Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
File: 0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft (raw, json)
Hash identifier: QsejEkbVotQ+k8TxrG5jwCdo6VF2ScW3FtSEtfG1LKU=
Subject key identifier: B1:35:92:35:CB:5E:BE:88:54:3A:9D:4A:A4:30:AC:2A:01:3F:9E:18
Authority key identifier: D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9
Certificate issuer: /CN=d29dc792adfcfe88c79e7958fbfec525630b62f9
Certificate serial: 019E303B6BDCB5DD67754AB4A1DC6C4F3205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
Manifest number: 0D14
Signing time: Sat 16 May 2026 10:01:01 +0000
Manifest this update: Sat 16 May 2026 10:01:01 +0000
Manifest next update: Sun 17 May 2026 10:01:01 +0000
Files and hashes: 1: 0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl (hash: UTdMwzxGheTxcMThv2goS1K8Is23NLIwSV2+Meplxos=)
2: 1KnU7H_UVe-XpNapFYFQEn0LJJQ.roa (hash: cUtUMg5M4fjhGoVm34BuVn+17rIs5yEOOCki02p10ww=)
3: j5hpz0Ky4wyZsfB5ISUjvlPvrQ8.roa (hash: eXsNvI5c0yl1gppo8mH8F57qlB2x5VSSClL68a+AJ/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:6b:dc:b5:dd:67:75:4a:b4:a1:dc:6c:4f:32:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d29dc792adfcfe88c79e7958fbfec525630b62f9
Validity
Not Before: May 16 10:01:01 2026 GMT
Not After : May 17 10:01:01 2026 GMT
Subject: CN=b1359235cb5ebe88543a9d4aa430ac2a013f9e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:9b:52:f4:59:9e:3b:e3:23:cf:0e:0c:9c:eb:
a6:65:c2:b5:59:02:ee:33:8b:7f:df:aa:34:06:c9:
c2:bf:3e:79:f2:d0:8a:f6:76:1d:ef:32:0c:58:7a:
c3:82:58:3f:6a:02:69:a3:90:9e:fc:c3:24:cd:c5:
8c:76:e8:63:fb:5f:c9:60:4f:0f:bf:4a:95:75:db:
79:4a:bf:a6:b4:66:50:8e:cd:81:f9:32:bc:e5:cd:
82:9a:9a:45:b5:c6:97:4f:f0:3c:c0:58:05:fa:6a:
0f:ec:b1:d5:e0:d5:68:29:67:6a:b8:e4:b8:3a:7f:
05:bc:a0:f7:64:72:bb:bd:a8:3b:1e:bc:77:02:60:
a9:4d:ce:0d:0b:95:91:dd:de:2e:19:ca:28:e0:f1:
22:da:2b:95:d2:1f:07:92:6a:73:d0:69:f9:9f:fb:
6a:26:9d:47:73:f1:88:54:c1:0f:51:48:60:79:db:
a4:97:41:09:42:04:e3:3e:67:21:25:3a:c2:d2:c8:
d1:26:57:31:5f:21:83:1e:0b:06:77:c4:17:7e:c7:
21:7c:cc:a9:67:ac:b1:5c:db:fd:65:35:23:9c:90:
db:c1:36:dc:8e:93:09:19:1e:b7:58:01:fd:a4:76:
e4:72:ad:ab:75:c3:e8:00:4b:8e:86:6b:ee:75:bd:
5a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:35:92:35:CB:5E:BE:88:54:3A:9D:4A:A4:30:AC:2A:01:3F:9E:18
X509v3 Authority Key Identifier:
keyid:D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:55:a5:c1:48:55:41:f5:36:37:34:e7:1e:68:e3:db:5b:43:
b0:e8:ec:c0:0c:8f:51:5d:7a:70:f7:de:ea:d0:46:5a:dc:54:
4c:b4:a4:8b:81:21:a6:92:50:c1:42:f8:2c:bc:0a:dc:b4:58:
1d:3a:04:23:f3:45:27:c6:3e:8d:55:f4:91:48:84:ff:af:60:
64:b7:79:2b:71:d1:49:43:9e:17:55:ff:08:7c:4a:a6:d7:11:
95:eb:44:d4:ba:3f:ef:58:a3:64:7b:b1:ad:1c:af:6e:c1:59:
34:76:44:01:e2:38:17:de:00:14:05:c0:40:1c:cb:9e:ed:3c:
12:d1:52:cd:53:40:dc:4f:28:db:7e:77:a0:24:f9:1e:6f:a7:
75:2d:4b:91:83:09:fe:ba:11:cf:ab:3d:26:7c:90:19:81:d7:
cd:be:4a:4e:22:e4:46:8a:56:5d:8b:a2:36:d6:59:24:21:f6:
26:86:64:5f:34:ba:e7:9d:fd:b2:84:8c:48:0c:29:3c:1d:6c:
d3:b6:d7:8f:b5:b7:11:74:fb:cf:9b:9e:34:33:0a:8d:d0:64:
0c:49:58:f2:5b:d3:4a:fe:f8:6b:28:d0:c9:05:4c:11:0e:00:
cf:5b:16:82:dd:c5:51:c1:1f:d4:28:10:7d:4b:68:f6:5d:0d:
b7:13:4b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:12 2026 by rpki-client