Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
File: 0lgUed7jtZlPEcnZVkYxv1pATAc.mft (raw, json)
Hash identifier: xDtk0v+UvQVwxi6sOZ6ReXfdjpM9N98GDEh/D9MloCg=
Subject key identifier: 58:6F:D9:0F:73:04:00:C0:95:32:58:95:9B:21:55:DA:9C:0A:1D:F3
Authority key identifier: D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
Certificate issuer: /CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Certificate serial: 019D39AE816279661D226F90509F28C92335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
Manifest number: 099D
Signing time: Sun 29 Mar 2026 13:00:30 +0000
Manifest this update: Sun 29 Mar 2026 13:00:30 +0000
Manifest next update: Mon 30 Mar 2026 13:00:30 +0000
Files and hashes: 1: 0lgUed7jtZlPEcnZVkYxv1pATAc.crl (hash: Y53T93pWZe5/8b6i4ZK4+0QwhiXOnGGfQS2uQJB0Rkg=)
2: _anBuNNw0qAbfJJyR7NUzCXshEI.roa (hash: u/OzH4PvqgIz0IcQamVppLorgGwznO76WkLllc9zkBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:81:62:79:66:1d:22:6f:90:50:9f:28:c9:23:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Validity
Not Before: Mar 29 13:00:30 2026 GMT
Not After : Mar 30 13:00:30 2026 GMT
Subject: CN=586fd90f730400c0953258959b2155da9c0a1df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:99:3f:b8:4d:b1:db:b8:9d:5c:20:90:d9:c0:
79:e0:be:61:df:d0:36:b2:78:8f:38:cc:c1:56:4d:
91:98:c8:e2:8f:83:dd:b0:7a:19:02:99:ec:58:aa:
cd:33:41:05:d3:32:c9:fe:c7:2d:92:54:11:4c:e9:
c5:3b:2c:1f:56:28:7f:40:07:90:6e:7f:02:ac:c2:
49:f1:1c:1c:c8:3a:0b:00:ed:11:18:80:f5:78:ad:
9e:70:1c:a9:b9:f2:78:ef:75:59:05:ae:63:ae:20:
f9:6f:89:c9:dd:63:42:77:68:d5:fa:b0:fc:f2:ef:
2c:49:2e:9a:01:0a:4e:d2:53:e0:38:fe:86:bc:ea:
df:9c:bf:bc:2d:3d:54:47:bf:87:c2:ca:c7:15:64:
16:5b:66:de:b4:39:54:d8:16:f6:2c:23:6f:b6:69:
45:b3:59:9e:04:95:36:fb:3b:8b:63:e3:fb:f0:b9:
8d:22:42:33:5a:0e:c2:54:eb:9d:4b:db:bf:60:50:
25:6b:ee:61:f2:82:5e:ff:38:90:42:e7:33:74:57:
cb:35:1b:e1:62:69:25:2e:40:05:82:c7:be:ab:1f:
15:f6:74:9e:97:01:26:8b:c1:84:b3:c2:0e:b7:96:
5d:26:4e:31:2e:20:b2:1f:ee:3d:ab:88:1f:a2:ef:
49:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6F:D9:0F:73:04:00:C0:95:32:58:95:9B:21:55:DA:9C:0A:1D:F3
X509v3 Authority Key Identifier:
keyid:D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f6:93:36:56:7f:2e:75:0b:ee:7f:63:47:b7:ba:5f:dc:42:
05:40:cd:44:d1:10:43:8e:57:5e:3f:9b:0b:01:e2:41:f6:0e:
c7:f0:4c:11:c7:af:26:03:77:3a:71:d3:ae:9f:1f:13:ce:cd:
e8:3f:b6:c6:16:58:96:80:a0:a3:b9:8c:40:5c:41:35:2b:98:
8e:3a:76:f4:74:6e:6c:d8:6b:0d:98:d8:b6:b0:69:1b:98:3a:
90:25:a9:dd:77:90:5f:ac:da:b1:0b:20:be:11:b5:35:55:e9:
8b:2f:3e:74:f4:16:6b:12:0f:57:c3:e8:ee:e2:ea:be:02:bf:
26:f0:4f:0b:53:fe:80:47:dc:1f:33:55:39:c4:96:39:b1:88:
49:93:6e:cb:57:33:cb:97:f8:f1:27:0c:e5:58:f3:1c:9a:b9:
9c:25:45:e5:c8:84:77:0d:24:20:2e:30:f4:2f:33:56:a1:07:
eb:8a:43:aa:8f:32:0c:bc:b7:d5:47:06:3c:f5:5c:43:cb:94:
ff:90:96:17:f3:8b:2d:c9:de:06:5a:f3:45:2b:61:1b:b7:c9:
56:cc:e0:31:23:d2:2e:12:a2:67:03:37:2c:df:f5:7a:85:f8:
c0:ef:84:7f:0f:19:1f:ed:dc:b2:e8:9c:50:9c:8b:9b:66:5a:
18:f2:88:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:51 2026 by rpki-client