Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/217726-2df2-47af-a0ea-d94131da861d/1/0PDiyMFKgktU4AvZR5pIXXG_5HQ.mft
File: 0PDiyMFKgktU4AvZR5pIXXG_5HQ.mft (raw, json)
Hash identifier: tVvjm+sn3h+DzMxmG2EL2Ctzv8WpEjHxhCZf1dO3hho=
Subject key identifier: 23:C6:36:93:C2:7B:AA:4B:CE:98:E3:64:B9:3F:41:11:DE:EB:60:FA
Authority key identifier: D0:F0:E2:C8:C1:4A:82:4B:54:E0:0B:D9:47:9A:48:5D:71:BF:E4:74
Certificate issuer: /CN=d0f0e2c8c14a824b54e00bd9479a485d71bfe474
Certificate serial: 019D371B7C4D012987F89AD78B8315CC86E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PDiyMFKgktU4AvZR5pIXXG_5HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/217726-2df2-47af-a0ea-d94131da861d/1/0PDiyMFKgktU4AvZR5pIXXG_5HQ.mft
Manifest number: 49
Signing time: Sun 29 Mar 2026 01:00:41 +0000
Manifest this update: Sun 29 Mar 2026 01:00:41 +0000
Manifest next update: Mon 30 Mar 2026 01:00:41 +0000
Files and hashes: 1: 0PDiyMFKgktU4AvZR5pIXXG_5HQ.crl (hash: 855f7jAtg4Jvlm/18KnCgB7glda9qcAZop85Dy3+VJA=)
2: vz9xDUONTQdNGh2H7pR1j8DJb4U.roa (hash: wQlmjv0wxtwfgnsZbxR6Yv1Bicu90n9KXilxDJKClFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/217726-2df2-47af-a0ea-d94131da861d/1/0PDiyMFKgktU4AvZR5pIXXG_5HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/217726-2df2-47af-a0ea-d94131da861d/1/0PDiyMFKgktU4AvZR5pIXXG_5HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PDiyMFKgktU4AvZR5pIXXG_5HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:7c:4d:01:29:87:f8:9a:d7:8b:83:15:cc:86:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f0e2c8c14a824b54e00bd9479a485d71bfe474
Validity
Not Before: Mar 29 01:00:41 2026 GMT
Not After : Mar 30 01:00:41 2026 GMT
Subject: CN=23c63693c27baa4bce98e364b93f4111deeb60fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4a:f9:f0:1e:f0:42:88:09:c4:c5:3a:09:5c:
05:d5:7a:d3:6d:e0:54:fc:6a:2b:76:a0:30:d6:01:
fb:14:04:89:4e:ad:ce:b9:3b:7f:75:31:3b:94:57:
cf:70:04:fc:92:0a:24:6d:17:61:f6:04:db:f5:ba:
87:a1:92:60:1f:a0:d5:e7:04:c4:56:6d:28:7a:a9:
81:e8:b8:bf:50:e9:ae:59:81:c4:bb:fb:1c:79:f8:
59:15:21:8e:fa:03:32:64:3a:ab:19:ad:a5:35:cb:
6f:f2:fa:4e:a0:1b:d2:d3:f0:fc:a7:f4:e5:a6:31:
3b:47:a4:52:36:b1:91:59:d4:47:b4:b8:ce:63:90:
ac:4a:05:b6:07:8b:f1:5b:cb:61:f4:ed:5b:55:38:
89:42:43:6e:a8:a4:36:b1:80:86:70:76:60:92:46:
67:35:e3:0f:16:d1:d1:3b:77:0b:39:67:52:0b:3f:
42:65:6a:62:0d:9d:32:46:34:ab:92:c1:03:cc:28:
69:9e:fd:d3:27:1b:d7:dc:07:d9:cb:f1:cb:78:d1:
7b:86:14:8e:13:f0:71:56:c3:02:93:c6:92:19:8a:
b5:5c:9c:19:34:b3:32:ee:ac:6c:65:2f:9e:2a:2b:
57:d0:87:2f:16:b9:a9:b7:1c:7c:86:86:bf:5f:b4:
d5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C6:36:93:C2:7B:AA:4B:CE:98:E3:64:B9:3F:41:11:DE:EB:60:FA
X509v3 Authority Key Identifier:
keyid:D0:F0:E2:C8:C1:4A:82:4B:54:E0:0B:D9:47:9A:48:5D:71:BF:E4:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PDiyMFKgktU4AvZR5pIXXG_5HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/217726-2df2-47af-a0ea-d94131da861d/1/0PDiyMFKgktU4AvZR5pIXXG_5HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/217726-2df2-47af-a0ea-d94131da861d/1/0PDiyMFKgktU4AvZR5pIXXG_5HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:de:21:be:e1:ac:4a:fc:cd:09:a3:aa:d5:1f:d5:16:e5:cb:
5a:17:bd:99:78:b1:78:3d:e6:7c:69:bf:45:35:aa:93:b1:0f:
f8:34:a0:e4:2e:85:83:c8:82:0c:82:79:62:71:db:19:5d:7a:
af:02:22:05:b5:0d:7d:4e:47:7e:29:56:c8:4b:91:fa:fa:0a:
0f:2e:c8:48:78:53:49:de:a7:3f:be:cb:25:a3:e3:bc:ee:68:
a7:73:a6:16:e5:fe:4c:cb:5f:1a:ec:ce:0b:56:e0:7e:6c:b5:
6e:4f:23:7a:f6:36:8d:7f:a6:7a:e2:38:5f:90:e2:38:d3:ac:
dd:ed:72:ba:4a:90:9b:df:5a:49:ae:82:0f:d5:08:36:33:f8:
83:5d:33:50:cf:3f:02:b0:1e:7b:42:b3:11:40:4b:4e:f5:96:
ca:d5:23:88:81:57:45:f0:d3:3c:d0:1b:0b:21:0d:22:32:d1:
dd:a0:88:ff:1d:5f:83:3b:20:02:e1:f4:b1:0c:5d:6c:b4:99:
05:c9:a0:a4:a4:29:ab:9c:ce:7b:6d:59:74:7c:f1:ed:d3:cf:
e2:0f:90:52:86:59:a4:9f:48:c5:c5:29:87:9e:0f:22:fd:4a:
11:e9:ff:db:18:0a:e3:7b:67:07:74:59:6a:3b:e3:f2:ec:a6:
58:60:b5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:27:52 2026 by rpki-client