Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
File: 0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft (raw, json)
Hash identifier: Vg3A3kkLs53YVLV/rOufdSR41wGpScybYhEj2EgRr9M=
Subject key identifier: 0B:5E:29:FF:FE:F3:74:88:3D:4E:19:97:C4:7C:C4:F9:5C:7B:6F:61
Authority key identifier: D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08
Certificate issuer: /CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
Certificate serial: 019D38D364289E658A10CABA73A9FA6DADD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
Manifest number: 1643
Signing time: Sun 29 Mar 2026 09:01:10 +0000
Manifest this update: Sun 29 Mar 2026 09:01:10 +0000
Manifest next update: Mon 30 Mar 2026 09:01:10 +0000
Files and hashes: 1: 0NhTEIhVVHGuhHppc2WhR24nfps.roa (hash: UAiJiA/nFpUR+80xJrPSC3HfZCrrUkoKtrqsQ8RFQsc=)
2: 0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl (hash: 8KpPWWtBYltMEfA7VenZGXgAZLar+X5ciByYdG23cWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:64:28:9e:65:8a:10:ca:ba:73:a9:fa:6d:ad:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
Validity
Not Before: Mar 29 09:01:10 2026 GMT
Not After : Mar 30 09:01:10 2026 GMT
Subject: CN=0b5e29fffef374883d4e1997c47cc4f95c7b6f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fe:82:bb:bf:83:75:5b:11:3a:9d:f7:a7:96:
b2:93:e3:88:82:32:54:d2:1c:44:6c:41:6b:73:0d:
76:97:b7:df:25:d6:2e:3e:29:fc:f2:69:8b:16:dc:
dc:7f:30:10:87:80:db:f1:25:93:19:77:57:a8:61:
91:45:ad:ae:e0:aa:cc:a1:02:33:9a:b9:12:c7:6a:
96:0f:31:51:15:ac:ae:cf:a0:f0:29:d5:d2:63:6d:
26:71:57:b1:85:0c:fe:69:34:15:a1:66:86:90:c4:
f2:1b:60:35:e2:d8:ef:27:31:1e:ae:05:7c:94:33:
76:32:9f:c2:2a:12:d6:7e:3a:9d:99:cf:cc:73:56:
0a:e6:65:80:4d:bf:ff:77:50:63:a1:7a:d6:e9:98:
15:e7:ee:aa:9a:ef:c1:ad:e1:ee:66:3f:0d:19:41:
87:42:0e:96:7e:2a:4b:88:a1:ab:7a:c2:c2:d2:9f:
ac:19:e5:d0:23:fa:8c:27:e1:92:77:ba:78:6f:6c:
75:da:19:84:0d:b9:da:c1:bf:fb:e8:38:8f:de:91:
60:e0:04:38:0c:5f:aa:60:05:03:6d:71:cd:98:48:
28:a5:a7:bf:ff:14:ae:2c:92:49:08:bd:c6:fd:3d:
fb:74:4a:d1:72:0d:6e:0d:7b:0c:00:3b:d2:bc:dc:
60:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:5E:29:FF:FE:F3:74:88:3D:4E:19:97:C4:7C:C4:F9:5C:7B:6F:61
X509v3 Authority Key Identifier:
keyid:D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:9b:30:ed:ac:84:43:54:77:b7:a4:a4:5b:b9:87:46:cd:32:
d8:03:aa:f7:d3:2f:4c:9a:97:fa:fd:1d:62:33:7f:21:4e:c6:
a1:e6:ab:47:e7:70:b4:e9:01:e7:dc:cc:33:21:bc:cf:13:5e:
5e:ef:df:cb:0e:52:d3:f5:08:0e:ad:43:e4:e5:94:25:0e:57:
a9:4c:e3:f4:ee:fa:3c:2a:7f:07:51:72:c8:f4:49:fd:8d:88:
a0:df:4d:21:ac:cc:cb:1f:bc:df:3a:c4:3a:53:99:3f:be:b8:
6b:3a:a9:a2:c5:f3:8d:ff:31:97:e7:e9:91:4f:1b:95:a7:b7:
1d:97:3d:af:22:84:49:e2:e6:cf:f6:11:a5:04:96:11:f1:f5:
fd:f7:59:2a:a9:de:bc:88:49:91:8d:2d:f1:4b:6a:77:33:5c:
81:66:52:da:88:91:5a:88:85:47:0d:a3:a3:97:73:20:71:0e:
62:1f:a6:d2:7e:ec:82:57:37:8a:fc:94:e1:8f:0d:ee:30:11:
25:96:d8:4c:e5:6d:9f:4d:ab:33:b2:93:fe:b9:7e:a4:da:dc:
96:57:90:bc:83:84:d7:6e:98:09:47:36:d3:36:f5:e8:86:46:
e4:f3:0e:ec:a2:e5:1c:c7:29:61:86:ef:23:e3:d2:de:8b:7f:
74:a8:ad:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:02:39 2026 by rpki-client