Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
File: 0u9GpBNBlOckI9VyobZtSp0uTBM.mft (raw, json)
Hash identifier: KhxTYJf2G2HIYkOpQ23FCJp+J6/iOcCVfyOFzeXpUyg=
Subject key identifier: A9:E1:F1:4B:2B:77:53:7C:F8:45:71:28:B6:44:E1:77:AD:23:D5:80
Authority key identifier: D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13
Certificate issuer: /CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13
Certificate serial: 019D382E73BB830AFD0ADC2C9AE83F3AA90F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
Manifest number: 15D1
Signing time: Sun 29 Mar 2026 06:01:01 +0000
Manifest this update: Sun 29 Mar 2026 06:01:01 +0000
Manifest next update: Mon 30 Mar 2026 06:01:01 +0000
Files and hashes: 1: 0u9GpBNBlOckI9VyobZtSp0uTBM.crl (hash: bqH+Ax73X6KsS1Zd2j2woJ0w0f811wkKQ3FEKFwRGVg=)
2: _1jwukIhOCi8MpxTLw5Kv601c_s.roa (hash: 0/3KAxQZwAWnmzvMwd4pIg6xUGZxILgfs+mT+10r3v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:73:bb:83:0a:fd:0a:dc:2c:9a:e8:3f:3a:a9:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13
Validity
Not Before: Mar 29 06:01:01 2026 GMT
Not After : Mar 30 06:01:01 2026 GMT
Subject: CN=a9e1f14b2b77537cf8457128b644e177ad23d580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ba:76:62:2c:85:30:30:ba:d1:8f:b3:85:a7:
13:ce:7a:1e:c0:ad:29:56:67:85:38:4e:2e:2f:23:
91:73:0e:3b:a7:b2:3a:7a:17:6c:3a:4b:1a:30:a5:
47:ca:cb:5b:31:25:ba:67:c0:a4:65:b5:d4:8c:92:
db:14:6a:9e:8c:bd:04:67:8c:50:2e:74:85:16:ad:
3c:f5:25:13:6f:9a:9d:5c:5a:f8:17:cd:8e:21:75:
a5:da:3e:f8:cb:39:51:f8:ea:25:0e:e0:1a:d0:06:
34:a9:cf:45:cf:fe:e2:9c:c2:ee:2e:69:9b:7e:ea:
cc:fc:01:ae:5e:a9:e7:e1:f3:a3:5b:11:0f:da:54:
bd:da:f5:f1:cc:0e:5b:c8:f4:9a:1b:8c:df:f7:06:
d4:97:7c:54:cd:dd:9f:f7:a4:97:a1:db:bc:5b:7c:
af:c7:52:0b:e6:e5:d2:9b:77:00:8e:9d:3d:d6:06:
0b:f9:8b:05:8e:f2:a6:72:bb:b0:d5:d6:b7:ac:fe:
22:b1:f1:3b:c4:41:f2:bd:3d:4d:6d:94:95:bc:cc:
47:3b:a9:a4:b6:5b:92:62:71:ba:dd:0d:40:d0:ae:
0b:7d:fb:d4:d1:f7:a1:3d:b7:2c:45:df:48:21:3c:
2a:77:9e:98:20:cb:08:ba:40:9e:ee:7d:5e:9a:b3:
a7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E1:F1:4B:2B:77:53:7C:F8:45:71:28:B6:44:E1:77:AD:23:D5:80
X509v3 Authority Key Identifier:
keyid:D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:f0:18:e6:fd:cf:24:43:72:6f:7e:cc:a3:c8:4e:d9:92:ed:
c4:76:7e:cd:5e:8f:92:2d:88:f1:fd:44:a8:7d:29:c9:8b:9b:
1a:df:ff:ec:5e:a4:a8:21:fa:05:9a:22:b2:bd:e6:cb:f5:b9:
04:7a:67:9b:f2:c4:82:c5:c9:b0:09:de:df:db:e0:2c:f1:1c:
a5:c2:4e:c1:f0:81:15:c0:a6:fe:c3:93:7c:e2:92:ee:ce:7e:
e1:d0:4e:ed:9e:ee:39:06:9b:c5:79:ca:83:da:c2:d3:6a:72:
4f:ef:a2:7a:52:5e:75:da:fd:75:61:7f:ce:71:73:ef:73:d1:
88:81:56:ad:cb:81:0e:6f:ed:a4:65:dd:2d:63:17:11:f3:8d:
ff:d0:c9:9c:5c:c5:6a:22:85:09:bc:5c:d7:db:6e:e6:21:e8:
b9:29:9d:78:3b:81:64:88:9e:15:88:8d:56:87:50:8f:3c:ea:
f1:ad:08:cd:45:9a:58:32:51:c8:4d:8d:b5:ee:eb:32:3e:43:
ad:dd:77:e9:69:6e:21:53:48:e3:b7:7f:ae:c3:00:0d:90:21:
5c:14:fc:82:53:f1:19:cb:84:e3:ee:82:f0:7b:3f:61:77:fc:
58:73:5c:dd:6d:7e:5b:a9:a1:ab:d7:0a:f8:fc:bb:36:7b:58:
26:8e:96:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:15:20 2026 by rpki-client