Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
File: 0L-t8pI57Yzz9saT2L23n0IACrw.mft (raw, json)
Hash identifier: 3FKQ87y07e8KHHd/yDkZkGClD6pa1eBq3G2EJf62Bnw=
Subject key identifier: 9C:AD:D6:82:85:40:4C:B2:BD:7F:57:BC:A2:99:88:90:7B:92:15:B1
Authority key identifier: D0:BF:AD:F2:92:39:ED:8C:F3:F6:C6:93:D8:BD:B7:9F:42:00:0A:BC
Certificate issuer: /CN=d0bfadf29239ed8cf3f6c693d8bdb79f42000abc
Certificate serial: 019D386555B5F3F74CE0BACFDA4FC58EBCC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
Manifest number: 1041
Signing time: Sun 29 Mar 2026 07:00:58 +0000
Manifest this update: Sun 29 Mar 2026 07:00:58 +0000
Manifest next update: Mon 30 Mar 2026 07:00:58 +0000
Files and hashes: 1: 0L-t8pI57Yzz9saT2L23n0IACrw.crl (hash: EOH7W2jeKSsZCda2ghVVRj1OLGZbrt2hEZgT/oqkKq4=)
2: 2JYWg4gqZMghUwSsH_cELClo_DE.roa (hash: XmfRPL/CjIz58Jli7M5Cw1QTYVH2xAtyBdeQbzz9+4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:55:b5:f3:f7:4c:e0:ba:cf:da:4f:c5:8e:bc:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bfadf29239ed8cf3f6c693d8bdb79f42000abc
Validity
Not Before: Mar 29 07:00:58 2026 GMT
Not After : Mar 30 07:00:58 2026 GMT
Subject: CN=9cadd68285404cb2bd7f57bca29988907b9215b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2f:c2:7d:e2:df:ef:be:4d:5b:4a:e1:a2:fe:
82:f5:55:61:cd:ac:60:e7:53:ee:6d:b2:1e:e8:3b:
01:c7:74:00:9b:4d:d4:a4:5c:80:57:32:25:21:99:
86:e3:53:fe:8a:34:ee:e0:2f:e9:25:21:f3:a6:66:
c1:3b:ee:10:09:e7:5a:d5:f7:5c:ae:ca:99:a8:2a:
8a:a8:d7:45:25:66:31:8b:49:41:09:8c:a4:06:d6:
c6:a4:c0:75:a7:92:43:dc:5c:37:c0:ee:99:4c:50:
dc:60:41:3a:b0:65:5a:42:ac:cb:85:6a:8a:e5:a0:
6e:a2:1e:df:ab:1a:cf:b9:69:92:8d:56:3f:33:ce:
7f:72:32:f3:d7:9e:c0:d0:1c:84:7e:04:13:99:97:
67:58:f6:5a:db:c1:7f:95:73:f8:74:cb:d8:83:2b:
24:e6:9c:b0:32:54:3d:1f:75:03:dd:3f:0e:1c:c9:
46:4d:6e:34:65:fe:ac:3a:69:2c:39:86:5a:8e:e6:
30:f5:70:b8:6d:21:4e:d1:ad:4b:92:ef:b0:28:19:
43:6a:67:a7:55:c8:1b:c3:1b:2c:6d:3b:0c:da:bb:
6f:d1:d4:13:65:9d:80:ee:ea:2d:b3:93:b8:e1:b0:
ef:f6:7d:8f:b8:b4:43:6f:d7:16:05:ce:c5:aa:4a:
97:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AD:D6:82:85:40:4C:B2:BD:7F:57:BC:A2:99:88:90:7B:92:15:B1
X509v3 Authority Key Identifier:
keyid:D0:BF:AD:F2:92:39:ED:8C:F3:F6:C6:93:D8:BD:B7:9F:42:00:0A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:07:a0:d3:e1:66:12:3f:7e:65:9a:8f:3a:d1:6a:19:e8:00:
3b:b6:d5:f1:e9:66:a9:ac:d3:4f:e5:40:0f:d3:90:83:13:45:
ee:c5:d4:c4:e6:d2:5f:bf:04:e8:82:4e:ca:54:3a:dd:85:76:
b7:06:86:3f:79:ed:da:fd:ac:4a:6c:40:fd:31:06:d0:d4:ef:
f9:5f:e7:34:c5:80:31:10:98:79:df:1d:fd:0c:86:f8:26:cc:
ea:f1:ba:9c:e6:1a:73:21:cf:4e:7b:c0:bb:e3:c0:81:ab:e2:
24:95:af:2e:c3:7e:9e:ea:02:52:69:21:ca:ca:61:86:f3:62:
7f:f8:e0:c3:73:4e:9a:26:7b:65:be:05:27:d9:fa:79:47:bc:
69:42:b0:2c:8c:e3:7f:08:18:a0:d9:91:ae:26:33:83:ed:10:
a7:0a:fc:17:a4:8f:8e:b3:8d:cb:0e:19:9b:fa:09:20:e0:1d:
82:5a:4a:98:ad:53:75:0b:0e:61:d9:15:49:12:8a:92:1a:66:
1c:8d:14:c2:1f:de:01:fc:22:88:0d:ae:84:30:b3:c7:bb:20:
48:c7:d8:15:33:33:f0:84:9a:10:90:91:24:f7:ff:10:ee:9f:
68:69:c0:96:b4:a2:00:f1:cc:b6:e1:e5:d6:b6:ee:2b:7c:7a:
7e:64:5c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:43 2026 by rpki-client