Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
File: 0haCh3tsivdeJ2DPhUDnhFLUvsA.mft (raw, json)
Hash identifier: eZzx+J4O8WB6Ut50xAEbf4EoFhxXO6QVca1jsmR+2Yk=
Subject key identifier: 93:58:07:0E:D1:EE:6D:1E:01:9A:2A:90:B6:9D:7E:6B:E3:E6:80:03
Authority key identifier: D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
Certificate issuer: /CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Certificate serial: 019D38668000E46EAB368E0862DD24E9B214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
Manifest number: 0DB2
Signing time: Sun 29 Mar 2026 07:02:14 +0000
Manifest this update: Sun 29 Mar 2026 07:02:14 +0000
Manifest next update: Mon 30 Mar 2026 07:02:14 +0000
Files and hashes: 1: 0haCh3tsivdeJ2DPhUDnhFLUvsA.crl (hash: wcNXQxPRk5DmzaG92XgCAahcr1M6qSINcstnEdh0G3I=)
2: NiVW-1DlGr5hCTPyCnLWhfcQSJ0.roa (hash: P0xJoWIH1C9Cod99ksa8hxvCHok9B+UC8X73hnLeN0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:80:00:e4:6e:ab:36:8e:08:62:dd:24:e9:b2:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Validity
Not Before: Mar 29 07:02:14 2026 GMT
Not After : Mar 30 07:02:14 2026 GMT
Subject: CN=9358070ed1ee6d1e019a2a90b69d7e6be3e68003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d3:c1:2c:ee:cc:63:1e:19:e0:35:38:03:a7:
38:90:85:5c:26:3e:5b:f8:e2:dc:ca:11:56:41:c9:
5b:b6:26:75:61:fb:81:eb:f5:fa:17:81:9f:04:f7:
2b:18:1c:bd:62:83:b4:66:c5:68:cf:c0:00:a8:fc:
f6:df:4c:a5:95:5e:fc:c1:9c:e9:b7:97:b7:97:06:
44:11:a8:3c:8c:ee:0c:41:4a:bb:86:14:56:a3:9a:
3f:e9:03:7c:52:bf:17:a0:af:dd:bf:ce:e7:9b:e9:
ad:3b:c7:dc:25:f7:34:99:aa:29:c1:2a:6a:d0:2c:
b2:00:78:07:8e:ca:33:d4:e2:da:c0:9a:fe:6e:75:
b1:ed:4e:80:f1:a3:26:3e:b1:47:5f:c2:79:33:cc:
ea:28:57:61:ec:af:16:20:54:ff:44:e3:95:3c:21:
09:cd:36:54:5e:b2:ba:ce:c9:13:5f:90:28:ae:ac:
bc:29:6c:fd:a6:74:a1:a8:c1:2a:16:61:2b:16:bc:
44:e5:89:aa:da:48:bc:b2:42:eb:66:f6:02:d4:20:
6f:25:96:a0:fa:b4:c4:e5:86:04:e3:c9:29:b4:06:
4f:39:2c:3a:40:59:7f:f6:de:23:00:3b:39:da:a0:
80:b3:5b:bc:6f:68:69:7b:44:e7:13:da:2b:73:4b:
81:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:58:07:0E:D1:EE:6D:1E:01:9A:2A:90:B6:9D:7E:6B:E3:E6:80:03
X509v3 Authority Key Identifier:
keyid:D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:90:af:0d:86:e6:bf:9a:8c:00:85:30:6f:c6:db:d3:a7:a9:
33:22:55:3b:f4:01:da:38:1b:b9:0c:d5:c1:e8:36:de:26:37:
56:77:e3:f5:ac:bd:69:31:2f:fa:59:8c:a6:99:5b:e6:6c:54:
af:44:85:4b:7d:98:68:e8:06:ed:45:db:39:ad:95:ed:ff:30:
d0:1c:90:7f:85:9d:0c:89:ac:cf:ee:b1:d8:98:a4:3d:19:2d:
7e:a2:90:51:c5:9b:ab:16:7e:cf:26:83:11:2b:0b:8d:3c:35:
6e:0a:90:25:b4:d0:a2:11:2a:84:e0:94:14:85:67:04:c5:a7:
e2:a0:2c:42:c9:a7:8f:bf:a0:1c:76:ea:1f:c9:e2:56:f3:bf:
e3:05:23:fb:56:66:01:c5:ff:bc:f0:e7:5d:46:b9:bf:a3:b7:
ed:1a:08:e5:87:7a:61:18:36:ac:d8:62:1d:f3:78:81:b9:8e:
6d:74:ff:e2:bf:6a:5f:ed:68:b0:4d:73:0d:6f:cf:38:2d:f8:
12:a6:f8:94:23:ee:30:b1:cf:1c:ec:c8:e1:6c:4e:f5:a8:81:
18:68:e9:e4:21:b4:e1:4d:c0:66:5a:b2:4a:a5:94:35:9a:24:
a5:31:f2:79:a7:c5:4b:9a:d8:8c:12:2b:45:8a:54:4a:21:97:
55:f1:6d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:14 2026 by rpki-client