Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
File: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft (raw, json)
Hash identifier: ySo8eW/7ISh4m6UTGfYBzg1NQ1bsWzaPD8bY6PGd2cA=
Subject key identifier: 69:1B:E1:9F:38:E3:2E:57:D3:C6:55:D9:5D:9E:F4:9E:33:41:74:17
Authority key identifier: D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
Certificate issuer: /CN=d031655023bd141731d56fb8453ff0514f728865
Certificate serial: 019D38D3228EC75ED491F8E04257A1F3E019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
Manifest number: 1546
Signing time: Sun 29 Mar 2026 09:00:54 +0000
Manifest this update: Sun 29 Mar 2026 09:00:54 +0000
Manifest next update: Mon 30 Mar 2026 09:00:54 +0000
Files and hashes: 1: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl (hash: qDJo5D727jUOGNlu4ZoNqfC3a7hSPHWklNTVMJe3y2Q=)
2: 3AB4ABWLvkMBLhXbVPQ47Et_IPE.roa (hash: 7TTeY9RzcNuOB9ePCi+NTRAM5DwBMiMi62WzvEoHHl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:22:8e:c7:5e:d4:91:f8:e0:42:57:a1:f3:e0:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d031655023bd141731d56fb8453ff0514f728865
Validity
Not Before: Mar 29 09:00:54 2026 GMT
Not After : Mar 30 09:00:54 2026 GMT
Subject: CN=691be19f38e32e57d3c655d95d9ef49e33417417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ba:53:0d:61:29:4b:7a:e0:86:c0:ee:3e:98:
4f:09:f4:70:4d:83:40:11:f2:58:c9:16:5d:ee:0b:
13:3e:b4:a7:45:1a:12:10:1b:f1:ad:25:a7:c5:47:
d3:91:91:ce:63:ee:79:77:25:71:9d:52:1b:22:13:
5b:b4:b0:cf:d2:17:89:27:44:b2:73:20:f8:a5:50:
33:49:c2:8f:0b:e3:95:42:b6:3f:d6:4c:e3:7e:20:
45:dc:64:a9:b4:d2:53:c6:a1:dc:8b:31:64:29:ff:
88:86:42:4e:4d:74:b1:df:8b:1e:0b:7e:05:18:72:
d9:48:df:c5:b8:34:3d:a9:a0:64:ab:45:ba:89:dd:
86:53:24:09:62:77:46:66:43:b8:72:23:25:cd:2a:
80:d0:b5:58:5d:80:66:04:a0:02:d7:38:22:bc:5c:
d5:22:55:d8:85:43:43:d3:6b:68:ad:3e:8e:8f:24:
1c:1a:bb:f9:08:31:83:86:8f:51:45:67:4e:ed:92:
c0:c4:1b:a5:28:7e:69:77:ff:b3:71:e7:49:f3:4f:
00:10:83:d8:de:bd:16:71:6d:95:66:e5:a1:85:63:
5a:95:02:a2:0f:1f:67:bd:c8:58:27:43:c1:c6:00:
35:a0:c3:5e:49:84:45:c9:79:6d:92:f6:cb:6e:e0:
81:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:1B:E1:9F:38:E3:2E:57:D3:C6:55:D9:5D:9E:F4:9E:33:41:74:17
X509v3 Authority Key Identifier:
keyid:D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:27:fd:f9:d0:76:3f:e4:98:34:7b:8f:e6:55:77:1b:59:cb:
1b:fa:3d:2f:25:10:4a:e3:29:70:58:ac:ee:67:e9:17:cb:49:
25:86:94:2a:c2:72:b1:4a:fc:ac:35:ea:3a:b2:ba:47:cb:7f:
ca:02:15:31:1e:ed:fa:98:cd:53:fe:0c:9d:9a:fd:51:71:85:
2a:9b:ef:8b:dc:b2:60:8d:6a:5d:79:ab:cd:93:82:bc:3f:36:
7d:7d:43:58:00:e6:1b:a0:30:c0:d0:5a:be:f5:3a:23:ce:0e:
7b:88:d0:b9:10:18:6e:6e:ac:93:70:cc:e4:68:39:8c:ae:bf:
81:61:bd:8b:18:f6:c7:92:af:2e:d0:11:fd:b4:46:7a:2d:08:
7f:e3:63:26:d3:43:9c:de:df:9c:f1:00:7e:09:3a:73:cb:2c:
f2:26:b5:c7:eb:a5:7a:d0:40:3b:80:8d:e0:23:36:92:76:ea:
bc:b5:ff:46:b3:a6:dd:24:a7:08:e2:8e:40:3e:ae:b8:fd:86:
86:cc:c7:49:01:72:cd:26:87:df:8a:66:44:80:db:0e:0c:90:
1d:b2:97:f9:6f:78:5e:c1:9e:a6:82:f7:3e:9e:73:67:c9:39:
04:59:16:6f:9f:69:56:cc:9b:40:6b:34:ee:99:2d:45:2a:4d:
85:b0:11:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:43:14 2026 by rpki-client