Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft
File: 0PMTtkDG3nU1uB7GjEDubsmf_00.mft (raw, json)
Hash identifier: DKYOZyJ36nEgPRu5Xz1JpWN8l+ozGrLMB43V05qwKVQ=
Subject key identifier: 0E:3B:23:13:53:22:A0:BE:2C:0B:8C:0C:65:69:33:F4:CF:C3:BD:00
Authority key identifier: D0:F3:13:B6:40:C6:DE:75:35:B8:1E:C6:8C:40:EE:6E:C9:9F:FF:4D
Certificate issuer: /CN=d0f313b640c6de7535b81ec68c40ee6ec99fff4d
Certificate serial: 019D39418F8A7ED60010350375E6B3A8038D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PMTtkDG3nU1uB7GjEDubsmf_00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft
Manifest number: 09C1
Signing time: Sun 29 Mar 2026 11:01:31 +0000
Manifest this update: Sun 29 Mar 2026 11:01:31 +0000
Manifest next update: Mon 30 Mar 2026 11:01:31 +0000
Files and hashes: 1: 0PMTtkDG3nU1uB7GjEDubsmf_00.crl (hash: bMs96UXOTUl9VkgPloz0LhiHvN2azMCyhZQcqrRya9I=)
2: hGkf_qyDhU37-o9sEDt63JFfVyM.roa (hash: d3kiFkXGyIU+fZhFKa/d+1Nny2/miOmiUkEEuvkDS5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PMTtkDG3nU1uB7GjEDubsmf_00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:8f:8a:7e:d6:00:10:35:03:75:e6:b3:a8:03:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f313b640c6de7535b81ec68c40ee6ec99fff4d
Validity
Not Before: Mar 29 11:01:31 2026 GMT
Not After : Mar 30 11:01:31 2026 GMT
Subject: CN=0e3b23135322a0be2c0b8c0c656933f4cfc3bd00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f2:06:02:a5:e5:12:9e:0d:31:94:57:5c:3e:
88:26:22:27:0f:2c:bd:b6:36:6d:6a:41:cd:ca:69:
2a:cc:73:c7:43:f1:fa:5d:ec:54:31:14:12:ee:13:
bc:dd:a8:0b:21:7e:92:ea:7e:4f:90:ed:2c:07:a0:
a7:ee:91:03:bf:ac:f0:f7:89:ed:a8:a0:a1:e8:14:
be:70:b5:26:cd:be:45:b2:53:32:32:ee:29:a5:fc:
d4:d6:91:15:72:f6:30:f5:de:99:f9:e9:2f:a6:18:
2d:c1:ff:2d:03:21:9c:6d:df:2b:6d:5c:c9:b5:6f:
e5:6b:fb:cd:68:72:75:66:2a:fa:d2:e9:0c:88:7b:
c4:96:8a:29:e0:ca:98:6b:03:9b:cd:b3:06:24:1f:
f4:ab:74:e8:4d:80:74:49:07:91:fc:40:43:7c:89:
ed:d4:3e:71:2e:4f:ff:37:d7:55:86:4e:a7:13:0c:
eb:5f:28:65:18:a6:97:17:ca:81:47:28:db:17:01:
c5:7b:cc:31:83:f3:f0:c3:c9:e4:73:b0:c1:0c:70:
1f:4a:f3:b9:b0:16:c6:d1:32:a7:dd:39:d6:8e:c7:
fc:b0:11:5c:7a:b3:d5:c5:d5:88:58:dd:8f:ea:98:
ae:62:e5:53:74:42:b3:68:ab:f8:02:c5:58:cd:ef:
99:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3B:23:13:53:22:A0:BE:2C:0B:8C:0C:65:69:33:F4:CF:C3:BD:00
X509v3 Authority Key Identifier:
keyid:D0:F3:13:B6:40:C6:DE:75:35:B8:1E:C6:8C:40:EE:6E:C9:9F:FF:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PMTtkDG3nU1uB7GjEDubsmf_00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a3:e7:86:ac:78:ed:33:cb:2a:15:19:51:eb:8e:f0:b1:72:
b0:fa:56:06:53:f7:8b:28:21:4e:8f:2a:16:15:c0:99:fd:45:
e5:78:cf:0d:db:0b:31:b4:d7:d3:31:d6:a5:a7:56:21:1e:f5:
07:67:8c:f3:c9:e8:0c:79:d8:97:5d:c4:79:e1:66:4b:ad:5d:
00:cf:9d:6c:bb:9a:2a:48:96:47:fc:23:8d:c3:3d:39:a6:35:
6b:da:ef:ac:72:98:55:af:db:0a:cc:53:62:d1:c3:85:db:81:
92:dc:c5:91:8e:6d:e7:c6:31:8a:7e:29:b8:e7:d5:2a:e5:0a:
fe:a9:32:cd:3f:c0:d9:8c:f1:26:bf:5f:46:ec:28:51:b8:4c:
4a:58:ad:3d:9b:7f:c6:eb:6a:70:ab:e2:63:91:3d:68:25:e1:
59:35:64:ae:8c:19:a5:3b:35:58:2e:e8:86:38:fd:37:f8:8f:
56:a2:4c:69:cb:1a:98:fb:36:e4:b9:37:08:7d:0f:73:43:92:
44:10:4a:d0:24:d2:33:86:a9:61:9a:e8:cf:65:46:0a:4e:a7:
e5:23:9f:47:e3:9b:83:65:cb:9a:8d:b3:95:74:36:73:a4:77:
b8:01:da:c3:ac:e6:3d:7e:b4:00:02:38:6c:e6:89:cf:2a:e7:
40:7e:c2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:49:26 2026 by rpki-client