Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
File: 0u2k-NnkgpUqESsu9aTyObf2JVE.mft (raw, json)
Hash identifier: mvzsb16WJBKARMAMggooImnn4KznacS/S+XuJl7HQPM=
Subject key identifier: 89:C5:C4:86:74:16:3A:97:06:05:74:C8:C6:C9:2F:88:06:AA:25:83
Authority key identifier: D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
Certificate issuer: /CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Certificate serial: 019D37F72C36AA5A82A233461B3C5B85DFE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
Manifest number: 0D22
Signing time: Sun 29 Mar 2026 05:00:38 +0000
Manifest this update: Sun 29 Mar 2026 05:00:38 +0000
Manifest next update: Mon 30 Mar 2026 05:00:38 +0000
Files and hashes: 1: 0u2k-NnkgpUqESsu9aTyObf2JVE.crl (hash: gHzeFrMja7WvFQaaBDnA2XnRlxJF4c7WxkXhiiBzdco=)
2: cH1uhcXR4yA_j8slffa5H1Hj5PM.roa (hash: 6BjMFM7dbeXnopz6sC8hF0DrckNn2/Fq1fNIhGQIPa8=)
3: vQ3Onh8zAP8fN-K_wTaZqAaUruI.roa (hash: ycldYOHAUvLotQf8PVaaFzvXxeLDOJ2gpiZO/0/3jvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:2c:36:aa:5a:82:a2:33:46:1b:3c:5b:85:df:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Validity
Not Before: Mar 29 05:00:38 2026 GMT
Not After : Mar 30 05:00:38 2026 GMT
Subject: CN=89c5c48674163a97060574c8c6c92f8806aa2583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a7:aa:a5:8e:5b:a5:70:8a:fe:1a:80:b6:36:
bd:b5:d7:66:39:18:e0:b0:c4:d2:75:a4:20:cb:a4:
a2:dc:77:e0:3e:63:b1:b1:fb:88:91:de:1f:c9:0a:
15:cf:90:2c:82:a8:f5:c5:51:ab:ed:ef:52:8b:f8:
15:f8:8f:ac:c0:3e:c1:87:44:18:20:6b:1d:21:b1:
3d:90:a0:71:26:7b:ea:74:37:6b:8e:ac:20:37:9b:
e7:01:d0:60:07:9e:d1:8a:f8:31:70:92:a8:ae:9e:
5a:7c:3f:23:bb:df:8d:c1:c7:cc:c4:70:92:80:bd:
b6:00:1b:28:a4:6e:77:90:6f:3a:ca:89:e1:c4:92:
3c:9d:a3:90:42:9a:5f:87:c4:ca:7a:14:c8:8c:35:
30:a7:45:1b:c5:e7:ef:66:54:6f:52:9d:44:10:1b:
a1:e6:ee:e7:83:af:09:5d:b1:30:e6:35:5b:cc:3a:
56:99:48:8d:54:5f:07:b9:22:af:f4:7f:52:76:b2:
bd:c1:c1:14:4b:07:be:75:e2:02:ee:4d:a6:5c:d9:
ae:0a:5e:9f:d7:91:b4:05:50:d2:65:c4:59:1a:e6:
74:01:b8:2e:41:1a:ae:08:76:be:11:8a:b5:9a:36:
95:4b:c0:f5:7c:a3:e1:3d:95:ed:83:74:8d:4d:a3:
ba:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C5:C4:86:74:16:3A:97:06:05:74:C8:C6:C9:2F:88:06:AA:25:83
X509v3 Authority Key Identifier:
keyid:D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:ef:38:60:1b:9a:5f:9a:97:3b:94:ec:3c:cc:56:cb:bc:18:
66:fb:11:71:22:d4:2f:cc:b1:06:ea:4b:99:6a:09:ff:c1:23:
c0:8b:08:55:24:fe:70:a6:52:26:09:03:86:e0:43:72:92:98:
40:1f:72:d6:47:8d:35:5a:33:83:c3:f1:de:b0:a0:12:be:44:
9b:e5:2e:15:16:08:7d:fa:ab:a7:03:46:ee:ce:44:f0:3f:f1:
d9:b1:f2:64:13:44:34:e4:c4:82:57:63:25:18:0e:75:da:1a:
50:c2:76:ca:0b:db:68:1c:c1:f8:b1:8b:2f:f6:ae:7c:d6:b1:
29:a7:ff:87:0b:3f:fa:59:0d:3e:fb:a7:db:d5:4b:b9:74:02:
ae:24:3a:fd:f0:21:3d:b7:47:a3:e1:d2:98:df:5e:4b:31:38:
a0:7d:ed:19:98:7f:10:72:0d:f3:7b:64:69:fe:93:f6:5c:4e:
30:06:5c:34:91:68:b2:5f:ec:7b:7b:47:82:32:31:f3:a7:1e:
97:c9:f6:26:2c:5f:6e:55:77:9b:1e:64:af:8b:d1:39:4a:fe:
e8:7f:2f:1a:ac:68:18:73:02:c9:ea:d9:d1:09:aa:db:62:4e:
23:67:d9:fb:18:da:31:9e:7a:53:bb:b7:0c:66:71:e9:c8:90:
8f:46:38:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:29 2026 by rpki-client