Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.mft
File: 0F9s96mFiwKHHBx_E9GzOIDpii0.mft (raw, json)
Hash identifier: QInMRrJ79JRnreEG6bnOeZN2/jVtUMrnbxhLKsrUn5s=
Subject key identifier: 01:9F:BF:9F:C4:60:E5:DC:83:D0:14:18:09:97:9A:FA:85:CF:02:9E
Authority key identifier: D0:5F:6C:F7:A9:85:8B:02:87:1C:1C:7F:13:D1:B3:38:80:E9:8A:2D
Certificate issuer: /CN=d05f6cf7a9858b02871c1c7f13d1b33880e98a2d
Certificate serial: 019D3977C8284B80A012516DA33B246BFCA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0F9s96mFiwKHHBx_E9GzOIDpii0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.mft
Manifest number: 0114
Signing time: Sun 29 Mar 2026 12:00:44 +0000
Manifest this update: Sun 29 Mar 2026 12:00:44 +0000
Manifest next update: Mon 30 Mar 2026 12:00:44 +0000
Files and hashes: 1: 0F9s96mFiwKHHBx_E9GzOIDpii0.crl (hash: /f80x7R5GO/JkMElPjpgEW687KzeBAcNX10EnJo1cGo=)
2: dIxRZVoK391SO4N57N0kDl39xT8.roa (hash: svamFcAbrklGijDHK+E9cDfDGI1J3qNLX+B2lQjxTj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0F9s96mFiwKHHBx_E9GzOIDpii0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:c8:28:4b:80:a0:12:51:6d:a3:3b:24:6b:fc:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05f6cf7a9858b02871c1c7f13d1b33880e98a2d
Validity
Not Before: Mar 29 12:00:44 2026 GMT
Not After : Mar 30 12:00:44 2026 GMT
Subject: CN=019fbf9fc460e5dc83d0141809979afa85cf029e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:82:5a:a8:16:8c:31:5e:64:a1:35:9a:53:0e:
7d:50:b2:11:66:b8:6b:d3:75:0f:80:63:3c:22:71:
e5:b8:77:dd:76:6c:f5:8a:73:6e:ec:16:a7:06:bd:
77:34:1c:60:10:06:dd:8d:15:be:7d:ba:a5:72:fa:
b4:64:7e:b4:85:da:53:06:e9:b3:95:7b:66:7a:b9:
2e:94:ae:e3:11:d0:c0:aa:e4:9d:5b:d5:7b:21:63:
b7:28:79:6d:86:2b:36:28:31:0f:e1:8f:80:33:d8:
bd:7a:15:e3:bb:5d:6d:f3:89:d0:b4:c5:af:9f:b4:
73:62:63:ae:d6:0d:ad:73:aa:dc:9a:08:cc:c8:81:
7f:bd:83:53:0f:32:3e:bc:2b:2d:86:ea:ec:36:dd:
a9:8f:40:0c:17:f0:c8:a8:76:8d:74:3c:03:f4:48:
93:18:31:d0:36:9b:2f:f3:50:1a:42:cc:ff:f8:0d:
23:af:d7:8f:38:af:d9:08:86:63:b0:8c:ff:44:57:
ec:07:a1:b0:5d:91:a1:4f:d5:f5:77:fb:19:f0:cf:
96:a9:68:2c:a9:e7:b5:ea:39:a1:19:e8:f0:85:d2:
4c:81:7c:b7:a1:b4:f3:7b:82:ea:77:44:4a:ab:a4:
ff:5f:4d:56:53:6d:cf:3a:23:98:23:3a:52:51:7b:
64:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9F:BF:9F:C4:60:E5:DC:83:D0:14:18:09:97:9A:FA:85:CF:02:9E
X509v3 Authority Key Identifier:
keyid:D0:5F:6C:F7:A9:85:8B:02:87:1C:1C:7F:13:D1:B3:38:80:E9:8A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0F9s96mFiwKHHBx_E9GzOIDpii0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ef:22:02:58:a6:50:cf:c7:17:c6:8a:38:90:bb:13:4f:3f:
28:a3:61:58:c4:d6:2e:c9:8d:eb:6f:0f:6c:1a:37:a3:10:39:
40:41:da:62:e3:a0:03:b5:ff:cf:9a:ea:d1:ed:fe:6a:73:6d:
41:a7:20:86:b5:ad:28:79:4f:d7:bc:84:04:0d:90:fa:92:03:
cc:57:4c:c9:e6:6e:f0:fc:9a:8e:5d:e4:3b:ce:c6:50:21:36:
bb:26:d6:1c:c3:ad:d3:1d:24:34:2d:60:2b:af:5b:8c:58:c5:
e0:cd:c7:3f:07:e2:a3:9a:7d:30:7c:01:6b:65:44:65:d9:40:
0e:73:99:ba:0a:50:15:f8:b1:35:60:52:94:05:9a:be:15:e0:
02:8a:62:eb:83:99:a9:4a:20:d2:94:65:cb:87:46:57:83:4f:
56:95:0f:ee:1f:30:2e:71:f7:56:98:35:21:5c:43:9c:60:ab:
c3:17:33:da:31:d6:5e:5c:14:ea:b6:5e:9e:98:b6:78:96:b8:
5f:bf:92:a9:f4:95:4d:d2:76:bb:6d:0a:a5:64:4c:e7:9a:93:
ea:db:2a:2e:30:cf:f6:b2:32:ec:01:01:ab:04:3d:97:11:05:
04:70:c9:91:f0:00:cb:17:17:ce:f0:bf:db:1b:47:c3:b1:a7:
e7:99:11:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:09 2026 by rpki-client