Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
File: 0gVCphNVJBQhlMqnCOfbLMprTmM.mft (raw, json)
Hash identifier: 3GN5JlsRvIZm3CUhPQHjlTVGxW9l7CG60Ox1kFxot/8=
Subject key identifier: B1:DA:88:AD:50:E0:F6:14:DE:5E:91:D3:46:56:C1:24:D6:30:77:8E
Authority key identifier: D2:05:42:A6:13:55:24:14:21:94:CA:A7:08:E7:DB:2C:CA:6B:4E:63
Certificate issuer: /CN=d20542a6135524142194caa708e7db2cca6b4e63
Certificate serial: 019D39780FF7963CC401B838B259267A31C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
Manifest number: 1168
Signing time: Sun 29 Mar 2026 12:01:02 +0000
Manifest this update: Sun 29 Mar 2026 12:01:02 +0000
Manifest next update: Mon 30 Mar 2026 12:01:02 +0000
Files and hashes: 1: 0gVCphNVJBQhlMqnCOfbLMprTmM.crl (hash: Xg0V+2+PGoephxkVYqHVSfwobX/CIJ0d/rU77IRI2xE=)
2: W-WGisgg-jdHv8TOeMHyK0ABKKM.roa (hash: AOrzg/e6GHv0wl5jj9rXhlmu6Xrpu+wHeWmnEnYMw/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:0f:f7:96:3c:c4:01:b8:38:b2:59:26:7a:31:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d20542a6135524142194caa708e7db2cca6b4e63
Validity
Not Before: Mar 29 12:01:02 2026 GMT
Not After : Mar 30 12:01:02 2026 GMT
Subject: CN=b1da88ad50e0f614de5e91d34656c124d630778e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9e:50:17:3b:70:4a:b7:ad:27:7d:e0:25:00:
3c:2f:64:2c:8a:74:e5:70:bf:24:79:f0:02:23:4f:
8c:95:96:e8:b2:75:83:70:3c:48:a6:89:88:b2:04:
1a:16:dd:37:4e:6a:4f:2c:f3:8e:05:be:f8:9e:b9:
cb:de:a9:ef:d9:07:9a:34:ce:e6:3a:48:9b:f7:3c:
e1:97:85:c1:f1:c9:49:77:9b:88:06:16:7f:5f:ac:
83:cd:90:49:13:57:cb:77:a0:8c:4d:b5:c9:39:70:
9d:b8:96:7d:f7:66:a9:7c:53:39:76:58:9b:76:74:
23:af:3d:bd:85:e6:14:b3:7f:6e:79:46:25:61:ee:
38:13:eb:e2:d4:a3:eb:9f:3d:74:f3:ea:7a:cf:0a:
e5:9e:9c:4b:45:c3:b5:a2:aa:32:15:55:38:08:48:
fc:e9:88:40:c0:6d:01:13:42:54:73:cd:f4:4e:39:
9c:1d:75:61:f8:cb:99:ec:7c:ab:53:ad:43:a0:9a:
a3:4c:20:97:df:78:d7:ae:0a:2b:fd:c7:76:82:28:
e1:2f:06:58:af:91:aa:d4:c2:a6:20:6c:9a:7c:6d:
62:1a:da:85:93:54:46:31:c9:b9:67:e7:ad:29:95:
ad:41:84:0e:98:16:4b:5e:59:ed:91:e7:fc:ab:46:
55:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:DA:88:AD:50:E0:F6:14:DE:5E:91:D3:46:56:C1:24:D6:30:77:8E
X509v3 Authority Key Identifier:
keyid:D2:05:42:A6:13:55:24:14:21:94:CA:A7:08:E7:DB:2C:CA:6B:4E:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:4c:dc:dd:0c:0b:7b:c6:3d:9c:6a:b2:16:5b:43:07:85:f5:
99:96:a9:f8:65:04:a7:db:80:b1:7b:ca:86:00:7c:ba:92:af:
2b:ea:4b:1b:c8:c3:70:6b:6c:9b:fd:1b:7e:49:02:0a:92:d7:
2a:98:23:24:4a:44:4b:b0:b7:a1:20:0f:41:35:bb:9c:02:2c:
1c:53:06:00:bb:5a:c1:e4:25:75:16:cb:66:7c:48:08:f9:d1:
3d:ff:d2:c1:0f:fb:ae:01:ef:29:3f:cd:85:2d:a8:a9:95:37:
b5:c5:5c:fb:51:54:4e:42:a2:a7:c2:72:a0:21:86:c0:48:ff:
54:f8:26:40:a7:f8:56:7e:ef:ed:60:86:4b:66:39:3d:5f:4d:
d6:76:1f:91:d6:e0:73:9b:fa:96:6c:e7:eb:b2:b8:80:13:95:
b6:24:67:21:f1:78:98:13:ee:64:9e:11:25:97:4c:cb:be:e9:
ca:1f:26:fc:76:88:63:e2:9b:2e:be:59:bf:77:f4:f9:c4:6f:
24:fe:8a:67:9b:d2:24:a0:67:24:b7:ea:2d:ed:a6:2c:2c:0c:
d7:e4:75:18:50:2c:a8:92:e3:a9:44:4a:68:8d:62:49:ee:dc:
82:ee:ef:d7:b9:6c:b5:58:d3:67:23:51:96:27:e4:63:e9:4d:
8f:c1:1d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:13:21 2026 by rpki-client