Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
File: 0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft (raw, json)
Hash identifier: ytrvqnRZWIJI6HWaRMPYuN4ikf71ozGC1cMLzjglMUQ=
Subject key identifier: 7C:82:10:B5:71:73:6E:E6:2E:B2:17:A1:09:8D:46:EC:40:B4:4B:69
Authority key identifier: D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD
Certificate issuer: /CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
Certificate serial: 019D3909AB78DB79D24C5EED0BD172A83C98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
Manifest number: 0CF1
Signing time: Sun 29 Mar 2026 10:00:28 +0000
Manifest this update: Sun 29 Mar 2026 10:00:28 +0000
Manifest next update: Mon 30 Mar 2026 10:00:28 +0000
Files and hashes: 1: 0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl (hash: Z6YhALUvcM+49Vx1fCND22rJnmR9j3zVpHRo4BqJgY0=)
2: 1-bzA-LC9HAAJGIHNZyWh_5MoU-g.roa (hash: RnN32d6e4MWESaRTbw2K0CLbZb59w+5PKP+DYaK/k9o=)
3: rTSOfv72iKS4Od2LIB0_G10Sm1g.roa (hash: gNhIcqNEFyGD4jxJEKcU893kImcieeuHGUa4eFshagU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:ab:78:db:79:d2:4c:5e:ed:0b:d1:72:a8:3c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
Validity
Not Before: Mar 29 10:00:28 2026 GMT
Not After : Mar 30 10:00:28 2026 GMT
Subject: CN=7c8210b571736ee62eb217a1098d46ec40b44b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ed:06:78:0c:ca:ec:1b:c8:27:cd:a7:b0:bd:
15:cc:bd:84:8d:6e:84:0b:2f:12:5e:46:5d:ce:53:
fe:67:83:6f:43:2c:b8:b7:97:cc:98:01:ba:b0:2e:
ed:f6:88:7c:cc:de:40:28:d7:a0:4e:fd:6a:34:a6:
d1:f7:d8:e6:09:ec:35:ca:87:73:8f:0d:52:79:bc:
3c:5e:b0:38:22:0b:10:df:8e:da:2d:a8:3d:b2:66:
11:f9:5c:ff:51:84:24:58:2e:1a:0e:be:be:d6:e4:
e2:32:d4:2f:3c:e9:15:20:3f:e9:d8:53:8e:35:3b:
ba:b6:e7:a0:06:4d:e3:30:f9:37:91:0f:3a:ac:b6:
f5:ef:64:06:8d:3d:b9:7e:c7:59:82:1c:70:24:2e:
83:d9:6b:18:b1:d0:24:87:9b:c3:53:5b:47:ba:ec:
14:3d:7d:fe:8a:08:a2:56:5f:c3:6d:4c:f4:05:b5:
a5:c5:5c:15:28:7f:0c:1d:45:97:bf:72:7f:47:ab:
c4:38:2e:3e:ff:95:d5:62:92:01:dc:cd:f5:4c:30:
51:e4:cb:06:00:dc:c9:51:20:c0:b4:e9:c6:8f:7a:
74:59:2d:93:55:7e:fb:fe:a5:f6:d3:1e:8c:be:c1:
7b:26:fb:ea:ec:58:3b:b5:3f:3d:d8:cf:45:44:d2:
18:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:82:10:B5:71:73:6E:E6:2E:B2:17:A1:09:8D:46:EC:40:B4:4B:69
X509v3 Authority Key Identifier:
keyid:D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:b1:83:f0:ed:4c:43:4b:61:08:12:d8:fb:f7:20:d5:a0:4a:
e6:d1:06:66:3a:30:9b:43:92:7a:14:d4:07:96:d0:f9:c6:7c:
22:c7:fb:81:a3:49:34:f7:ab:3f:2c:c9:2b:83:04:c7:7a:81:
ea:42:11:49:a9:ac:74:6b:e9:82:4e:3b:14:fe:fd:ba:8d:50:
cf:68:6d:b6:7f:f4:e8:5d:ec:a7:ea:68:f7:59:40:1e:80:10:
46:a8:05:24:9d:48:e7:71:b4:37:f9:3a:f7:6c:3e:55:f9:d1:
b4:d5:6b:42:0e:8e:55:74:f7:20:fe:5e:61:a3:6e:15:92:0c:
1a:b4:c7:c8:c3:59:a0:23:c8:4d:e7:45:87:91:55:d7:06:15:
96:f6:34:0d:ca:79:3a:5c:3b:5c:bf:5e:97:c8:5f:ca:14:cd:
2f:fb:15:1e:e0:84:14:58:97:3e:22:77:3e:56:90:60:5a:66:
ef:b8:2c:32:14:3d:16:1b:24:2f:87:f4:97:36:6c:1f:91:bc:
a0:c8:1d:f6:2a:c4:f3:0c:12:49:56:66:a0:ed:3d:31:ca:ba:
86:a7:da:2b:f4:a6:d7:3e:6f:5c:1a:1e:dc:df:4d:69:e2:5f:
a2:75:26:a2:0b:cf:4f:36:b3:59:9f:9c:b8:cf:10:62:bc:b5:
83:03:91:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:50:15 2026 by rpki-client