Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
File: 0mKOBpte2LRVk0O1tn9atPkiUf4.mft (raw, json)
Hash identifier: XGU8+lXC6rINwYA5RwQtQM6AEfQQM8vOtOlMTQv2HWQ=
Subject key identifier: 64:21:02:6D:1D:8A:71:9C:FD:82:BD:40:B9:C3:53:15:05:E6:59:83
Authority key identifier: D2:62:8E:06:9B:5E:D8:B4:55:93:43:B5:B6:7F:5A:B4:F9:22:51:FE
Certificate issuer: /CN=d2628e069b5ed8b4559343b5b67f5ab4f92251fe
Certificate serial: 019D389C4A72E7167E342482D0C13BD17C16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
Manifest number: 03DB
Signing time: Sun 29 Mar 2026 08:00:59 +0000
Manifest this update: Sun 29 Mar 2026 08:00:59 +0000
Manifest next update: Mon 30 Mar 2026 08:00:59 +0000
Files and hashes: 1: 0mKOBpte2LRVk0O1tn9atPkiUf4.crl (hash: oUigBpMf9WB1lIUjq8KPSLsMZrNEvmAGUdSvByZ0hPo=)
2: eypU5gakI37ZRxsTjD1X4DoOVfo.roa (hash: hM1K52QM5/jrbLf53wcNduMHGRDz/fwXSTlOlM9cG8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:4a:72:e7:16:7e:34:24:82:d0:c1:3b:d1:7c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2628e069b5ed8b4559343b5b67f5ab4f92251fe
Validity
Not Before: Mar 29 08:00:59 2026 GMT
Not After : Mar 30 08:00:59 2026 GMT
Subject: CN=6421026d1d8a719cfd82bd40b9c3531505e65983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:07:e7:0a:7b:81:7d:40:78:2c:49:e1:81:c5:
c4:1f:68:b1:43:04:12:13:76:01:ec:e1:5a:dd:e9:
d2:e2:ee:e7:5d:74:74:77:32:2d:fa:65:c5:7b:2b:
d4:c7:37:b3:2e:21:38:36:6e:c7:97:73:25:28:c7:
5a:81:70:f9:a0:ed:4d:84:89:7f:b2:97:ba:d9:25:
bd:45:31:cf:52:49:50:5d:55:4d:95:cb:e2:2c:44:
99:12:87:9a:e9:4f:75:f9:31:eb:59:34:cc:63:fe:
ee:58:2b:4c:df:d3:b0:9b:76:fb:f8:9e:ec:12:25:
42:e6:a5:a3:b0:6a:65:3d:f8:9f:52:44:42:66:37:
d2:d9:33:df:4b:70:e5:fc:03:69:f3:39:2f:6c:a7:
74:4b:ca:a4:45:32:34:46:cf:b7:68:31:44:ba:35:
50:96:23:68:58:7f:b1:49:66:9b:21:b1:3c:61:d1:
c9:d5:ed:c1:80:85:c2:26:6c:23:67:9a:e1:5d:56:
c0:52:59:95:a6:9f:80:a8:00:fc:0c:e8:35:b9:98:
7c:75:05:fd:09:e1:95:29:ca:57:d3:0a:48:41:7a:
13:c5:6e:35:45:7d:93:d6:5f:c2:ac:d6:be:2d:cd:
25:ab:86:df:67:27:e4:20:7e:1e:a2:98:ca:02:0c:
ba:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:21:02:6D:1D:8A:71:9C:FD:82:BD:40:B9:C3:53:15:05:E6:59:83
X509v3 Authority Key Identifier:
keyid:D2:62:8E:06:9B:5E:D8:B4:55:93:43:B5:B6:7F:5A:B4:F9:22:51:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b6:c6:09:1a:45:f0:f9:a9:95:7b:6f:fd:ab:18:10:63:ca:
23:48:44:b1:14:fd:ed:2e:fa:17:ad:cc:1f:a6:27:10:9a:de:
fe:bb:17:a8:30:8e:03:27:a0:b5:7a:89:51:00:e8:ab:57:76:
a2:2b:91:15:04:62:65:7d:f0:25:74:72:72:11:65:02:e2:f4:
e3:1b:eb:ae:a5:42:99:2b:48:1d:37:77:ed:61:c3:1a:0f:32:
c7:00:b6:a0:1c:26:48:7b:b8:93:d6:1a:4c:18:ac:c0:a9:d4:
82:85:f4:d3:c3:ec:14:a6:a8:d2:ae:c2:77:6b:df:4a:f7:78:
13:dd:fb:94:2f:34:c1:71:1c:8b:d6:83:79:a5:67:60:12:fc:
10:1f:41:67:a0:8a:eb:38:8f:57:67:2e:df:0d:ea:d7:af:99:
0c:0f:92:a9:99:5f:b2:4b:d3:a0:77:f6:1e:f1:1f:18:5a:78:
49:0a:56:07:a5:7c:e9:57:35:b6:af:7c:63:13:4b:53:ee:9d:
e9:e8:35:70:87:29:fd:c9:44:d0:f4:43:19:8e:13:3f:70:ae:
39:b4:82:7d:bb:e5:95:2b:30:ec:0b:81:44:99:47:47:bc:65:
2c:ee:65:88:0e:bc:9a:e3:4e:b8:e0:00:be:04:af:c0:7f:c4:
b3:e6:24:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:49 2026 by rpki-client