Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.mft
File: 0IaqHaAvZwEYCywDQdYDB_FKLL4.mft (raw, json)
Hash identifier: b5pX1DqjjoQzWj6cXefpMUkRhCFxfCn6CmZDpSVJlfM=
Subject key identifier: AD:7F:37:0B:CF:6E:3B:49:B0:63:F5:E8:8D:B7:B0:AB:AD:DF:BE:35
Authority key identifier: D0:86:AA:1D:A0:2F:67:01:18:0B:2C:03:41:D6:03:07:F1:4A:2C:BE
Certificate issuer: /CN=d086aa1da02f6701180b2c0341d60307f14a2cbe
Certificate serial: 019D39E5B5CC476C7B45CFE83E2514B258B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0IaqHaAvZwEYCywDQdYDB_FKLL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.mft
Manifest number: 28
Signing time: Sun 29 Mar 2026 14:00:48 +0000
Manifest this update: Sun 29 Mar 2026 14:00:48 +0000
Manifest next update: Mon 30 Mar 2026 14:00:48 +0000
Files and hashes: 1: 0IaqHaAvZwEYCywDQdYDB_FKLL4.crl (hash: +Tqf/CpSsqwTFVqqB6ZeEw2iUlU3+famMibqvZf6Kgc=)
2: 3A95eT0-F8FWn0aRvaXeJYEs4vU.roa (hash: LYh5oBJnNPibPoXaGK/ua+lzHz0SVEi30h9T4GjLlU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0IaqHaAvZwEYCywDQdYDB_FKLL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:b5:cc:47:6c:7b:45:cf:e8:3e:25:14:b2:58:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d086aa1da02f6701180b2c0341d60307f14a2cbe
Validity
Not Before: Mar 29 14:00:48 2026 GMT
Not After : Mar 30 14:00:48 2026 GMT
Subject: CN=ad7f370bcf6e3b49b063f5e88db7b0abaddfbe35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:78:ea:4f:90:16:51:b9:2c:65:d0:be:6d:9f:
d1:fb:b3:04:92:ad:14:94:c6:b0:c2:bc:52:90:9c:
c8:2a:1a:4f:df:68:62:61:88:09:cf:61:74:22:66:
8b:92:8b:1b:a5:c5:44:6c:50:03:7e:71:62:19:7b:
37:dd:c7:f5:fa:1b:a3:fe:56:30:5d:b9:db:b7:42:
c1:cd:c8:15:35:ae:0f:81:7b:6d:98:d5:a8:7f:44:
00:7a:7f:7d:ac:82:6a:4c:ea:fc:e7:2c:a5:2a:b3:
c5:6b:bc:38:cd:fd:31:ea:aa:36:4f:ff:82:9c:8f:
91:ad:cd:e6:dd:bd:f1:39:c4:dd:68:53:f6:dd:fb:
cc:f3:a3:ba:f8:ad:f6:1b:09:b5:a8:e1:9b:27:a7:
b7:36:b2:fd:8b:a1:eb:96:97:27:d3:74:a1:0d:96:
f3:84:9b:11:00:d4:ea:99:85:fe:56:21:68:c7:90:
52:40:c2:af:79:34:f2:80:0a:77:cd:cc:46:20:7e:
37:ed:04:da:c2:cc:cc:67:a8:1c:16:39:a2:11:36:
07:36:f6:7b:a5:31:97:05:75:ef:42:50:86:ee:75:
f2:71:07:41:ec:3f:76:45:b9:fd:2c:f7:af:2f:c9:
76:b0:0e:3f:9c:81:ad:54:ac:3b:05:55:c9:9e:2b:
5c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:7F:37:0B:CF:6E:3B:49:B0:63:F5:E8:8D:B7:B0:AB:AD:DF:BE:35
X509v3 Authority Key Identifier:
keyid:D0:86:AA:1D:A0:2F:67:01:18:0B:2C:03:41:D6:03:07:F1:4A:2C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0IaqHaAvZwEYCywDQdYDB_FKLL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:58:fc:8e:97:04:47:8d:53:a3:e2:01:c7:1f:d2:90:73:c0:
22:c7:c4:81:a0:94:69:54:f0:ec:1d:97:6a:2c:72:8d:d1:d4:
c2:6a:b9:aa:bf:af:87:bb:19:0c:a9:4a:e9:6b:06:64:bd:c1:
0e:63:26:86:e7:dd:85:e2:bc:99:42:ab:b3:87:54:d0:fa:81:
26:b7:86:76:65:7f:35:5e:f6:47:32:16:db:cb:2b:6e:94:c7:
80:3d:96:9a:c1:a5:bf:b7:6c:46:4b:b2:6c:96:86:06:6a:e0:
8c:2d:f2:5e:2a:d1:e9:22:58:2c:0f:9a:d7:f2:3b:f0:4b:fc:
16:a9:da:8e:22:c3:57:f4:94:e7:07:8d:ce:0a:55:03:dd:8f:
f9:0d:9f:64:5f:22:6f:17:15:df:2d:af:01:63:3c:b8:9b:48:
23:86:36:1d:bc:06:57:20:cd:8f:b9:50:d4:0e:ca:6e:10:8f:
6b:b8:7c:11:c5:56:cb:bf:22:00:09:f2:a0:5b:7d:c4:2b:31:
ab:6b:b6:c3:9a:28:5d:f2:4b:79:59:fc:fb:44:9c:39:87:41:
96:50:05:ff:42:76:c7:90:d3:bf:6e:a8:4e:b0:00:a1:5a:ea:
63:53:f8:a1:10:96:40:5e:c5:ab:7d:fb:f1:43:59:b6:b4:1e:
3d:f9:eb:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:30 2026 by rpki-client