Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
File: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft (raw, json)
Hash identifier: JU5/ngMdkt/oTCZtLBJ1hHgGDtCfusVbgXjMjxF31v4=
Subject key identifier: 2F:91:FB:EF:DA:F2:EB:80:F0:F0:9E:A5:18:A2:3D:33:F4:93:07:76
Authority key identifier: D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
Certificate issuer: /CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Certificate serial: 019D058B1D4A3A305771B1DA93035885B3D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
Manifest number: 159B
Signing time: Thu 19 Mar 2026 10:01:36 +0000
Manifest this update: Thu 19 Mar 2026 10:01:36 +0000
Manifest next update: Fri 20 Mar 2026 10:01:36 +0000
Files and hashes: 1: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl (hash: fgnJKQkeqLyEp9l3pN+uGIQtlsgGaBSUT5q4RfiTCQY=)
2: 1-fLD9auB23Q-KgYeQIubXO96o4Q.roa (hash: /JJTz3wE1LRLJ7bz0AIRldwzfH3lc1HU/FwtYIJiaSU=)
3: T-8JhhcHQ5cIwEg6IG4tP0d0W4I.roa (hash: 9CdFc+e0Ar1W8fwX0HTyCIb5Mdz7Fe3CEQ/bMI8Efhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:8b:1d:4a:3a:30:57:71:b1:da:93:03:58:85:b3:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Validity
Not Before: Mar 19 10:01:36 2026 GMT
Not After : Mar 20 10:01:36 2026 GMT
Subject: CN=2f91fbefdaf2eb80f0f09ea518a23d33f4930776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c3:a7:82:a5:89:7f:98:00:23:c8:43:c3:ff:
cd:93:cd:94:91:10:92:b2:a6:bc:a1:2c:2c:70:4f:
25:c7:1d:61:dd:67:32:99:82:1e:e3:08:d3:91:41:
65:89:71:52:e7:f8:c7:86:72:4b:59:3b:55:dd:8d:
93:6e:10:46:8a:34:95:27:6d:a8:0b:6b:f8:a6:89:
b3:47:4a:e8:15:b4:4b:ad:2b:9d:6a:24:99:f5:8d:
b3:83:0b:25:d1:69:be:8a:24:6d:7b:b5:69:1a:e9:
3e:15:fa:b9:2c:fc:96:db:36:45:44:17:89:d8:22:
f2:ff:fb:df:b5:63:3a:9c:75:ab:90:87:83:af:cf:
ed:b1:42:08:9b:42:11:ff:93:8d:df:b0:f9:7c:d9:
93:6e:65:0f:3e:2c:62:7a:da:8f:fe:02:c5:71:a3:
9a:71:7a:7d:b6:2d:f6:26:29:70:ec:51:fb:ef:19:
8f:99:7a:32:f9:74:a6:f2:75:c9:89:cf:cc:c7:ae:
7e:93:68:2f:ec:b0:fa:d2:ff:7d:83:45:ba:0f:82:
55:1f:0e:9c:67:41:72:2f:a1:a3:53:53:f6:d4:7f:
21:86:70:aa:bd:ba:4e:16:52:4a:11:41:cc:ef:e0:
07:ca:b1:b6:03:21:50:39:a2:1f:8a:69:95:bb:76:
11:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:91:FB:EF:DA:F2:EB:80:F0:F0:9E:A5:18:A2:3D:33:F4:93:07:76
X509v3 Authority Key Identifier:
keyid:D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e5:fe:91:a1:ab:31:c3:ab:a9:ca:ac:e5:f2:28:c6:0c:5e:
ce:d1:bd:f2:f8:47:a8:40:64:99:02:b8:05:8d:6c:38:be:4b:
5c:fa:c5:a6:3e:b1:83:2d:79:d1:e0:15:9c:84:79:bc:6c:91:
2a:07:a4:ba:4b:cb:26:f7:5c:4d:46:f9:74:2a:d1:06:3d:69:
b5:c6:8c:52:a3:a2:cb:18:db:4e:c4:ee:20:56:0c:85:50:4a:
e4:75:75:bb:db:89:ed:6c:f9:d0:9a:e0:eb:73:e9:a9:7c:4a:
bb:e2:e4:b5:40:d5:91:07:a2:b1:2e:a2:7a:5b:e3:73:cd:e4:
2c:59:3c:35:ee:dd:2d:f9:6b:a9:81:96:e9:03:c1:01:99:a7:
41:f3:4f:0b:8e:c6:b4:5d:8e:63:d0:62:65:62:04:db:27:7b:
b2:f4:b5:41:2f:23:16:3d:fe:c0:7e:72:df:7f:37:57:9b:7b:
2a:df:81:3c:9d:ed:7f:b5:01:95:10:95:b4:63:f6:f5:7f:db:
eb:50:81:6b:a9:31:38:f5:ef:ae:39:d7:62:f7:79:8a:2c:dd:
82:66:ac:1e:06:94:e8:9a:5a:ef:5f:8c:83:f6:b2:28:4f:be:
c6:8b:29:c3:64:cf:00:2f:3a:3f:c8:42:ca:79:c8:bf:59:eb:
6e:64:ba:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 14:03:21 2026 by rpki-client