Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft
File: 0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft (raw, json)
Hash identifier: 4RnAyh6hXSu4xMCqqJClrqQ3QwKtGd8iH4qN+5N08oo=
Subject key identifier: 19:BF:64:E0:A3:D5:B2:63:D7:03:0E:14:B7:DA:B7:D7:26:FC:FB:3D
Authority key identifier: D2:D3:8F:45:97:05:1B:6C:0D:DF:1B:B8:66:AE:4E:94:70:3E:15:5E
Certificate issuer: /CN=d2d38f4597051b6c0ddf1bb866ae4e94703e155e
Certificate serial: 019D386554AEBA7F9BFD8F7BE560EA67632C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 07:00:57 +0000
Manifest this update: Sun 29 Mar 2026 07:00:57 +0000
Manifest next update: Mon 30 Mar 2026 07:00:57 +0000
Files and hashes: 1: 0tOPRZcFG2wN3xu4Zq5OlHA-FV4.crl (hash: 21YXOYS6VAJGTvyeWMtfGBA++zms1q7S5NvPUcGyo20=)
2: qKlROkZlk3DYFTmipBNFAH2SseM.roa (hash: 4ZEDkg/LHUGlc95hTTGad49qSD826UApgpQuVs6AZok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:54:ae:ba:7f:9b:fd:8f:7b:e5:60:ea:67:63:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2d38f4597051b6c0ddf1bb866ae4e94703e155e
Validity
Not Before: Mar 29 07:00:57 2026 GMT
Not After : Mar 30 07:00:57 2026 GMT
Subject: CN=19bf64e0a3d5b263d7030e14b7dab7d726fcfb3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:54:b2:dc:ce:46:71:9e:24:6c:11:49:5d:b5:
83:46:a2:a6:e9:3b:af:d7:06:1e:96:77:84:e6:7e:
d5:c2:b6:87:41:cc:86:81:9f:ae:80:8e:8e:5a:53:
18:3c:23:1d:0d:6e:1e:cf:32:03:2a:ae:96:da:f2:
42:1e:40:26:c6:87:c0:17:c6:d9:af:49:09:86:23:
aa:ab:d7:a6:28:42:ab:e5:31:9d:1f:68:93:2c:0a:
46:3d:de:e8:e4:f9:bb:c2:6c:46:67:63:13:1d:23:
90:78:2b:31:53:4e:53:97:54:33:0c:2f:d0:5b:26:
9b:8f:46:74:9a:d1:ee:2c:77:79:46:27:89:70:5a:
12:43:0d:c0:50:d1:ce:85:00:9f:1f:49:86:b9:d7:
ed:06:a7:f6:91:03:6e:85:8a:10:25:eb:f0:b0:85:
00:dd:cb:68:95:3b:4a:2c:8d:ca:cf:a7:d5:a8:c1:
35:c8:1a:f7:94:3f:a1:97:a9:99:f4:e6:81:f9:76:
0e:e3:b8:11:a2:1a:cc:c6:76:e9:e5:6c:cf:18:ee:
08:35:98:04:61:c2:d4:0c:fa:f9:fc:da:c8:c8:1e:
78:fd:10:bb:9b:e4:6a:97:f6:31:ba:97:ef:65:a0:
d1:89:f4:85:78:07:1e:bd:59:ab:d1:6f:4a:49:4f:
bf:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BF:64:E0:A3:D5:B2:63:D7:03:0E:14:B7:DA:B7:D7:26:FC:FB:3D
X509v3 Authority Key Identifier:
keyid:D2:D3:8F:45:97:05:1B:6C:0D:DF:1B:B8:66:AE:4E:94:70:3E:15:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:b4:73:a0:4d:d4:20:61:77:d1:10:86:15:dd:0d:c3:8c:b1:
1d:07:98:94:cd:53:45:d1:59:15:6f:de:93:d6:a3:52:66:10:
4f:01:97:36:45:29:1d:b1:c0:4c:5d:1f:66:2e:51:f0:a4:4a:
8b:78:b1:c5:46:68:60:1d:e6:7f:cc:03:6c:2e:63:4b:4b:06:
f3:98:3a:85:f9:eb:68:90:1f:e0:f8:c7:0a:6e:7e:5e:ee:93:
d2:96:52:1e:48:bd:ee:db:86:98:9f:54:7b:1e:cd:b4:15:94:
1b:80:e9:71:aa:36:56:bb:ed:80:54:07:aa:3c:9d:70:d8:26:
72:65:be:35:f6:e9:ed:c2:40:17:5b:da:cb:a2:8e:d6:7b:c3:
71:4b:b9:bf:8a:a1:51:2c:fa:df:d0:7c:53:13:47:8d:79:21:
65:d7:e7:52:12:60:c2:8a:98:5e:2f:8b:79:a7:2e:7d:7f:c3:
33:4b:a7:c3:92:81:2c:72:7c:f8:0d:35:c0:2c:c0:fe:f2:ff:
0e:0b:1c:7d:8f:80:30:ab:28:a0:8f:bb:21:58:6b:c0:73:fe:
21:79:26:8f:14:02:55:a0:d3:16:aa:d8:1f:ff:94:93:6b:e1:
40:3c:be:25:7a:48:aa:df:e4:8c:49:39:c7:cb:08:6c:98:ce:
9a:b5:70:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:57 2026 by rpki-client