Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
File: 0bvzaAza5sJnqY0D0I9rI9DtHUY.mft (raw, json)
Hash identifier: sd5FmfV/zPWR36J0z9ngwqTmizri2Rm7o13jO0QK5hw=
Subject key identifier: 35:3A:AA:06:4D:AE:E8:1E:12:9B:8C:05:D1:AB:7E:4A:D5:B1:53:16
Authority key identifier: D1:BB:F3:68:0C:DA:E6:C2:67:A9:8D:03:D0:8F:6B:23:D0:ED:1D:46
Certificate issuer: /CN=d1bbf3680cdae6c267a98d03d08f6b23d0ed1d46
Certificate serial: 019D3940FD82A87793B746C13B11BE26B503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 11:00:53 +0000
Manifest this update: Sun 29 Mar 2026 11:00:53 +0000
Manifest next update: Mon 30 Mar 2026 11:00:53 +0000
Files and hashes: 1: 0bvzaAza5sJnqY0D0I9rI9DtHUY.crl (hash: wpmFbVa1TmJCAWi+4s57tLNDME+zoKVkBfuokRhJFgY=)
2: 7Se3cx4TBdWjHAwq4txVyQrcrpQ.roa (hash: qn754SyayB45Cx33yiucDcB81nUdDdHn60qsbH3DxoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:fd:82:a8:77:93:b7:46:c1:3b:11:be:26:b5:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1bbf3680cdae6c267a98d03d08f6b23d0ed1d46
Validity
Not Before: Mar 29 11:00:53 2026 GMT
Not After : Mar 30 11:00:53 2026 GMT
Subject: CN=353aaa064daee81e129b8c05d1ab7e4ad5b15316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0f:34:f5:04:25:07:78:59:ae:54:25:d8:c0:
10:b9:5c:9b:b3:2b:93:80:47:55:5e:f4:d5:94:57:
44:48:ce:fb:4a:8c:24:05:ac:09:f8:68:50:25:1d:
ae:b5:aa:6c:a6:68:95:74:71:c1:30:f4:82:bd:64:
f9:2d:a9:d6:f1:82:bd:1d:0e:fe:75:07:d2:fe:7b:
c0:cf:2f:3e:68:2d:e8:24:3b:c3:b7:6f:df:98:43:
f3:7e:cb:e2:18:ec:e7:2f:30:38:86:22:3a:83:02:
79:c1:8f:ab:c9:28:51:00:a3:03:06:29:a8:d3:1b:
c9:a7:db:72:f6:ba:85:96:1f:17:4e:78:5a:c5:e0:
e9:2f:7b:e7:9d:1e:9d:ec:e3:13:cd:fa:de:ce:77:
1f:f6:a7:ee:cd:d8:b4:63:06:18:57:93:a3:3c:e8:
99:28:eb:04:e9:51:f7:82:a5:46:5f:1a:03:bd:10:
10:6f:99:d0:fe:bc:12:c8:90:c5:15:1b:5f:6a:0f:
5d:7e:92:53:ba:6b:f4:4a:69:69:1a:5e:51:eb:ba:
6b:db:35:20:7e:29:8f:f9:0e:40:a5:ab:2d:f3:4c:
58:fd:a8:ce:55:e2:e5:55:d1:c5:70:12:d2:9c:77:
c4:aa:28:31:9a:e6:44:9c:d9:57:81:8e:d9:4a:7e:
32:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3A:AA:06:4D:AE:E8:1E:12:9B:8C:05:D1:AB:7E:4A:D5:B1:53:16
X509v3 Authority Key Identifier:
keyid:D1:BB:F3:68:0C:DA:E6:C2:67:A9:8D:03:D0:8F:6B:23:D0:ED:1D:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:6a:68:f1:d8:44:b2:39:35:98:55:3a:ed:76:e9:0a:29:9f:
9d:83:4e:d7:fb:47:09:8a:f2:b3:b2:f9:c1:ae:5a:5c:e5:a8:
ec:86:64:ca:40:47:53:70:64:c6:3e:d2:67:9b:d6:96:42:fb:
13:4f:40:59:d8:a9:9d:25:87:38:35:e7:a8:cf:d1:e5:c3:ba:
25:2f:ca:94:f4:97:2e:51:99:ba:0e:b6:38:be:7d:82:e5:fc:
f9:30:39:61:fb:c4:07:5e:1d:d7:18:83:cb:41:84:c9:e5:8a:
00:a9:ab:00:06:4d:81:c6:a5:bb:f8:07:02:d9:9d:f4:9f:f1:
6b:2f:b7:25:9d:d2:45:b7:ce:fe:cd:81:71:4e:33:a7:cd:6b:
60:46:e0:06:ee:05:18:6c:54:77:e8:0e:8f:aa:7d:ab:74:71:
4c:a9:56:22:f6:6d:95:74:24:3d:9a:f0:7c:c5:eb:70:48:81:
43:ad:39:36:3d:62:0a:41:00:c5:63:39:f6:aa:ab:c7:2f:e4:
a0:50:f0:45:00:9b:c4:d0:20:53:ee:cb:85:fd:8d:31:b8:a4:
76:90:a6:88:24:1f:69:28:e3:45:c8:42:4f:3b:68:fc:3d:5d:
31:db:06:bf:29:18:b2:79:d0:f0:62:c3:ca:fe:c2:77:6b:00:
4f:41:7e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:52:58 2026 by rpki-client