa (hash: kgJdmFJQtmaA3Y3jCaieWqKoWOzHXlfXNx+CHVD0plg=)
4: ofbntN5B2PaQ2qY_-I_tLGYYjhg.roa (hash: H4gD4m9vsqK2ECIn6QzYNPIe9nKZuWgiHiBZseyCf0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:55:d7:f4:42:04:cb:05:a9:64:b3:09:ea:14:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Validity
Not Before: Mar 29 08:01:02 2026 GMT
Not After : Mar 30 08:01:02 2026 GMT
Subject: CN=524b0d0f05c85f80d69e454477f2132c5c9474f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:58:fd:28:bf:7b:f7:91:22:d6:70:65:ce:38:
86:a7:f1:d8:fa:70:a2:2f:8b:44:d6:eb:d9:87:61:
ea:60:70:20:01:cb:4c:c0:f2:fe:53:ae:f0:09:a4:
33:d4:1d:50:a5:c2:95:47:59:b5:33:b1:24:e2:a9:
34:4b:17:c1:cb:5a:2c:51:7c:25:31:b4:42:51:e8:
bc:6c:5b:57:ff:4e:77:d1:24:13:e7:37:56:f0:b5:
0c:e7:f5:4f:f9:a5:00:83:d6:87:80:55:2f:61:c9:
c7:db:41:60:27:27:0c:e6:e3:2d:99:f3:5e:02:89:
7d:30:7e:a6:ec:32:f7:bc:3c:c2:16:2d:01:a5:24:
bd:33:9c:98:b5:f7:79:37:07:54:b9:bf:a8:aa:59:
5d:3e:a3:0e:fc:e6:e3:cc:e6:76:a5:f9:fd:68:f2:
b8:d8:f9:9d:0f:4b:86:f3:3b:d2:8b:25:12:e9:a5:
81:f0:8a:e6:ee:24:6e:4d:60:b1:fb:07:90:d5:cb:
f2:7d:68:12:e5:f8:5e:0e:83:7d:52:06:ea:63:b0:
60:eb:9a:f8:b5:28:52:31:ad:ed:c8:8d:e7:93:a0:
4f:a8:ec:b5:92:f1:8e:d5:88:83:e2:a4:7f:95:6d:
b7:4a:4c:be:b0:bb:9e:a6:d6:50:c2:64:c2:f2:01:
e8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4B:0D:0F:05:C8:5F:80:D6:9E:45:44:77:F2:13:2C:5C:94:74:F6
X509v3 Authority Key Identifier:
keyid:D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:a8:9c:e7:5a:0d:7b:6d:5c:d3:4d:87:48:e5:0b:c5:f5:0d:
7b:53:29:e8:13:fa:15:44:6c:22:f2:67:94:d5:38:5a:91:dc:
3f:01:08:7f:91:4e:ce:d7:94:f7:db:9a:82:30:8e:14:6d:41:
0f:a6:45:ef:05:f5:2f:40:8b:bc:2c:4f:ae:cd:1b:9a:6d:a5:
36:b2:47:b2:ba:f7:21:3f:b8:70:d2:20:df:9b:8b:66:6c:9a:
68:fa:ab:7c:41:ff:18:23:11:07:78:62:be:c7:3b:9d:d1:e6:
c3:6b:8d:7e:50:82:8a:23:ae:b0:f3:50:bc:45:cb:6e:45:7b:
0e:63:09:aa:8a:a8:3d:35:38:1f:3e:7e:26:a2:d3:0a:43:92:
af:7e:4d:f2:19:bb:59:67:53:27:d6:f9:db:4c:93:1a:a3:b3:
70:60:30:c5:d5:f9:5e:df:56:f0:c6:90:00:5c:93:bf:6a:f2:
9a:a3:97:62:17:d6:cb:88:fc:6b:aa:cb:9f:c5:dd:9d:a5:87:
91:e5:df:a2:39:80:12:8a:08:e5:b1:a9:8e:10:25:ab:c1:47:
1d:6a:e5:f2:21:da:2f:39:16:c3:6d:45:23:4f:01:b2:98:8f:
a9:d8:ab:85:9a:78:f6:62:d1:89:2d:24:8a:dd:40:de:0d:a1:
ce:22:3d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:05:34 2026 by rpki-client