Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
File: 0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft (raw, json)
Hash identifier: 4oRbf233JgsiztxswIXV5JMkf9DKSI8Zu3ap+y0ky10=
Subject key identifier: A9:33:DA:23:BF:8A:C1:8F:B6:A8:70:47:8E:52:D6:DE:8D:10:1C:EB
Authority key identifier: D0:5E:D7:A5:81:47:AA:51:4C:8E:6D:AF:BC:C5:D8:75:7C:7D:32:72
Certificate issuer: /CN=d05ed7a58147aa514c8e6dafbcc5d8757c7d3272
Certificate serial: 019CFB078678CB4A93F4F1497B7F3946DFCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
Manifest number: 035F
Signing time: Tue 17 Mar 2026 09:01:40 +0000
Manifest this update: Tue 17 Mar 2026 09:01:40 +0000
Manifest next update: Wed 18 Mar 2026 09:01:40 +0000
Files and hashes: 1: 0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl (hash: YcDLW/jWCR7DGcYe4cnBn4j8vvifVlnwNniJHuizM9k=)
2: RRSohk2nwrUzuw9Rw-D24vHj4iw.roa (hash: cMUbM2/hxrn9h126Zdm7DYzjZuRiajCmosfkit3vk8Y=)
3: c0Owme8MxYD620tsBpkMHThjdrE.roa (hash: Gh6CiZ1DobVHlOo0S4vuXYLdOtBEQiYqATFSpfC1Cik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Mar 2026 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fb:07:86:78:cb:4a:93:f4:f1:49:7b:7f:39:46:df:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05ed7a58147aa514c8e6dafbcc5d8757c7d3272
Validity
Not Before: Mar 17 09:01:40 2026 GMT
Not After : Mar 18 09:01:40 2026 GMT
Subject: CN=a933da23bf8ac18fb6a870478e52d6de8d101ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f2:fa:42:97:c5:f9:85:7c:ae:93:f6:52:2d:
d1:da:e7:85:03:79:ce:cc:b6:08:2d:08:aa:a8:db:
96:fe:4a:7e:04:10:09:dc:fc:20:22:43:eb:fd:d0:
63:5f:5a:94:65:1b:95:70:87:bd:9a:e1:1d:f9:12:
fc:52:81:0a:6d:75:0a:94:02:f4:91:ad:81:61:a4:
c3:0a:9c:9d:f5:bc:36:e1:a8:54:8f:a4:eb:14:27:
9d:7c:b9:a2:85:e2:31:6d:36:28:22:c6:67:ef:34:
49:c9:40:43:a0:0f:1f:d1:23:84:c2:9d:e7:b8:38:
8a:c6:81:b2:d4:73:08:ff:07:48:b7:14:0a:89:ec:
18:25:12:fc:50:c5:ff:f5:9b:83:27:63:ab:bc:bd:
eb:ac:9f:5d:eb:22:fc:1a:10:00:18:0d:5a:92:5c:
67:c2:f5:a7:52:1d:6d:44:53:dd:3f:e8:03:ba:0c:
be:34:6c:96:49:b1:fc:3e:90:ac:c1:cf:1a:2d:3b:
99:a9:b1:a2:4d:73:86:b0:83:eb:f4:e0:f0:68:d3:
48:84:24:28:94:7c:d2:c5:f5:00:73:fc:d7:f6:85:
bc:b1:7c:41:16:1b:2a:f5:5b:2d:17:26:6c:20:9f:
0a:7c:89:e3:47:89:80:31:cc:c7:5a:8e:36:dd:c0:
0b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:33:DA:23:BF:8A:C1:8F:B6:A8:70:47:8E:52:D6:DE:8D:10:1C:EB
X509v3 Authority Key Identifier:
keyid:D0:5E:D7:A5:81:47:AA:51:4C:8E:6D:AF:BC:C5:D8:75:7C:7D:32:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:e9:44:ba:7c:e5:ec:75:8a:7a:a8:fa:00:d2:ef:2f:78:8d:
65:91:ab:8a:1c:c8:da:5d:06:2c:7b:c7:cf:0a:af:ee:3a:7b:
58:3f:b1:0a:14:2d:60:65:ef:6e:4b:f2:b7:db:6f:8e:5a:e8:
62:8e:b5:98:cf:15:88:a7:4b:e4:0c:2c:7c:55:19:7b:60:5d:
e6:71:cd:ed:ed:d0:fe:3a:ad:aa:7a:31:00:4b:6f:7b:4e:29:
9e:66:6b:d0:60:09:37:51:0c:d1:ac:ca:8d:f8:07:ea:63:7d:
5f:c6:d0:93:17:bf:d5:49:87:fa:b2:a0:b0:16:67:a5:18:8f:
a1:d2:ff:f5:5e:66:68:ac:ec:75:53:dd:04:7a:93:e2:a9:0d:
b0:e0:48:5b:84:29:25:3c:04:59:f3:4d:a1:e9:8c:8d:55:ad:
17:47:1e:cc:a9:20:57:f4:d6:8d:d0:1e:ef:9b:a9:7f:bd:40:
9c:43:d9:f7:4a:54:99:74:1d:10:d5:20:6d:21:0e:18:a1:63:
09:5b:fe:62:53:dc:d9:b2:f2:f0:98:99:1b:88:09:33:f5:6b:
23:76:fa:ec:a5:ca:8a:57:be:1e:f1:58:01:ec:0c:a4:a7:ff:
c9:75:d2:7e:b8:87:5d:7d:58:c6:ba:72:6f:88:d0:f0:02:8b:
d0:f1:d8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 14:04:55 2026 by rpki-client