Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft
File: 0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft (raw, json)
Hash identifier: c8FI1mVM8KvJClaAuhFl6/TgNnfalxnFdvTW+JFYq6I=
Subject key identifier: 3D:97:59:69:42:36:21:D4:01:B6:8B:FD:F7:C1:B7:13:FF:67:01:82
Authority key identifier: D0:BD:40:EF:34:06:64:71:5C:8C:2C:FA:50:E3:D6:1B:A2:86:E0:37
Certificate issuer: /CN=d0bd40ef340664715c8c2cfa50e3d61ba286e037
Certificate serial: 019D389C022E3D671B2160136F4C416C5976
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 08:00:41 +0000
Manifest this update: Sun 29 Mar 2026 08:00:41 +0000
Manifest next update: Mon 30 Mar 2026 08:00:41 +0000
Files and hashes: 1: 0L1A7zQGZHFcjCz6UOPWG6KG4Dc.crl (hash: cUJDPgqY3W58ljTqNjlnFAlm9Wy1mkylcloT2xuAm9k=)
2: 9Bpiuh903cf2KUyc3B43Sh-h6cU.roa (hash: vOwl8xFJY0duh2VdVAScqH5k4a2xL8x3qVJv4PynVyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:02:2e:3d:67:1b:21:60:13:6f:4c:41:6c:59:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bd40ef340664715c8c2cfa50e3d61ba286e037
Validity
Not Before: Mar 29 08:00:41 2026 GMT
Not After : Mar 30 08:00:41 2026 GMT
Subject: CN=3d975969423621d401b68bfdf7c1b713ff670182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:69:03:f4:e2:d0:b3:23:4a:82:c0:12:07:d6:
37:c7:e4:45:36:4c:a0:c7:ca:15:a6:33:35:20:c3:
ef:80:38:f2:1d:a0:d6:ea:4f:de:ba:6c:de:8f:df:
ed:52:34:9e:a3:d4:bc:4b:7b:b3:14:4c:5c:21:c2:
36:d8:05:10:e1:a2:32:8f:fe:ac:c4:e4:61:dc:57:
a2:88:85:4a:31:ec:43:d2:70:7b:c0:23:12:de:33:
06:aa:fb:28:e0:42:8f:64:f4:da:47:a4:02:44:39:
1a:ff:b7:9d:51:d6:67:d1:b4:39:cb:e3:d9:10:c1:
37:7a:fc:e6:5d:3f:b9:26:d4:e1:f2:a3:d4:de:64:
2c:cb:a4:d1:b4:88:b3:de:bb:da:f3:e5:ed:c5:5b:
b4:1a:7b:2d:10:b0:45:62:5c:08:5e:28:20:8e:3e:
18:1f:f6:9c:92:e1:d4:54:4d:ae:2d:2a:50:7b:80:
0d:70:db:4a:df:46:73:3d:5d:a6:58:e9:dd:9e:32:
c1:71:a8:42:19:3e:17:15:bb:27:95:4a:58:ff:16:
73:91:9b:72:f0:a8:d2:a4:87:18:a4:c0:6f:af:85:
c4:78:8c:b5:4f:a0:f2:05:ca:bc:96:fe:a1:75:b5:
cd:64:f6:1a:a0:db:31:78:51:ff:1b:fa:c8:79:92:
f7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:97:59:69:42:36:21:D4:01:B6:8B:FD:F7:C1:B7:13:FF:67:01:82
X509v3 Authority Key Identifier:
keyid:D0:BD:40:EF:34:06:64:71:5C:8C:2C:FA:50:E3:D6:1B:A2:86:E0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:51:15:eb:22:88:ea:d6:50:38:03:23:3b:bd:71:40:85:af:
a1:f0:8b:d1:d2:8b:a8:78:31:e1:69:15:7a:4e:fa:71:a9:b1:
8f:8c:9a:6c:dd:17:f1:b5:98:83:d4:a1:9d:ea:31:95:dc:e9:
b3:3e:d3:78:f4:47:78:93:90:26:d5:04:0b:df:22:65:63:58:
8e:8c:ed:88:a0:1e:8c:66:a0:02:8c:4b:79:79:dd:1e:e5:67:
3a:bd:63:37:6f:3c:e4:c7:4f:28:2d:28:e5:d4:eb:5b:8e:85:
17:8f:7e:40:3d:0a:9d:bc:b3:66:98:0e:95:c9:79:f8:fe:d9:
c6:6a:d1:83:11:16:3d:bf:df:5c:fa:0c:02:af:b4:b4:b7:ac:
13:54:ae:67:df:1d:cb:33:39:02:63:33:a5:99:30:9b:68:87:
35:f2:6c:67:f0:b8:31:9a:c8:2c:48:44:5a:7f:0d:a5:29:e4:
8a:b5:cf:a0:e2:a9:7d:cb:b8:bb:0e:3b:99:60:b9:53:58:cc:
39:3d:a0:3a:29:24:39:fd:f2:b1:50:8d:c7:8a:36:8d:67:90:
54:03:d9:79:c0:7f:98:79:21:c6:2e:40:2d:a6:6b:b9:db:71:
90:8a:21:fc:96:18:78:a2:b2:6f:ab:50:9c:23:51:df:cf:b7:
47:7e:8c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:17 2026 by rpki-client