Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft
File: 0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft (raw, json)
Hash identifier: /lYds68QzZXiIzU61m21Sw02DNoZRyVQMzkdN6l/PFc=
Subject key identifier: 92:C4:0E:A9:E8:CB:F4:6E:5B:DB:A9:FE:BB:F1:8A:DC:48:C5:AC:A4
Authority key identifier: D0:9D:A9:9A:73:BA:72:02:41:8F:73:71:89:32:DC:8D:7C:15:3E:32
Certificate issuer: /CN=d09da99a73ba7202418f73718932dc8d7c153e32
Certificate serial: 019D39419D8B31F9144061CC361C92C21EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0J2pmnO6cgJBj3NxiTLcjXwVPjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 11:01:34 +0000
Manifest this update: Sun 29 Mar 2026 11:01:34 +0000
Manifest next update: Mon 30 Mar 2026 11:01:34 +0000
Files and hashes: 1: 0J2pmnO6cgJBj3NxiTLcjXwVPjI.crl (hash: MQz2Q/U1B6b7uGhcqBSWVpAk2hX9ksJP/pEiSRgDmzg=)
2: 2bJ2chGfdjROmt484R3iaMkBv5s.roa (hash: qIi6O0mX3eNR+7L75XDWNrvKkZYX8S4LP3pHsAXc7mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0J2pmnO6cgJBj3NxiTLcjXwVPjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:9d:8b:31:f9:14:40:61:cc:36:1c:92:c2:1e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d09da99a73ba7202418f73718932dc8d7c153e32
Validity
Not Before: Mar 29 11:01:34 2026 GMT
Not After : Mar 30 11:01:34 2026 GMT
Subject: CN=92c40ea9e8cbf46e5bdba9febbf18adc48c5aca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f9:4c:f2:4a:8a:2d:72:b1:79:a4:df:35:cd:
5b:65:0e:51:a4:b7:49:17:21:11:ec:3a:0b:3f:ad:
cb:f8:a1:e4:a7:3e:ff:9e:fb:81:d9:c8:76:32:5f:
0d:ce:2d:65:f7:eb:c8:d8:56:13:b4:27:de:b9:45:
69:74:1d:55:91:9c:d2:7d:ce:50:00:de:d4:8d:d7:
23:36:a4:12:06:e4:dc:43:e6:7a:ef:f3:8a:1e:7c:
a8:9e:c3:1a:a0:6e:c6:f4:2d:ea:31:d2:f9:b9:0e:
80:82:1c:be:c7:80:46:de:e0:04:e6:f2:87:f4:e6:
c5:03:e9:a5:6f:64:06:4a:f7:3b:3c:2a:fc:b0:d8:
a9:ef:cd:9d:2b:2c:46:9b:bc:46:25:42:59:4a:51:
8a:d9:13:37:68:e9:62:15:0b:93:75:c3:cf:89:86:
4c:22:7f:02:00:7a:87:f6:6f:14:19:73:c2:84:79:
f8:b7:35:d8:f3:f1:f0:75:58:fa:31:9b:a5:5c:c1:
0b:b3:27:aa:c2:5f:a5:cb:8d:7b:cb:ee:9d:db:1d:
22:88:99:bd:2f:18:45:d8:b5:17:18:da:28:b1:b4:
de:5d:f7:13:67:de:55:c1:86:48:0f:93:de:64:c6:
91:aa:57:ed:82:05:65:51:26:75:7c:9f:ac:a2:d2:
63:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C4:0E:A9:E8:CB:F4:6E:5B:DB:A9:FE:BB:F1:8A:DC:48:C5:AC:A4
X509v3 Authority Key Identifier:
keyid:D0:9D:A9:9A:73:BA:72:02:41:8F:73:71:89:32:DC:8D:7C:15:3E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0J2pmnO6cgJBj3NxiTLcjXwVPjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:5e:b9:86:dc:d3:6e:c3:32:a1:a3:e6:bb:96:15:8c:86:79:
8b:b3:4e:c5:44:99:66:19:0c:e5:11:d0:90:1d:e1:c8:78:12:
08:47:57:2c:63:14:7e:25:86:28:ed:26:17:64:1b:33:b8:98:
38:ab:24:c9:98:83:e3:26:9e:89:68:6f:58:33:9f:7a:70:77:
49:b8:10:97:e6:d2:a2:e2:31:8f:b8:4e:5c:d8:b7:e6:5e:40:
9d:c5:0b:c2:5d:f4:d2:8e:ff:6d:48:a4:de:b6:8d:78:b4:e1:
6e:e8:62:5b:c3:7a:36:24:bd:ec:44:92:bb:24:2b:c7:5b:4a:
99:03:8f:76:2b:98:7d:d9:c3:c7:1d:21:24:6f:1b:ed:a6:f1:
99:5f:b9:eb:a2:1b:33:a1:8e:bc:e3:25:05:33:32:a4:a4:82:
9c:31:58:81:8a:3e:3b:b3:da:7a:99:c8:c0:07:30:58:1b:4b:
25:7c:cc:ab:22:42:98:cd:4b:e7:67:7b:8d:3a:f0:28:fb:39:
c8:e5:11:af:2a:81:b0:27:0e:54:c2:f0:77:8f:10:6f:33:dc:
7b:8e:b8:a7:14:a9:8f:ad:2d:2e:f0:f0:a9:7a:90:bd:09:eb:
a2:2e:7f:4d:35:4f:9d:2a:f9:b4:78:8f:b1:29:92:a2:27:54:
18:22:d4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:43:13 2026 by rpki-client