Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft
File: 0AQf95gDebeYBJJWho3_OYGcJgQ.mft (raw, json)
Hash identifier: Pop2537UsNVQsctAQB7FTGWFukjoAiBMFQ0jLRZXKqE=
Subject key identifier: 7F:F6:D5:06:1F:3F:A4:70:3D:F5:93:57:FF:C2:37:C0:22:C3:53:B4
Authority key identifier: D0:04:1F:F7:98:03:79:B7:98:04:92:56:86:8D:FF:39:81:9C:26:04
Certificate issuer: /CN=d0041ff7980379b798049256868dff39819c2604
Certificate serial: 019D38667164A737E0DB841E9A42696F59A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AQf95gDebeYBJJWho3_OYGcJgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft
Manifest number: 1494
Signing time: Sun 29 Mar 2026 07:02:10 +0000
Manifest this update: Sun 29 Mar 2026 07:02:10 +0000
Manifest next update: Mon 30 Mar 2026 07:02:10 +0000
Files and hashes: 1: 0AQf95gDebeYBJJWho3_OYGcJgQ.crl (hash: apFadluQzS8s7fASv3CjrCN/Nv/9t7bK3VwTgrQRLEc=)
2: _CbAIha09b2vkLLLEt-SwHJvLtA.roa (hash: rgmnLA63aETJnEB0DGJbTZ0etZiRckyQobaM7PylTRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AQf95gDebeYBJJWho3_OYGcJgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:71:64:a7:37:e0:db:84:1e:9a:42:69:6f:59:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0041ff7980379b798049256868dff39819c2604
Validity
Not Before: Mar 29 07:02:10 2026 GMT
Not After : Mar 30 07:02:10 2026 GMT
Subject: CN=7ff6d5061f3fa4703df59357ffc237c022c353b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:22:8b:94:ca:c2:41:cd:d8:70:83:c4:e6:2e:
47:2f:18:4e:fe:59:07:fe:8d:69:95:d6:f8:0b:f6:
75:ce:37:ea:e3:86:8d:7f:ce:57:ce:b9:da:c9:95:
4f:eb:10:21:0d:71:86:0c:ff:22:13:7d:d5:06:e1:
26:04:fe:31:36:80:f5:05:1d:80:68:77:bc:42:c4:
92:63:58:61:a6:27:64:47:0a:90:a7:7c:77:78:3b:
06:ca:56:fa:a0:a4:98:02:aa:bc:79:34:24:02:10:
3a:52:d0:bc:89:39:cf:fc:d7:06:45:67:30:39:2d:
95:96:0e:23:42:87:41:f0:3d:90:17:7a:a8:0b:a2:
8b:db:04:8b:96:a2:3d:db:0c:0a:8e:aa:b8:96:ae:
e6:18:39:b4:18:a8:5e:95:2f:9c:3e:3e:e4:ac:70:
12:03:97:d8:72:42:85:7e:49:63:28:61:03:ef:67:
e3:24:17:49:25:08:de:e7:7c:2e:6d:55:a9:12:51:
79:65:bb:0c:82:b1:76:9a:d6:3b:f2:24:7e:a5:64:
ac:22:8c:7b:6f:51:61:03:48:32:ae:82:af:e3:cb:
a4:c9:87:2b:03:54:72:e4:4e:7b:3c:2e:14:8a:c2:
e7:07:23:a8:ef:05:78:4f:bc:03:13:ed:c6:1f:80:
22:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F6:D5:06:1F:3F:A4:70:3D:F5:93:57:FF:C2:37:C0:22:C3:53:B4
X509v3 Authority Key Identifier:
keyid:D0:04:1F:F7:98:03:79:B7:98:04:92:56:86:8D:FF:39:81:9C:26:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AQf95gDebeYBJJWho3_OYGcJgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:61:55:24:ae:7e:3b:22:09:7a:f2:64:85:ce:e0:74:43:60:
28:de:a1:b7:9a:50:20:21:f5:c9:87:ad:c8:09:62:d7:b0:38:
47:44:f2:5c:38:44:5c:f0:06:98:ec:3c:37:b1:aa:9b:51:a8:
a9:80:c3:d6:1d:4e:49:b8:ae:1a:60:87:28:d5:d6:cb:93:1e:
4e:ae:08:bb:72:1d:22:9b:31:fc:14:85:d8:f9:92:73:44:15:
97:0d:3a:c0:69:44:b1:11:9b:08:95:11:ea:4b:90:55:67:6a:
c1:6b:73:8a:fe:39:ae:56:cf:68:06:01:08:5a:ca:88:ae:4e:
92:6c:21:02:29:35:ff:dc:24:da:18:b8:c9:47:10:b1:ba:bb:
66:b2:3a:84:2f:6e:c0:76:05:0e:55:a2:03:eb:c9:66:b4:d2:
94:36:f7:04:93:c7:c9:04:ed:b4:86:74:2a:3e:16:c7:f7:52:
b3:99:66:60:56:ab:78:a6:35:f7:07:68:9d:86:bf:b4:92:f5:
71:75:84:12:93:ae:28:c5:d8:6f:e6:0d:54:26:cb:33:7d:bf:
00:ab:11:8d:91:84:cd:75:3d:63:13:4b:44:5b:a2:94:ac:ae:
d3:f9:60:63:d8:50:53:66:f2:07:59:21:22:86:21:76:ef:3f:
b7:7d:20:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:18 2026 by rpki-client