Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
File: 0mHPvAfsMGN33LFql6EWDHptgsw.mft (raw, json)
Hash identifier: jSzbW6tmWQOccwlRu4ZEhCPFRqulZbay+8C8uwBRV3k=
Subject key identifier: CB:C6:15:4A:6D:A0:F1:D1:AD:13:09:A4:0B:54:F9:CA:AD:A6:D2:B9
Authority key identifier: D2:61:CF:BC:07:EC:30:63:77:DC:B1:6A:97:A1:16:0C:7A:6D:82:CC
Certificate issuer: /CN=d261cfbc07ec306377dcb16a97a1160c7a6d82cc
Certificate serial: 019D37528C6CDA8849D46E8E1E74F513F361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
Manifest number: 04D0
Signing time: Sun 29 Mar 2026 02:00:49 +0000
Manifest this update: Sun 29 Mar 2026 02:00:49 +0000
Manifest next update: Mon 30 Mar 2026 02:00:49 +0000
Files and hashes: 1: 0mHPvAfsMGN33LFql6EWDHptgsw.crl (hash: NBKwAZkvV+qq72G8PdVucbV9LQmoCjnPHC2fXbVLO28=)
2: p0fL_-s25OijH9UglPLyGf3hQ3k.roa (hash: sp4Y+8h1IocJtG1a3SfrXHCpPOK9+n80lPdEb2+Nl4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:8c:6c:da:88:49:d4:6e:8e:1e:74:f5:13:f3:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d261cfbc07ec306377dcb16a97a1160c7a6d82cc
Validity
Not Before: Mar 29 02:00:49 2026 GMT
Not After : Mar 30 02:00:49 2026 GMT
Subject: CN=cbc6154a6da0f1d1ad1309a40b54f9caada6d2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:82:7a:ce:93:7b:31:4a:dd:87:5a:5a:42:ad:
d0:80:51:8a:5c:7e:8a:f9:46:77:09:56:cd:d5:30:
31:4a:a2:a9:1f:06:7e:3b:60:14:b1:3e:a7:db:fe:
82:3b:db:91:7f:5b:b7:7f:b9:03:19:5c:ae:16:58:
09:37:5c:f0:53:cb:c7:e8:74:45:53:1d:7b:94:8a:
7c:3c:4f:73:af:93:72:29:fc:da:d5:61:a5:2f:cc:
91:65:e1:08:ee:d1:eb:df:b5:fc:23:5f:87:ab:90:
f9:89:fc:3b:6a:38:63:12:79:43:fb:04:4c:cd:77:
c2:dd:72:e3:02:96:c9:b4:ba:0c:a1:64:ed:1e:02:
c2:5a:a4:4f:11:b1:3e:32:33:21:8e:96:00:4a:f2:
b6:3a:82:a6:ae:39:3f:81:26:ae:65:68:e7:77:63:
d8:a3:b6:ce:30:53:95:68:03:1a:4f:6d:2d:29:19:
d6:27:3f:f6:64:dc:e4:e5:3d:97:91:58:a3:61:f9:
f6:62:2d:a9:d7:1e:bf:95:13:5e:89:08:d0:a3:03:
97:cb:96:55:0f:9a:4a:52:d7:8c:94:c1:1d:dd:64:
95:ac:7c:6c:1a:7f:7e:4f:9d:0f:00:01:6f:d6:59:
3c:d3:bb:67:f6:7e:30:5b:7c:6f:f7:ee:e2:c3:29:
4a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C6:15:4A:6D:A0:F1:D1:AD:13:09:A4:0B:54:F9:CA:AD:A6:D2:B9
X509v3 Authority Key Identifier:
keyid:D2:61:CF:BC:07:EC:30:63:77:DC:B1:6A:97:A1:16:0C:7A:6D:82:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b8:36:d0:a0:e3:dd:5d:ca:f3:0a:73:54:92:05:29:86:06:
b5:0b:10:d7:f9:e4:a8:95:0e:4a:6d:54:96:2b:cc:82:af:3c:
dd:72:f5:fa:ce:84:80:e2:38:5c:17:fd:f0:b8:ac:a0:08:fe:
5e:27:36:56:25:bf:56:6a:74:9b:2d:57:1f:71:2c:c2:39:f6:
7c:12:d8:c6:5c:21:1e:73:0b:4d:dc:9c:da:41:43:e2:42:16:
c7:4b:a6:d2:23:ec:e4:23:70:49:c5:94:64:c5:86:e4:1b:1d:
6c:c0:c1:98:48:64:94:49:10:57:28:c3:d6:74:8f:ec:3c:13:
15:24:24:7c:ae:db:22:a0:3c:33:11:90:e2:d5:f6:90:1d:93:
7b:16:41:6d:d7:6e:bf:53:c2:51:bc:69:ce:79:06:9c:90:91:
45:90:f6:77:ff:49:40:3a:b8:a0:7c:bf:c4:0d:c5:9c:89:15:
78:aa:e4:95:66:75:2d:a3:a9:a1:7c:89:58:2a:93:7f:af:b5:
36:b3:f2:ff:a6:7a:f7:9e:96:d9:27:e3:6a:28:68:65:70:e9:
7c:f6:c4:11:9d:71:1e:b2:34:b3:1e:79:35:07:de:2c:3d:4b:
8a:09:c1:b9:00:95:65:27:1f:a7:2c:bb:be:8e:25:82:58:fe:
0c:4a:fc:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03Uoxs2ohJ1G6OHnT1E/NhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNjFjZmJjMDdlYzMwNjM3N2RjYjE2YTk3YTExNjBjN2E2
ZDgyY2MwHhcNMjYwMzI5MDIwMDQ5WhcNMjYwMzMwMDIwMDQ5WjAzMTEwLwYDVQQD
EyhjYmM2MTU0YTZkYTBmMWQxYWQxMzA5YTQwYjU0ZjljYWFkYTZkMmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYJ6zpN7MUrdh1paQq3QgFGKXH6K
+UZ3CVbN1TAxSqKpHwZ+O2AUsT6n2/6CO9uRf1u3f7kDGVyuFlgJN1zwU8vH6HRF
Ux17lIp8PE9zr5NyKfza1WGlL8yRZeEI7tHr37X8I1+Hq5D5ifw7ajhjEnlD+wRM
zXfC3XLjApbJtLoMoWTtHgLCWqRPEbE+MjMhjpYASvK2OoKmrjk/gSauZWjnd2PY
o7bOMFOVaAMaT20tKRnWJz/2ZNzk5T2XkVijYfn2Yi2p1x6/lRNeiQjQowOXy5ZV
D5pKUteMlMEd3WSVrHxsGn9+T50PAAFv1lk807tn9n4wW3xv9+7iwylKOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMvGFUptoPHRrRMJpAtU+cqtptK5MB8GA1UdIwQY
MBaAFNJhz7wH7DBjd9yxapehFgx6bYLMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG1IUHZBZnNNR04zM0xGcWw2RVdESHB0Z3N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80ZWFmYzktNTQ3My00NjAyLWExNDkt
OTIyYTE2ZDExN2RkLzEvMG1IUHZBZnNNR04zM0xGcWw2RVdESHB0Z3N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS80ZWFmYzktNTQ3My00NjAyLWExNDktOTIyYTE2ZDExN2Rk
LzEvMG1IUHZBZnNNR04zM0xGcWw2RVdESHB0Z3N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJbg20KDj
3V3K8wpzVJIFKYYGtQsQ1/nkqJUOSm1UlivMgq883XL1+s6EgOI4XBf98LisoAj+
Xic2ViW/Vmp0my1XH3Eswjn2fBLYxlwhHnMLTdyc2kFD4kIWx0um0iPs5CNwScWU
ZMWG5BsdbMDBmEhklEkQVyjD1nSP7DwTFSQkfK7bIqA8MxGQ4tX2kB2TexZBbddu
v1PCUbxpznkGnJCRRZD2d/9JQDq4oHy/xA3FnIkVeKrklWZ1LaOpoXyJWCqTf6+1
NrPy/6Z6956W2SfjaihoZXDpfPbEEZ1xHrI0sx55NQfeLD1LignBuQCVZScfpyy7
vo4lglj+DEr8nw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:37 2026 by rpki-client