Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
File: 0TAReuHNwt8cWIFuAOVFH4fvs3A.mft (raw, json)
Hash identifier: YBcUKLMhmh4SMBcHaUjLO8L0Uhr2lQfVCJuppyBR0UM=
Subject key identifier: BD:11:49:A0:7F:1C:BF:DB:75:85:B8:FA:3B:1F:83:90:B4:51:59:04
Authority key identifier: D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70
Certificate issuer: /CN=d130117ae1cdc2df1c58816e00e5451f87efb370
Certificate serial: 019D38D3D3E56B55853D3301F884EB0848ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
Manifest number: 091E
Signing time: Sun 29 Mar 2026 09:01:39 +0000
Manifest this update: Sun 29 Mar 2026 09:01:39 +0000
Manifest next update: Mon 30 Mar 2026 09:01:39 +0000
Files and hashes: 1: 0TAReuHNwt8cWIFuAOVFH4fvs3A.crl (hash: YzizRkyWhkikkyg4qOZbHDuQffYBHMtm5m3j/wC1FDY=)
2: p9tR_YPIsnjcSaCfQzqt0nEYrrM.roa (hash: ELI33Gpd5gDnI+1hXpA3k3XALmGCvJJlHqj3mPxtk9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:d3:e5:6b:55:85:3d:33:01:f8:84:eb:08:48:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d130117ae1cdc2df1c58816e00e5451f87efb370
Validity
Not Before: Mar 29 09:01:39 2026 GMT
Not After : Mar 30 09:01:39 2026 GMT
Subject: CN=bd1149a07f1cbfdb7585b8fa3b1f8390b4515904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8e:2d:09:f8:4f:67:35:f2:8e:49:5d:3d:99:
dc:5f:19:02:d2:a0:c0:23:96:a5:27:3e:93:29:4c:
69:fd:e5:59:7c:5c:c2:08:f5:89:50:43:9e:89:63:
a1:48:86:18:94:41:df:63:f6:7f:80:0b:6a:3c:2c:
5b:0c:db:01:ef:1f:e3:fb:9a:1a:99:d2:76:1e:20:
68:0a:29:e7:6e:8a:3e:4f:66:0d:fe:35:ac:c7:5a:
86:2d:f8:df:84:53:f3:d6:d0:24:76:2b:f5:67:db:
b3:39:22:19:b8:fb:81:75:96:81:f1:3e:c6:95:52:
d5:33:da:5a:24:63:c3:cf:75:51:f2:61:96:27:53:
ef:be:4a:d3:1a:d3:9d:d9:f8:e7:0b:58:59:80:88:
7b:88:b2:f5:5d:35:df:68:93:fb:ec:70:78:24:13:
52:23:f0:b4:c8:51:47:10:c0:10:ab:d8:b6:79:d8:
d8:8e:19:61:f5:51:30:41:ee:88:79:2e:00:e0:30:
18:f0:30:57:84:c3:c6:7d:b1:ba:9b:80:58:23:bf:
10:ea:8b:93:69:5d:46:52:a5:e2:86:19:8f:f7:d9:
0e:14:79:6e:4e:14:80:51:43:bc:22:97:b2:43:3b:
f5:5a:be:d4:b1:45:c8:eb:85:55:cb:f7:f4:0d:39:
13:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:11:49:A0:7F:1C:BF:DB:75:85:B8:FA:3B:1F:83:90:B4:51:59:04
X509v3 Authority Key Identifier:
keyid:D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:29:d7:ff:9b:bd:89:90:b2:cd:f1:84:88:b2:9a:d1:2d:1f:
f7:64:32:91:f7:d9:74:b0:09:a2:de:56:b3:c0:bc:fc:8c:7f:
90:41:89:12:43:3a:00:d0:f2:23:2f:de:fb:56:13:d7:7b:37:
20:25:a7:2a:f8:f0:7e:e2:9f:30:ed:91:a7:fa:68:35:b0:ea:
7d:e7:c1:25:ce:72:cc:c8:3d:0f:a3:a5:89:36:9e:52:a4:b3:
7d:3b:d1:14:27:89:a7:af:fc:68:55:80:f5:ed:a7:15:db:75:
1f:eb:66:bc:1a:c1:78:86:10:fb:cd:0c:78:81:a0:d7:9f:c1:
08:c6:43:07:fd:37:4a:6d:e2:56:12:bb:08:04:bf:bb:7e:49:
8e:a6:12:42:e5:34:02:35:06:f5:17:5f:ef:8d:98:3f:29:fe:
77:ea:6e:37:c1:d0:6d:b2:d6:2e:41:de:53:43:42:66:95:ad:
50:e1:24:a7:58:f5:16:61:2d:a8:b7:9c:1f:3d:e3:2d:31:09:
a8:53:34:2a:ca:b6:3f:68:83:87:3d:d8:12:c3:91:20:e7:cc:
52:77:f3:2c:e5:5d:db:43:4e:0c:a4:e2:98:57:e1:9a:51:01:
5d:ab:04:7b:f3:50:ef:db:b7:9a:18:0c:35:6a:fc:b3:5a:8a:
bc:9d:41:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:45 2026 by rpki-client