Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft
File: 0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft (raw, json)
Hash identifier: 9kJ0aa62Zm6V3wnjFhDO7ox7rgfkTtv69mrGyhoHX9w=
Subject key identifier: FE:03:AF:B5:76:84:2E:DE:40:D3:18:C0:D8:C7:5C:55:EF:27:34:C7
Authority key identifier: D2:2E:1F:58:1C:D1:1E:1D:0A:2B:69:3A:53:D3:A5:B6:FD:ED:4D:FA
Certificate issuer: /CN=d22e1f581cd11e1d0a2b693a53d3a5b6fded4dfa
Certificate serial: 019D382DE228549C22DC9846DBC28A796CCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i4fWBzRHh0KK2k6U9Oltv3tTfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft
Manifest number: 0D
Signing time: Sun 29 Mar 2026 06:00:24 +0000
Manifest this update: Sun 29 Mar 2026 06:00:24 +0000
Manifest next update: Mon 30 Mar 2026 06:00:24 +0000
Files and hashes: 1: 0i4fWBzRHh0KK2k6U9Oltv3tTfo.crl (hash: a3a12Np5KG2uOroRjNX7BuO16ihTpqSKVSeMDvYiATI=)
2: z5djvf3-CKw5x5kwKKqaRZmCe2I.asa (hash: ZvW8uuufeamy31o99OQxuIpFF7lTKfAP5mzTU9+Pnks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0i4fWBzRHh0KK2k6U9Oltv3tTfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:e2:28:54:9c:22:dc:98:46:db:c2:8a:79:6c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d22e1f581cd11e1d0a2b693a53d3a5b6fded4dfa
Validity
Not Before: Mar 29 06:00:24 2026 GMT
Not After : Mar 30 06:00:24 2026 GMT
Subject: CN=fe03afb576842ede40d318c0d8c75c55ef2734c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5a:91:95:b4:60:0d:ff:a4:ea:6e:74:51:f9:
af:1f:c2:98:d1:6d:21:85:58:82:f8:86:b1:df:b4:
49:5c:1a:e1:45:29:28:1c:85:9a:14:d1:5f:84:37:
a2:b1:6a:fb:93:4b:b5:3e:0e:74:73:a0:2e:e8:14:
e1:c6:cb:53:fc:bf:9a:a3:cd:16:72:14:7d:32:9a:
12:f0:9c:cf:2d:76:e0:96:b4:b0:d2:96:15:5a:fd:
e3:7a:07:c0:23:bf:ba:e5:38:fc:3b:9e:a4:15:19:
6e:6d:5c:ec:77:d2:a2:d6:16:6e:ad:ac:a8:38:ac:
58:5d:86:de:b4:da:40:37:bf:64:89:e0:a4:4f:62:
23:24:a2:1c:7b:18:be:da:a1:49:cc:dc:b8:01:22:
d9:f2:2d:2a:bb:42:81:bd:1f:52:c1:17:72:52:c4:
42:9a:5f:48:7b:1b:eb:c7:58:d8:c8:64:ff:17:19:
c4:80:38:89:35:b7:ff:ee:6a:8b:0d:1a:cf:e9:99:
08:c1:1c:b8:7a:f7:bd:2b:2c:f4:10:04:40:a6:c1:
a7:61:1c:a7:97:4e:05:54:2b:49:b2:43:78:bc:e2:
af:d9:df:7c:3c:dc:1f:f8:20:4f:ff:3e:02:88:b3:
a3:10:7e:60:51:3b:3d:b0:88:53:22:c2:63:d1:9f:
bc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:03:AF:B5:76:84:2E:DE:40:D3:18:C0:D8:C7:5C:55:EF:27:34:C7
X509v3 Authority Key Identifier:
keyid:D2:2E:1F:58:1C:D1:1E:1D:0A:2B:69:3A:53:D3:A5:B6:FD:ED:4D:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i4fWBzRHh0KK2k6U9Oltv3tTfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:11:6c:59:fc:c9:86:02:91:fb:21:05:9e:e7:7c:3d:ae:40:
91:d1:ea:3a:e8:5b:db:ea:bc:b9:36:d9:5c:f7:3b:65:2f:34:
f1:9c:5f:a9:29:0b:28:f9:1b:f2:e7:c0:9a:8e:4f:ce:5e:27:
b8:1d:33:f5:20:1c:51:a7:88:e0:72:2c:4e:79:55:20:0f:f1:
49:0f:fa:a4:2e:d4:a8:6c:6e:ad:0e:2a:95:3d:6e:6e:c0:b2:
be:20:15:22:35:87:a2:7a:fe:11:8a:1f:27:35:ba:4d:93:e0:
24:9a:49:2b:ec:76:09:c9:e7:56:96:b1:51:26:f1:28:da:5e:
be:9d:c9:f8:ad:30:c3:47:3a:55:ef:ae:21:a5:7b:8e:be:22:
6f:1f:fe:82:bb:fb:11:e6:38:bf:68:9c:52:c5:58:3d:e8:d3:
19:cb:36:f4:5f:d3:cc:64:ab:09:e5:6f:cf:55:3e:24:c0:47:
c5:d6:77:de:f6:f5:95:dd:56:b6:4d:2a:b6:3f:a5:d2:7b:39:
49:91:69:bc:de:ed:84:53:04:ee:95:20:95:c0:eb:5c:c8:7b:
d3:05:f5:c5:f7:c8:a6:5f:d3:d8:d1:07:c3:70:23:35:3e:3d:
24:07:c1:43:44:dc:d1:bb:cb:b8:2f:69:89:82:20:72:05:73:
5c:92:17:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:38:43 2026 by rpki-client