Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
File: 0rvJBVXW0NNDK6u5W2DN7upYD1g.mft (raw, json)
Hash identifier: g/dEwBX5cv17nts27UBlPIi6JeU8cUo4nKI0T3kqJ+U=
Subject key identifier: 6D:CB:09:6D:01:E9:D2:C8:C4:BD:D2:F7:83:FB:81:D6:00:CE:76:3C
Authority key identifier: D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58
Certificate issuer: /CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58
Certificate serial: 019D39E5C0E43637D35E73BB5B9EDB0258AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
Manifest number: 1725
Signing time: Sun 29 Mar 2026 14:00:51 +0000
Manifest this update: Sun 29 Mar 2026 14:00:51 +0000
Manifest next update: Mon 30 Mar 2026 14:00:51 +0000
Files and hashes: 1: 0rvJBVXW0NNDK6u5W2DN7upYD1g.crl (hash: WzccLo76OTFSrzxMhitgfGGEoHxZ4cveNb4TZ5SgCTI=)
2: CuoNMY7Qq37VOjNaS3NSAgeASU8.roa (hash: oV7Za3ljWN5/ELZ5W0IrtTxHnlCCtRf76iTFx/48w6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:c0:e4:36:37:d3:5e:73:bb:5b:9e:db:02:58:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58
Validity
Not Before: Mar 29 14:00:51 2026 GMT
Not After : Mar 30 14:00:51 2026 GMT
Subject: CN=6dcb096d01e9d2c8c4bdd2f783fb81d600ce763c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:89:64:35:a7:6f:a7:7d:b0:b6:b2:39:f2:36:
f0:de:f3:e7:6d:30:9b:1d:b1:27:3b:c0:63:1f:b1:
f8:11:29:95:92:50:79:9e:05:f2:79:ac:c8:78:58:
78:be:3b:e6:63:8c:6c:d2:7d:95:6a:12:eb:0d:64:
37:ff:f0:31:ec:00:6e:ce:24:b3:74:57:08:04:80:
e4:6b:07:fa:e6:0c:5a:b1:58:c1:0e:a8:6c:41:26:
f1:31:03:9a:1f:cb:ae:7c:49:8b:29:37:83:74:2a:
3c:9c:6f:ff:aa:5a:c1:d2:9b:7e:b8:86:14:e7:c8:
09:6d:e7:b8:79:64:8f:ee:2b:43:0f:0b:f9:6d:e2:
73:bf:bf:41:53:28:7d:6e:19:90:5f:86:b9:7a:a9:
eb:5c:69:62:48:80:cc:f7:51:84:54:ca:73:36:7d:
e1:71:94:98:34:c6:7f:03:9f:5d:74:6e:6e:9d:28:
49:a8:3a:2f:1c:0d:3c:65:96:b2:fe:4c:a8:b8:57:
a2:43:18:4e:c9:f1:d1:cb:f5:11:69:53:ca:de:02:
be:4b:d5:1c:41:0b:1e:41:65:84:c7:74:23:d5:54:
c5:84:77:5d:ab:f0:b1:e8:fe:a1:72:1c:d8:3c:de:
bc:c2:91:45:3d:73:af:f1:72:de:25:5f:64:94:56:
ee:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:CB:09:6D:01:E9:D2:C8:C4:BD:D2:F7:83:FB:81:D6:00:CE:76:3C
X509v3 Authority Key Identifier:
keyid:D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:30:c9:95:5b:ab:14:e4:b7:52:07:32:63:5c:8c:83:85:73:
5b:75:24:49:ff:6b:30:ab:d3:d8:dd:47:25:40:e3:d5:05:04:
b5:b8:a9:c3:aa:f8:04:f0:77:b5:91:50:13:a5:14:e2:a0:aa:
a5:0e:16:40:b4:6c:7e:77:4c:c7:4e:95:9e:74:b1:11:9d:87:
5b:75:00:23:fc:c0:35:18:da:5c:32:91:e0:fc:1c:23:44:9b:
da:49:c0:5e:67:5b:7a:ba:a8:87:39:3b:e6:9b:c2:ca:2c:0f:
f8:aa:b2:00:5c:75:4f:23:47:60:2b:4f:9f:e6:22:d6:44:56:
59:b3:bb:a1:54:5d:a1:af:6a:96:c9:7f:e0:1f:81:dc:58:08:
9d:3c:2a:7d:29:be:08:a3:fa:c1:e1:9d:3c:56:53:f8:96:50:
48:78:7a:46:c3:10:b0:bf:ed:c5:5e:ae:df:7e:13:7d:80:52:
46:ec:10:ed:62:e7:c0:12:51:ed:e5:fa:25:75:21:5b:0b:14:
11:b7:55:9c:9e:d4:82:bb:d6:a9:54:f1:a7:79:db:cd:b7:60:
46:fd:85:16:eb:01:87:21:d2:7a:07:7b:50:93:cc:5a:98:3d:
83:25:29:2f:ce:58:00:aa:ca:de:3b:cf:5d:d3:b7:75:0c:ba:
bb:4c:28:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:03 2026 by rpki-client