Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
File: 0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft (raw, json)
Hash identifier: dj/+yb3qegRCEWu4S33E/vtIU2MKP35hcF3dn0vN72s=
Subject key identifier: B4:58:0F:A7:03:C4:62:62:12:51:CE:A8:0B:86:C0:55:A4:03:18:BC
Authority key identifier: D1:6B:DF:54:38:1F:63:07:4A:DF:9A:1B:D9:77:78:77:A7:20:04:6C
Certificate issuer: /CN=d16bdf54381f63074adf9a1bd9777877a720046c
Certificate serial: 019D3789824635045E6929E66DA878912EB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
Manifest number: 0584
Signing time: Sun 29 Mar 2026 03:00:51 +0000
Manifest this update: Sun 29 Mar 2026 03:00:51 +0000
Manifest next update: Mon 30 Mar 2026 03:00:51 +0000
Files and hashes: 1: 0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl (hash: QItaupeE8jsW9Q371T0VWjp9z0EYEBEr1lkFtlcgeJc=)
2: PBy6RtlfcDlGYKQC96uBlitoIlA.roa (hash: ojEK+JsCI/EYNMzf6oz6tDrWJ6bHMpNxw4BtdlAh7Ls=)
3: b-ePuu9SrmhEXBMPt86xMQ-pphc.roa (hash: ypt0as7xpwN512+ygzUQi3tGsik5JKD0RnuDrs7wXq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:82:46:35:04:5e:69:29:e6:6d:a8:78:91:2e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d16bdf54381f63074adf9a1bd9777877a720046c
Validity
Not Before: Mar 29 03:00:51 2026 GMT
Not After : Mar 30 03:00:51 2026 GMT
Subject: CN=b4580fa703c462621251cea80b86c055a40318bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c5:34:aa:17:5d:12:70:42:e3:c3:62:d7:fc:
20:fe:17:72:3d:7b:9b:fa:82:d3:dc:4c:ea:e0:41:
25:5e:3f:e2:a0:ff:38:06:2c:35:5d:8d:97:f5:5c:
4c:63:99:cb:6c:d6:f8:0d:16:25:d2:c3:1d:23:e2:
2a:ff:19:06:bd:e5:e6:15:6f:9a:5a:5a:ec:d4:8b:
ca:6f:2f:25:93:9f:9f:86:e8:89:9a:84:b8:1f:d2:
1b:e2:1d:be:f2:ba:7a:69:07:c1:9d:b0:c5:ef:d3:
22:64:94:a0:ae:6a:50:0e:37:2c:e7:a1:67:37:85:
a3:d1:33:0d:cc:56:9f:0b:b4:6e:2c:d9:b2:12:1a:
ab:18:e0:cf:94:6d:45:23:07:7e:bc:5f:e1:f6:d7:
72:f1:65:45:87:3f:aa:15:50:59:ab:b8:e1:a7:dd:
42:79:b8:b1:6c:59:59:b4:62:72:22:1a:0e:43:16:
ec:87:48:25:0f:de:3f:39:13:26:ad:c1:04:4b:c7:
85:90:87:5a:f7:37:c9:e0:83:cd:d4:69:54:e6:78:
d7:c8:f8:9d:9a:7e:f2:b7:79:e4:fd:10:17:c4:44:
77:46:15:a6:d4:87:50:38:7c:8a:bc:30:1c:e4:6c:
f3:8f:cb:39:c8:e7:a2:74:24:49:6c:62:4e:08:79:
95:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:58:0F:A7:03:C4:62:62:12:51:CE:A8:0B:86:C0:55:A4:03:18:BC
X509v3 Authority Key Identifier:
keyid:D1:6B:DF:54:38:1F:63:07:4A:DF:9A:1B:D9:77:78:77:A7:20:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:7f:01:45:88:06:a7:53:29:94:88:7e:52:20:80:be:27:b4:
00:3a:02:f9:13:a6:6f:fc:1b:7f:1f:2e:4b:36:8b:b6:e0:49:
be:c3:60:69:0f:21:1b:93:10:6e:9d:fb:53:89:50:77:32:21:
81:c9:df:b2:12:c2:89:3a:b9:86:fa:ef:7c:80:af:31:1a:2c:
18:e1:e4:3f:c1:ba:11:68:f4:c7:31:5e:09:37:10:08:27:e9:
63:3b:72:f0:22:79:1c:a0:cc:10:62:75:0a:47:9c:d9:12:60:
a9:a0:a8:47:8c:d5:00:5e:0e:37:3c:55:4d:b4:ac:9e:bc:a7:
73:f8:86:c8:41:7d:a0:df:1b:0e:88:4c:87:ef:69:73:62:79:
ce:1b:8b:fa:b1:ce:dd:a6:c3:86:7d:c0:63:d1:32:77:9e:25:
62:31:ab:25:00:9c:ab:72:84:9d:b0:aa:1f:9e:87:18:22:bb:
63:98:3a:29:74:6d:22:d5:74:3d:08:b4:7d:5f:f0:c5:c5:a2:
18:6a:ff:cc:1c:40:9b:60:01:1b:11:b0:88:5a:17:7e:f3:5a:
d2:fe:cc:d1:4a:5b:fe:90:80:78:37:ae:15:d0:a9:1d:e3:5e:
09:15:2a:ec:f2:4d:2e:d9:8a:ad:4d:11:b7:eb:09:9c:4d:24:
2c:05:f5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:35 2026 by rpki-client