Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
File: 0PT6gHWHU7JDohZe3ep12-7oJsQ.mft (raw, json)
Hash identifier: +bZ0u3opDJUeUQvmakXuG8grZ11Tiv9JLHfiP5nBAV0=
Subject key identifier: FE:4F:C3:FC:AF:05:5A:8B:56:F5:B4:DC:7A:B3:2F:28:7C:A4:15:75
Authority key identifier: D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4
Certificate issuer: /CN=d0f4fa80758753b243a2165eddea75dbeee826c4
Certificate serial: 019CE55A57799EAA1D5A744EDD6A42EDD22E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
Manifest number: 1350
Signing time: Fri 13 Mar 2026 04:00:28 +0000
Manifest this update: Fri 13 Mar 2026 04:00:28 +0000
Manifest next update: Sat 14 Mar 2026 04:00:28 +0000
Files and hashes: 1: 0PT6gHWHU7JDohZe3ep12-7oJsQ.crl (hash: vul6u8Bk4+QksL3ELBsDjtYBHrMqfNPk2TvHzgRXWV4=)
2: pLi1qq2wcSmdgCiUnjjCoQErQdA.roa (hash: 7prO26MADaOtqZ/YBeNHajM4pUEvbdbYtkMA592/T+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5a:57:79:9e:aa:1d:5a:74:4e:dd:6a:42:ed:d2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f4fa80758753b243a2165eddea75dbeee826c4
Validity
Not Before: Mar 13 04:00:28 2026 GMT
Not After : Mar 14 04:00:28 2026 GMT
Subject: CN=fe4fc3fcaf055a8b56f5b4dc7ab32f287ca41575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d0:93:3d:63:e4:83:b2:86:8d:9a:00:6a:c1:
a5:f2:23:2f:37:3e:77:5d:3b:2f:18:e1:ca:fc:bc:
ea:08:5d:ad:ca:81:75:c8:c8:4b:3e:ad:bb:70:b8:
e1:ef:6c:f4:35:70:cd:57:64:15:8e:87:25:a2:9d:
1f:c2:69:31:c9:be:5e:49:9d:7f:a1:db:7e:2c:b3:
cd:72:5d:8a:29:54:61:8f:22:dc:ef:00:ed:c9:67:
81:17:f5:c5:99:cc:5a:ff:b4:d7:63:4d:84:b2:04:
9f:1b:9f:09:08:ad:6f:8b:ae:8f:a7:34:da:e9:d5:
c5:de:d2:53:b1:cc:2e:7c:e1:d7:65:fd:ce:be:28:
d8:54:30:3a:6f:35:4d:76:66:9c:ea:a4:a8:c8:02:
24:af:ba:a9:52:b0:22:66:3f:a9:46:27:e6:a5:b9:
55:ba:c0:e6:0f:08:de:90:b5:77:fb:86:f2:06:94:
46:d1:96:31:66:43:63:21:ea:76:43:90:83:3b:84:
1b:9d:df:da:96:55:10:01:89:ac:54:eb:20:83:42:
9b:f0:57:b6:a5:d1:e3:45:27:22:da:6a:74:8e:03:
a8:59:30:c2:71:8e:a8:d4:d9:bd:01:f4:41:1e:ed:
e0:a9:be:7a:cf:af:57:90:bf:f7:83:5e:45:8a:d0:
ec:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4F:C3:FC:AF:05:5A:8B:56:F5:B4:DC:7A:B3:2F:28:7C:A4:15:75
X509v3 Authority Key Identifier:
keyid:D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e6:b0:31:b1:cf:78:30:2c:66:dc:04:ed:39:9f:f8:15:d9:
7b:4f:b2:90:95:08:3c:08:8d:30:07:1e:e5:c5:01:c8:33:83:
d5:ab:67:55:3c:0b:fc:24:b5:a1:74:46:51:8f:cc:ed:9a:de:
fd:08:c9:05:10:0d:d0:4e:24:8d:ef:b1:48:e0:4a:8f:9d:ea:
72:17:78:34:f6:4a:63:ee:96:9a:c3:a3:01:41:f6:be:06:7f:
b0:b4:45:ca:1a:19:76:df:f9:43:21:34:28:e2:89:49:3f:bf:
8c:c5:e9:63:8a:f9:31:4b:16:62:0f:22:90:74:0c:72:1e:fd:
31:31:26:a4:bb:c3:83:54:f8:0c:b0:ec:a1:ea:86:2d:27:88:
5d:12:8f:ba:4b:4e:12:d1:d3:e0:27:90:b4:e1:c3:ac:8b:9d:
0c:2d:f5:87:04:86:fe:3d:b8:ea:c0:ea:9b:52:fa:c7:bf:73:
fe:ef:c7:bb:7e:25:cb:a6:89:d4:04:fb:f8:a0:c8:4b:f0:d6:
03:da:c2:1c:a5:77:07:1f:ba:d0:29:1d:38:a7:8a:2c:04:eb:
cc:f5:3e:4f:7e:dc:4c:ce:da:19:87:73:f6:e8:4d:03:68:53:
d1:5f:aa:70:da:8d:a7:ad:a1:46:1b:60:3d:ea:49:64:3e:68:
58:a2:cf:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:10:04 2026 by rpki-client