Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft
File: 0VZGo8mstqSyAbtjJqnwB0Ik84c.mft (raw, json)
Hash identifier: /k8IbyNjBqXjCsQm9iy+VV7yfn0p5lQ5grpzYwD+9dg=
Subject key identifier: EC:47:EB:BA:DF:B9:EF:51:61:07:EF:4E:CD:BD:D6:15:78:0A:12:AF
Authority key identifier: D1:56:46:A3:C9:AC:B6:A4:B2:01:BB:63:26:A9:F0:07:42:24:F3:87
Certificate issuer: /CN=d15646a3c9acb6a4b201bb6326a9f0074224f387
Certificate serial: 019D3909891B226E12EE64ECD5DD71830BDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft
Manifest number: 0A25
Signing time: Sun 29 Mar 2026 10:00:19 +0000
Manifest this update: Sun 29 Mar 2026 10:00:19 +0000
Manifest next update: Mon 30 Mar 2026 10:00:19 +0000
Files and hashes: 1: 0VZGo8mstqSyAbtjJqnwB0Ik84c.crl (hash: fN50v0SvSlLIODyplvKynhG+krQRweicM8gVBwnNNDQ=)
2: svbZ3xnzSZtEiOKXO_TW25acCTk.roa (hash: opv9wDSI8/zZJZrpAhEN95Q4AkFIV4SP2QjFUJ853yU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft
rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:89:1b:22:6e:12:ee:64:ec:d5:dd:71:83:0b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d15646a3c9acb6a4b201bb6326a9f0074224f387
Validity
Not Before: Mar 29 10:00:19 2026 GMT
Not After : Mar 30 10:00:19 2026 GMT
Subject: CN=ec47ebbadfb9ef516107ef4ecdbdd615780a12af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cf:0b:c7:0d:5f:e0:ca:60:5b:5c:c2:03:27:
d7:67:49:f7:f9:b4:6c:cc:e9:5b:d5:ba:7f:45:c9:
00:b4:c0:c4:d9:61:19:4e:3d:5d:02:c1:c2:1c:ff:
da:5a:0f:94:de:73:85:6c:ce:dc:a2:b6:d4:cb:b7:
53:a0:88:83:0a:f2:69:5f:1c:5f:86:f8:a7:7f:01:
71:df:fc:96:0a:59:5c:f6:e5:32:19:bc:03:13:0d:
62:cc:31:5f:d6:cf:74:30:d1:83:e7:04:3a:63:1f:
50:34:3c:b6:16:f1:65:4d:bb:e3:9b:d9:e9:e3:4e:
8d:44:59:f7:82:13:1a:89:2e:f6:9b:d7:6a:7f:c1:
ca:ce:54:da:87:df:e3:56:d2:d4:6c:e7:a8:92:a6:
d9:98:70:7f:32:4f:49:07:3a:a2:f4:51:1a:23:30:
81:3f:6f:34:56:7e:a1:0a:b8:eb:47:4c:e2:d0:9a:
d5:c6:74:97:d9:f9:78:08:50:2d:2d:35:fb:6b:d6:
e5:2c:1b:d3:28:e1:09:77:c1:3f:84:9d:ee:4d:43:
f4:40:1a:ac:cd:61:db:6b:a8:8d:c8:5f:7d:8a:e7:
c2:dc:5d:6d:9e:4c:9f:8b:3e:7e:66:bb:f6:e4:bc:
08:fd:45:0d:81:3e:09:f1:90:5d:20:f1:c4:d6:ed:
03:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:47:EB:BA:DF:B9:EF:51:61:07:EF:4E:CD:BD:D6:15:78:0A:12:AF
X509v3 Authority Key Identifier:
keyid:D1:56:46:A3:C9:AC:B6:A4:B2:01:BB:63:26:A9:F0:07:42:24:F3:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:52:31:70:15:a1:68:01:76:80:2b:15:6b:1f:7a:c2:b6:b8:
dc:c4:4f:4d:99:6e:26:5d:68:1e:69:b3:3e:d3:83:54:d7:42:
3d:22:c7:64:fd:8b:b4:47:f3:d7:b2:13:75:aa:28:01:a5:9c:
6b:21:62:8b:76:f4:6c:c8:ee:39:4f:23:0c:a1:ce:70:e9:a0:
f3:fe:fd:74:8c:4f:4e:ed:9d:a4:83:1f:e1:be:fc:0c:dd:ea:
9a:7d:2c:f6:0d:6b:ba:50:6c:88:3b:15:03:35:39:ea:c7:70:
34:31:33:40:ea:bf:bf:8e:8c:36:2b:7b:24:4d:55:c6:98:fa:
08:a0:29:c6:52:f0:03:e7:1d:44:e1:89:47:d3:5c:f0:b6:0b:
91:9b:14:e5:eb:ef:c8:5f:67:cd:1d:0b:dd:18:83:a7:17:7a:
3c:1d:d2:70:62:fd:ef:5e:cb:9c:0b:cd:37:51:97:54:1c:99:
a4:de:c5:09:42:a6:0f:84:36:0f:3d:65:9f:94:2b:7d:cf:da:
a5:02:7a:2d:91:31:fa:28:23:6f:f9:15:da:19:83:02:b6:fd:
ff:27:8a:29:12:28:0a:f3:b8:19:a6:1d:87:99:6b:b7:1e:0a:
3d:de:19:60:06:c8:38:e2:d9:81:e8:47:0a:07:af:93:e7:51:
d4:77:95:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:51 2026 by rpki-client