Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
File: 0uQqWD-iUbQyz8HcqL00HVBmC5U.mft (raw, json)
Hash identifier: 8gyM8kL21SdPYGDwK1yqoUj9yi/QT7wxK4b1NxHpR7w=
Subject key identifier: C5:90:3E:3B:D2:5A:29:D2:51:90:97:D9:3D:E4:3B:B4:E9:A1:D4:5F
Authority key identifier: D2:E4:2A:58:3F:A2:51:B4:32:CF:C1:DC:A8:BD:34:1D:50:66:0B:95
Certificate issuer: /CN=d2e42a583fa251b432cfc1dca8bd341d50660b95
Certificate serial: 019D37C057A6221253E2AF07D3D471895C32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
Manifest number: 0FDE
Signing time: Sun 29 Mar 2026 04:00:45 +0000
Manifest this update: Sun 29 Mar 2026 04:00:45 +0000
Manifest next update: Mon 30 Mar 2026 04:00:45 +0000
Files and hashes: 1: 0uQqWD-iUbQyz8HcqL00HVBmC5U.crl (hash: OMNjSiycRjVpAHgUSTaZQJ2fGDgfqDSYEhkJkAwamsA=)
2: q5abuoJZ1lm7pVfvA-IRNmZlgVc.roa (hash: 7Qb1m3fC7oeeHX74Shhd+okw0uSYANuxfkJI/afC/Y8=)
3: sAohPtqx4W8kbrtZbUQNGGMPcSE.roa (hash: apcfGmWEVMl7UGdf8o+sQrkZqcdAwR7qpF48CSMj6SI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:57:a6:22:12:53:e2:af:07:d3:d4:71:89:5c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e42a583fa251b432cfc1dca8bd341d50660b95
Validity
Not Before: Mar 29 04:00:45 2026 GMT
Not After : Mar 30 04:00:45 2026 GMT
Subject: CN=c5903e3bd25a29d2519097d93de43bb4e9a1d45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1f:e6:7f:a4:d5:30:28:f8:b9:d5:01:b8:0a:
a1:94:1a:b1:7b:04:b8:be:aa:96:d6:ef:b5:ef:b4:
0d:dd:4f:76:58:95:5f:04:15:34:b6:36:cd:a2:d4:
01:76:02:c6:29:f5:f6:70:df:83:87:2a:e1:f8:d7:
1e:f8:9e:0f:24:58:38:47:ba:38:65:95:cf:7c:86:
5e:9b:65:a2:7c:95:8c:93:88:d1:c1:b8:7f:ec:35:
e2:7b:24:85:c3:f4:de:4f:82:c2:d9:fc:16:5c:6f:
4e:32:f2:9e:8f:73:ce:95:db:ea:00:e0:83:38:b0:
91:1c:79:cb:83:51:ae:1b:9b:89:67:d8:47:7a:79:
e2:fd:d8:11:70:fb:a9:f6:b8:2e:9d:cc:13:5b:bf:
14:f6:ea:0f:ad:86:c7:24:fa:0a:37:60:c5:8c:03:
ce:fb:79:56:3b:d8:72:5d:11:5b:86:7d:86:e5:12:
04:2d:c9:38:fa:6f:ba:ae:3c:ca:eb:47:8e:64:07:
3e:bd:f1:04:b5:5e:bc:89:80:0e:e8:b2:a4:57:9c:
d6:bd:c9:52:29:36:51:fc:34:9c:c4:53:8d:1a:bb:
10:82:13:cf:a3:3b:a1:44:c0:c2:50:ae:c2:5a:ec:
9f:6e:c0:57:cc:c0:1a:02:7a:3d:d7:23:0c:b7:43:
f6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:90:3E:3B:D2:5A:29:D2:51:90:97:D9:3D:E4:3B:B4:E9:A1:D4:5F
X509v3 Authority Key Identifier:
keyid:D2:E4:2A:58:3F:A2:51:B4:32:CF:C1:DC:A8:BD:34:1D:50:66:0B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ea:f2:27:85:fb:59:de:e0:84:21:d8:05:36:7c:5c:07:10:
75:b5:4b:80:43:b9:38:48:85:eb:8a:fa:3c:ae:71:4d:6a:f7:
e5:42:7a:d8:ea:50:e7:e7:34:86:d7:0c:4f:58:79:21:76:6c:
b3:f7:2f:06:7a:06:6d:d8:ee:b1:6b:f5:c9:54:0f:2e:6b:ee:
e1:63:ca:38:ba:52:b5:be:ea:f9:cf:f2:9c:43:c3:46:c5:93:
be:6b:fa:c1:93:59:a4:ab:9f:06:1c:1a:27:15:f8:eb:be:f9:
76:12:5a:1f:0e:c7:16:4f:7a:e4:a6:b7:5a:c9:18:70:e5:93:
3b:d5:de:ca:6a:bc:45:06:cd:91:1e:69:74:ab:e0:d1:92:a4:
70:fa:bb:70:97:11:bf:0f:47:d7:3e:eb:9b:c0:57:1c:9b:85:
b2:58:23:8c:a2:eb:4d:c3:32:92:7e:1d:c7:14:b9:1a:c7:da:
01:c4:b7:57:8c:79:76:c8:3a:5d:33:8c:18:fd:a9:b2:c7:f7:
17:e9:98:92:a2:4b:3f:d4:85:f5:1e:d4:a7:b3:bc:a7:a6:e2:
55:4e:33:50:67:17:0d:02:66:f7:2c:d7:01:4e:f7:1d:c3:ef:
4d:a0:a5:cd:69:59:7d:21:b9:e9:2c:d7:a6:e0:7a:d4:83:00:
0f:ac:0c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:55 2026 by rpki-client