Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
File: 0mIv3sj638pY51dcKfEOc653VxU.mft (raw, json)
Hash identifier: SF2zSf1K4kYL93V4OiOU/atLFRi+01LWshkki8d4VaU=
Subject key identifier: AA:D0:3F:40:C4:4E:03:E1:0F:75:D2:55:29:A1:FA:C6:4F:89:30:F0
Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
Certificate issuer: /CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Certificate serial: 019D39E54D254C7C7E41672C530BF5983C87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
Manifest number: 189B
Signing time: Sun 29 Mar 2026 14:00:21 +0000
Manifest this update: Sun 29 Mar 2026 14:00:21 +0000
Manifest next update: Mon 30 Mar 2026 14:00:21 +0000
Files and hashes: 1: 0mIv3sj638pY51dcKfEOc653VxU.crl (hash: mYa7e0iDJmbvrIqZXBgTm+RxpHpxHV1mPL2O2XKJUkw=)
2: 48XlQQk7zLyObitRBott5O0TEZc.roa (hash: 0iveZkv2QdOfuGHu5qZcDP2k1JFUITllYLIt0mS1hLw=)
3: JXkrwkvLZXqvLpWo6GIqE9djHow.roa (hash: pvxp7edBiYpg9R4WGN/sBmyvZQpHSdt5YdDqPGYyoLU=)
4: Jb48XUzprHRQSa7zDmEwkm8bHB8.roa (hash: UeQ11+qXjfNfzNk6IX1DTTmTHuYUChCRYnGGfuhQmW8=)
5: M4MI8IskioFX_GL9An1slOnzOXk.roa (hash: +6v5Ea5o3E61ySsVOGY9En91TXxPv4H1t9U0YnMleQI=)
6: cFUEIWQu7qe64nrzejsq3hzv3fw.roa (hash: Y5DG1bnBMtUo7Z76/zjvm84VdL7RwBfBAjPP2M8PD/c=)
7: hkFrsNhiq0TnoVB5lv6ukrym9kU.roa (hash: Lpo1dIydhWwC2a6odejRAjq7zYy9EyLkYPWh1THs0As=)
8: svxysR0fryYPn1ckppavIVkehYU.roa (hash: 8MNRRTqy3XlQo1M7+GUmMiXWjPTZpOon/19BgW0t8Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:4d:25:4c:7c:7e:41:67:2c:53:0b:f5:98:3c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Validity
Not Before: Mar 29 14:00:21 2026 GMT
Not After : Mar 30 14:00:21 2026 GMT
Subject: CN=aad03f40c44e03e10f75d25529a1fac64f8930f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:00:94:ec:95:54:97:34:4f:63:3e:0e:e8:4f:
56:a7:e5:d0:0e:17:6f:3a:33:b8:0b:80:b5:0a:33:
89:aa:09:75:98:f7:ae:63:10:66:b2:09:4f:2d:c0:
d6:19:43:54:b2:ba:d4:e2:fe:15:7a:4b:2d:30:a9:
af:a1:19:0a:97:5a:cf:12:f4:70:08:23:d5:16:c2:
08:01:66:87:41:5d:9a:77:c5:03:af:10:6b:b7:aa:
78:49:d6:42:48:53:db:96:44:40:9e:3f:34:25:24:
4d:51:b9:e2:ef:f4:9d:9b:48:ae:7a:76:66:07:d1:
e1:7e:3c:43:11:c1:e0:a4:d6:1f:ed:82:fb:0d:67:
aa:57:48:ed:85:b0:73:66:7e:28:ec:52:60:1a:be:
1d:2a:86:3f:6b:7f:9c:c5:62:84:6b:95:98:c3:15:
5a:0e:5f:7c:2d:2c:9f:81:de:44:2e:36:a6:94:5d:
67:52:38:b8:af:ee:9e:6f:43:4f:8c:e1:ad:2a:44:
c0:af:b1:e6:3b:df:2d:b7:26:50:68:0c:76:9a:00:
bb:5f:0b:2c:86:13:49:62:1c:e4:2c:72:7c:b4:0d:
16:94:c3:25:c5:db:ef:cd:b0:e9:9a:a1:ab:7b:d1:
c8:73:b6:de:2d:63:12:a3:28:8a:d7:7b:a2:d5:0c:
a1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D0:3F:40:C4:4E:03:E1:0F:75:D2:55:29:A1:FA:C6:4F:89:30:F0
X509v3 Authority Key Identifier:
keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:3f:53:b9:ef:84:7a:65:36:82:00:04:9a:50:72:bc:01:74:
de:e1:71:6e:e2:d4:8b:ae:b2:4d:b4:94:0c:e1:bf:89:4f:59:
dd:62:50:27:af:51:6f:b7:be:b6:db:72:27:f8:05:74:e3:73:
0b:d5:69:5c:ec:63:c8:6b:c2:01:40:16:58:2f:fa:db:c2:cf:
e9:d2:8e:27:2e:18:75:8c:5b:4c:93:3f:d3:cd:d8:a6:fd:ab:
38:d6:23:15:65:a5:3f:e4:9a:48:44:ef:16:b4:89:55:4a:0a:
a9:fb:34:48:7c:61:27:19:33:ec:0a:df:63:ef:f0:b3:91:5b:
44:df:4c:41:df:20:fb:91:54:21:dd:dc:43:d7:00:9e:40:40:
52:aa:c4:22:f4:5f:e0:fe:8d:36:73:e2:ab:cb:2c:20:50:70:
42:88:b4:28:0a:73:0c:cb:ad:8c:fe:fa:d7:cc:7c:03:58:92:
8a:84:ff:6d:83:3f:68:1e:5f:04:c8:70:ef:b5:44:54:95:c6:
ae:1a:1e:a7:63:3d:bd:bd:cc:99:bd:cf:4a:41:5d:98:1f:db:
5c:a0:e3:6e:d0:9e:d4:45:89:e4:23:7a:ea:51:63:d8:7e:b6:
98:06:25:a5:ec:60:2d:29:67:80:35:68:6f:4d:be:b4:6b:5a:
74:20:92:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:28:22 2026 by rpki-client