Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
File: 0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft (raw, json)
Hash identifier: opvXznbTMz4LNMrwS3Zruy/rwkQu9hgwT6I2EiLhjo0=
Subject key identifier: 43:6D:EC:B7:27:77:61:82:3B:C8:17:1A:B6:53:95:95:7A:88:F7:71
Authority key identifier: D0:DF:33:09:B3:F1:8F:BB:EC:99:9C:41:2F:DE:F1:DC:44:20:E4:2C
Certificate issuer: /CN=d0df3309b3f18fbbec999c412fdef1dc4420e42c
Certificate serial: 019D3A8AD3136680BF6F6EDF18F36A847AF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
Manifest number: 085C
Signing time: Sun 29 Mar 2026 17:01:09 +0000
Manifest this update: Sun 29 Mar 2026 17:01:09 +0000
Manifest next update: Mon 30 Mar 2026 17:01:09 +0000
Files and hashes: 1: 0N8zCbPxj7vsmZxBL97x3EQg5Cw.crl (hash: m0aZZnNDbIZfegEz3X5wtQuYNqYdmNVxgqQrk3vc06I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:d3:13:66:80:bf:6f:6e:df:18:f3:6a:84:7a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0df3309b3f18fbbec999c412fdef1dc4420e42c
Validity
Not Before: Mar 29 17:01:09 2026 GMT
Not After : Mar 30 17:01:09 2026 GMT
Subject: CN=436decb7277761823bc8171ab65395957a88f771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e0:7d:50:22:e5:21:49:02:92:14:51:15:9f:
8a:1e:21:eb:69:1d:c3:bc:aa:e4:0e:4f:aa:c2:0c:
a7:d0:a6:75:31:2f:7a:33:15:e1:77:d3:0c:3b:22:
53:e1:50:90:77:f7:18:21:e3:36:f9:dc:d6:26:15:
36:88:4f:96:b1:21:4c:c2:ce:5e:b8:ce:de:1e:0c:
e8:7d:89:1a:16:95:ff:1e:63:c0:ed:bf:f6:91:68:
2c:0c:fb:e6:10:fa:35:23:b4:fc:d8:cb:c8:e0:ff:
2b:94:40:97:11:b1:ab:4a:f6:d4:ea:02:b9:11:28:
22:3f:04:e1:13:dc:19:f2:6a:9f:ea:2f:6a:b3:d8:
39:95:2f:63:b5:49:08:78:f6:06:90:62:e8:9f:00:
85:5d:78:57:e9:2b:cc:49:5b:ef:e3:dd:3b:a4:7c:
5d:7d:2f:d4:f0:79:35:27:03:20:e0:d8:0d:ac:d5:
82:cc:01:84:d9:e5:21:89:a7:62:7b:10:1e:21:38:
5c:ea:c1:b7:55:4b:6f:99:03:24:93:ae:a5:4f:e8:
bd:74:70:f5:86:c2:77:80:3c:94:b3:31:fa:13:1a:
ec:ad:bc:1e:c7:63:77:f9:1a:62:7f:08:5c:14:bc:
f2:e4:f3:3c:df:c6:26:18:f1:bd:34:61:6d:60:44:
ce:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6D:EC:B7:27:77:61:82:3B:C8:17:1A:B6:53:95:95:7A:88:F7:71
X509v3 Authority Key Identifier:
keyid:D0:DF:33:09:B3:F1:8F:BB:EC:99:9C:41:2F:DE:F1:DC:44:20:E4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e2:a6:4c:40:1c:a5:c8:98:ba:96:6e:51:5f:3b:0a:1d:33:
4e:16:20:34:14:30:67:6d:45:08:66:ad:17:40:e5:c4:8d:54:
6f:ff:1a:11:b3:77:3d:09:08:a0:cd:6c:ff:ab:45:dc:73:54:
b2:70:cc:a8:54:77:bb:16:3a:22:92:f0:95:cf:02:f1:51:77:
76:d1:42:a9:7b:4e:cb:98:e9:d4:92:b8:4d:99:64:04:44:27:
28:1c:ee:31:fe:5a:1e:e6:ea:2b:e8:9d:e2:fb:03:bb:e9:97:
85:ea:78:64:83:23:61:3e:cd:47:0f:c9:5c:16:e1:c4:f0:e2:
20:b4:ce:11:ca:77:f7:84:06:0f:fd:69:da:91:39:b3:ee:1b:
9b:32:31:88:e3:7a:94:cc:e9:34:1c:26:59:d9:9e:af:d6:d5:
3d:e0:91:7b:f2:2d:c9:70:7c:92:50:d4:57:df:a1:2f:0f:c7:
d8:48:d5:5e:72:94:22:84:a7:6f:b8:63:d7:e4:4e:a8:5d:65:
df:f4:97:09:7f:10:55:44:62:2e:12:cd:e6:ff:45:c7:f4:29:
d9:b3:8a:de:3c:92:6a:d7:1d:1c:60:d4:ef:ab:53:70:d3:ad:
b0:30:da:b7:52:a6:1b:51:5a:25:ab:8d:2c:aa:db:70:0e:33:
fe:cf:a6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:02:02 2026 by rpki-client