Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
File: 0QOvGXZFpJQcbNsIZprwCLeRAr4.mft (raw, json)
Hash identifier: LeaK0EztorH+UI+OApfXuZ9aKiRkgf3irGeweUFoXjA=
Subject key identifier: 43:DA:C8:DC:53:36:89:C3:96:C0:C5:BB:FD:B4:7B:FB:75:22:A7:F6
Authority key identifier: D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
Certificate issuer: /CN=d103af197645a4941c6cdb08669af008b79102be
Certificate serial: 019CE447D6FEA0311D5D195C0EAAE24ECC8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
Manifest number: 11D5
Signing time: Thu 12 Mar 2026 23:00:39 +0000
Manifest this update: Thu 12 Mar 2026 23:00:39 +0000
Manifest next update: Fri 13 Mar 2026 23:00:39 +0000
Files and hashes: 1: 0QOvGXZFpJQcbNsIZprwCLeRAr4.crl (hash: esCMPTORdeMDarL6QKLSY6miX+JO6vwXqHOvJ0iHpD8=)
2: IKgcyvSIA45izSMf7tUqa3g6d94.roa (hash: bRbSeQALCJ6vQauwQMiodJiLk0I/cBj0aUju5c7LVIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:47:d6:fe:a0:31:1d:5d:19:5c:0e:aa:e2:4e:cc:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d103af197645a4941c6cdb08669af008b79102be
Validity
Not Before: Mar 12 23:00:39 2026 GMT
Not After : Mar 13 23:00:39 2026 GMT
Subject: CN=43dac8dc533689c396c0c5bbfdb47bfb7522a7f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:87:0f:a0:41:b5:ab:70:69:56:3c:eb:26:e2:
52:d5:55:38:f6:46:74:f9:d6:59:99:0c:ba:11:fb:
2e:46:d5:bf:bb:94:5d:88:48:e3:81:8f:a6:c6:34:
48:00:9b:ac:f6:32:e5:02:e2:dc:da:1c:8e:23:1b:
c8:b1:18:fa:67:29:f3:50:be:74:9d:db:72:8c:07:
50:41:aa:43:87:d8:9e:91:8b:3a:1e:bd:64:be:55:
73:eb:64:ab:36:95:7d:51:2c:74:74:80:df:42:db:
d9:5a:ff:80:25:1f:34:1a:39:24:b0:00:02:38:1c:
4f:a9:87:c7:13:7a:da:cf:ae:84:1f:df:7b:3c:be:
53:0f:bf:39:5f:14:67:b2:95:1f:0a:f3:fd:d3:11:
1f:62:6f:ac:7a:28:ac:41:33:9a:d5:bd:71:cb:bc:
49:f9:36:e1:9b:69:4e:ad:b0:f3:f4:a9:9b:44:54:
b9:52:e2:02:ad:40:ca:20:68:8c:8b:0e:98:46:58:
f2:0e:cd:a1:97:2b:88:01:47:bf:09:5e:78:5a:0c:
43:a7:5b:75:3c:36:c5:bd:53:22:5d:fa:fc:f2:8b:
85:88:a4:3f:90:ff:cc:92:8d:48:22:4b:fe:55:4e:
aa:e9:97:c4:8a:1d:52:49:03:c0:5b:9c:bf:10:82:
a4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DA:C8:DC:53:36:89:C3:96:C0:C5:BB:FD:B4:7B:FB:75:22:A7:F6
X509v3 Authority Key Identifier:
keyid:D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:80:4b:7a:a5:ed:92:d2:52:6e:4f:11:45:c7:cc:0a:4a:8d:
90:56:21:b7:7d:06:d5:2e:3d:3c:e4:6e:18:3d:78:8b:c2:84:
10:db:6b:f5:58:80:5a:26:1b:b3:13:e6:22:5b:3b:63:84:fe:
25:77:dc:a8:27:96:e4:f3:40:f6:d8:71:19:f4:15:84:96:3a:
4e:b3:36:d2:7f:9c:fb:42:c1:1d:9b:37:4f:61:dd:8c:ea:0f:
3c:88:cb:df:59:ff:c4:6a:c9:45:39:52:0b:27:f4:ce:19:de:
e5:aa:37:a4:74:e7:0f:e0:26:c2:21:67:71:85:da:50:20:6e:
a1:da:8f:70:c1:81:1f:76:c8:fd:09:60:27:ab:1a:61:9c:87:
7a:49:5e:ea:13:35:79:74:9c:a7:b9:63:32:6d:0e:58:f6:99:
94:86:6d:58:d9:12:19:4b:6b:a1:b6:59:90:86:1e:d5:b0:d2:
19:65:f2:b5:67:3a:d2:a4:b2:25:b2:71:df:3f:b7:b1:23:38:
af:42:9f:a6:17:d1:a6:60:15:e9:5e:aa:48:16:08:8a:d7:91:
9f:0e:43:dc:53:39:b4:5f:6c:62:13:3a:2d:7c:64:5c:b8:d5:
17:4b:92:e9:92:4b:2e:6b:1d:a5:85:59:e8:4a:5a:54:7a:92:
42:74:9e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:04:07 2026 by rpki-client