Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
File: 0NbmVQW09OT08x2QuLIaOnz7Dr8.mft (raw, json)
Hash identifier: KF30BAsrmMWog3L66Iiwc19MzwzzgvWjue4FOHUf3Qc=
Subject key identifier: D1:A1:80:A7:9F:68:4C:DB:DF:EE:FD:9C:9C:3B:26:6C:DF:86:35:CE
Authority key identifier: D0:D6:E6:55:05:B4:F4:E4:F4:F3:1D:90:B8:B2:1A:3A:7C:FB:0E:BF
Certificate issuer: /CN=d0d6e65505b4f4e4f4f31d90b8b21a3a7cfb0ebf
Certificate serial: 019D386673DE959B3F9D579A589A29907199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
Manifest number: 0E04
Signing time: Sun 29 Mar 2026 07:02:11 +0000
Manifest this update: Sun 29 Mar 2026 07:02:11 +0000
Manifest next update: Mon 30 Mar 2026 07:02:11 +0000
Files and hashes: 1: 0NbmVQW09OT08x2QuLIaOnz7Dr8.crl (hash: NDU3tEhUu1ANhz19HVNPWSriB2eN1l73i6gciBS856E=)
2: JB134IM9J5u4LXkvJ4iGFs0HNJ0.roa (hash: LO/2rEaU8NJadCqLNPLOuZLeub0erw3UpacAaLPm6Fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:73:de:95:9b:3f:9d:57:9a:58:9a:29:90:71:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0d6e65505b4f4e4f4f31d90b8b21a3a7cfb0ebf
Validity
Not Before: Mar 29 07:02:11 2026 GMT
Not After : Mar 30 07:02:11 2026 GMT
Subject: CN=d1a180a79f684cdbdfeefd9c9c3b266cdf8635ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a2:50:56:31:ee:a4:09:41:3b:9f:91:ca:e7:
b4:ed:fe:29:b7:00:da:45:c7:2a:7c:e3:34:e9:b2:
8e:db:08:ee:35:00:1c:6c:1e:63:75:32:5e:8b:e9:
ab:cd:6a:b7:a2:7f:3b:0f:c1:b6:af:36:d0:ba:d4:
60:36:58:aa:c0:5e:10:38:35:3b:d9:a7:75:74:28:
26:51:8d:7c:cb:e9:2a:fb:3c:26:b7:c3:ba:1c:5c:
11:42:d4:9c:fe:a1:f9:52:ce:a8:b0:fa:48:2a:30:
a5:19:5b:59:c8:0e:2b:cf:92:0f:70:a2:d0:c8:9f:
5b:d0:ac:fd:1b:db:ce:0d:cf:83:57:39:f0:74:95:
54:5e:8a:f9:c3:b0:31:20:64:66:60:f7:97:81:ba:
6a:4b:b3:58:a4:56:27:da:60:fe:9f:3f:63:9a:1f:
89:df:16:05:36:c9:24:af:5f:3f:f7:ea:bd:3b:ce:
76:59:56:d7:6e:e6:1e:6a:b7:a4:7c:78:69:32:5c:
8a:29:b3:6c:8b:dd:23:ed:bf:48:85:5d:2c:31:14:
82:30:1c:73:20:c9:3e:ae:78:41:0f:e6:a3:9f:66:
f9:37:2f:a1:92:bc:15:e2:82:27:d9:61:29:dc:be:
54:5c:d2:c1:2d:e7:bc:4c:44:88:3c:ec:3e:83:df:
4f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A1:80:A7:9F:68:4C:DB:DF:EE:FD:9C:9C:3B:26:6C:DF:86:35:CE
X509v3 Authority Key Identifier:
keyid:D0:D6:E6:55:05:B4:F4:E4:F4:F3:1D:90:B8:B2:1A:3A:7C:FB:0E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:6d:ca:56:72:ac:6f:fd:fa:da:1f:dc:03:4d:43:53:a6:ee:
6b:0c:f2:12:0a:a7:1b:b7:76:31:f4:8e:67:78:11:f6:e9:71:
e0:a5:90:be:fd:3c:76:23:85:a8:ee:45:c5:c6:06:0e:f6:71:
fb:0c:16:2d:12:63:26:99:9a:89:21:f8:f8:ca:06:ec:81:dc:
83:e9:ea:d0:48:6f:81:ac:60:7e:b7:8f:9c:63:43:70:e4:85:
99:b5:2b:8b:ab:67:46:33:5c:f3:fb:4a:bf:7b:9d:c3:95:20:
f7:d6:60:72:2f:e8:de:a2:e0:6f:ca:9b:1b:d7:f6:b1:1e:65:
fc:75:84:0c:23:bc:2f:3d:b1:b5:33:e0:49:4d:5f:0e:87:82:
e6:0d:24:47:b2:c4:ef:ab:85:d2:6c:61:82:99:90:c5:40:2a:
54:32:09:08:25:7a:b5:39:15:2f:9e:c5:29:6d:4d:7a:2e:b8:
8c:f3:49:aa:bd:63:2e:ac:8e:3e:e9:29:6e:16:2e:cf:43:e6:
68:f3:86:34:d8:c1:71:00:f4:c8:95:99:fc:7a:f6:2e:0e:d7:
1c:6d:9b:72:f4:4d:bb:e3:d5:d2:26:e5:40:47:f9:95:d6:38:
4a:18:96:72:08:d0:19:79:55:30:51:17:03:90:42:92:b7:27:
8a:57:92:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZnPelZs/nVeaWJopkHGZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZDZlNjU1MDViNGY0ZTRmNGYzMWQ5MGI4YjIxYTNhN2Nm
YjBlYmYwHhcNMjYwMzI5MDcwMjExWhcNMjYwMzMwMDcwMjExWjAzMTEwLwYDVQQD
EyhkMWExODBhNzlmNjg0Y2RiZGZlZWZkOWM5YzNiMjY2Y2RmODYzNWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKJQVjHupAlBO5+Ryue07f4ptwDa
RccqfOM06bKO2wjuNQAcbB5jdTJei+mrzWq3on87D8G2rzbQutRgNliqwF4QODU7
2ad1dCgmUY18y+kq+zwmt8O6HFwRQtSc/qH5Us6osPpIKjClGVtZyA4rz5IPcKLQ
yJ9b0Kz9G9vODc+DVznwdJVUXor5w7AxIGRmYPeXgbpqS7NYpFYn2mD+nz9jmh+J
3xYFNskkr18/9+q9O852WVbXbuYearekfHhpMlyKKbNsi90j7b9IhV0sMRSCMBxz
IMk+rnhBD+ajn2b5Ny+hkrwV4oIn2WEp3L5UXNLBLee8TESIPOw+g99PZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNGhgKefaEzb3+79nJw7JmzfhjXOMB8GA1UdIwQY
MBaAFNDW5lUFtPTk9PMdkLiyGjp8+w6/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME5ibVZRVzA5T1QwOHgyUXVMSWFPbno3RHI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC80NjU1NTYtNzBkMS00MTUyLWE2NWEt
NmM2M2UxNTIyNDJkLzEvME5ibVZRVzA5T1QwOHgyUXVMSWFPbno3RHI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC80NjU1NTYtNzBkMS00MTUyLWE2NWEtNmM2M2UxNTIyNDJk
LzEvME5ibVZRVzA5T1QwOHgyUXVMSWFPbno3RHI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPW3KVnKs
b/362h/cA01DU6buawzyEgqnG7d2MfSOZ3gR9ulx4KWQvv08diOFqO5FxcYGDvZx
+wwWLRJjJpmaiSH4+MoG7IHcg+nq0EhvgaxgfrePnGNDcOSFmbUri6tnRjNc8/tK
v3udw5Ug99Zgci/o3qLgb8qbG9f2sR5l/HWEDCO8Lz2xtTPgSU1fDoeC5g0kR7LE
76uF0mxhgpmQxUAqVDIJCCV6tTkVL57FKW1Nei64jPNJqr1jLqyOPukpbhYuz0Pm
aPOGNNjBcQD0yJWZ/Hr2Lg7XHG2bcvRNu+PV0iblQEf5ldY4ShiWcgjQGXlVMFEX
A5BCkrcnileSlQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:35 2026 by rpki-client