Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
File: 0SFb_EiHbDZRg1bv1uKAJVod7jw.mft (raw, json)
Hash identifier: D8HH2KjGHVQC080d/CovhBQO5WziE7cIcvmbkY9+LEs=
Subject key identifier: AA:96:A8:1A:0D:03:F1:CE:0E:0E:F1:57:D0:55:FD:B5:8E:A3:51:6E
Authority key identifier: D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
Certificate issuer: /CN=d1215bfc48876c36518356efd6e280255a1dee3c
Certificate serial: 019CF5AA3D7FDBD2C79995A4A760942FEC52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
Manifest number: 0FE8
Signing time: Mon 16 Mar 2026 08:01:40 +0000
Manifest this update: Mon 16 Mar 2026 08:01:40 +0000
Manifest next update: Tue 17 Mar 2026 08:01:40 +0000
Files and hashes: 1: 0SFb_EiHbDZRg1bv1uKAJVod7jw.crl (hash: g2PuA9TY/QRKg9NBrKHwukH8115bcQWMPyYARxHXSq4=)
2: V85y9LeDqS5T_7Jp3kZ3KBVJA_Q.roa (hash: dqwbGll0ZQp3qCkA8FJVoE9Przjq1Z276l8w8WiwoPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 08:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f5:aa:3d:7f:db:d2:c7:99:95:a4:a7:60:94:2f:ec:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1215bfc48876c36518356efd6e280255a1dee3c
Validity
Not Before: Mar 16 08:01:40 2026 GMT
Not After : Mar 17 08:01:40 2026 GMT
Subject: CN=aa96a81a0d03f1ce0e0ef157d055fdb58ea3516e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:72:f9:69:f6:ec:60:68:cd:81:14:67:f8:68:
d5:4b:9f:7b:33:31:25:5f:5b:a9:54:3c:b2:dc:c0:
d8:8a:10:fd:1e:6e:b7:1b:9b:8a:df:b5:4e:ef:bc:
cf:db:6a:7d:f0:e3:f4:67:40:80:b0:fc:8a:4b:32:
32:e3:b4:01:4c:42:ff:d3:e9:21:10:0a:c3:9a:09:
6b:2e:08:6a:cd:0e:a4:e4:34:3b:b0:43:0c:37:e0:
bb:2b:c5:15:40:90:81:21:cb:97:5f:41:4b:34:99:
34:cd:2e:42:6f:9d:2d:2f:83:f2:41:04:dd:da:4c:
6d:3b:8e:1f:43:1f:28:29:ec:28:e9:03:29:1f:38:
cf:55:63:e9:f2:59:35:13:21:b4:75:01:80:74:b6:
9b:f8:7f:da:f6:cd:e5:85:74:7d:1c:47:de:72:96:
38:b4:3f:4c:a7:f7:fb:4b:58:9a:e2:77:50:26:06:
5a:f4:6d:25:60:a7:a1:fa:c7:3a:c3:5b:ae:20:b3:
7f:0a:2a:02:28:d1:a6:cf:9e:18:f5:3d:3b:93:e3:
ff:03:f6:ad:e1:25:07:f8:ad:46:04:ae:4d:b8:48:
59:41:8a:44:80:f5:97:3b:d1:be:4e:1c:a2:53:56:
8a:16:21:16:25:84:70:c9:bd:88:58:af:5b:2f:8a:
cf:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:96:A8:1A:0D:03:F1:CE:0E:0E:F1:57:D0:55:FD:B5:8E:A3:51:6E
X509v3 Authority Key Identifier:
keyid:D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:77:ae:83:7c:a2:dd:0f:ca:59:0f:e2:92:19:fa:9b:2b:e2:
71:e1:fc:f5:ae:ed:11:b6:b3:5d:cc:67:9c:b0:69:dd:f5:e1:
31:c2:a0:28:30:d5:6c:4f:81:aa:74:50:fa:f5:d8:04:a3:95:
ea:4e:dc:5e:96:32:74:c4:cd:5f:98:a2:b5:c8:91:f0:a2:49:
d7:0c:0c:d6:96:b8:46:f4:59:38:e9:eb:74:ca:19:fd:fd:ba:
bd:e6:5b:d5:91:87:a1:56:c7:ed:4c:ef:83:6c:3c:9f:98:00:
ea:5f:74:6e:dc:fb:59:a8:cf:00:e1:28:5c:f7:cd:47:8d:aa:
8b:6b:71:c0:1f:f5:a7:8d:f0:fa:c6:6f:80:97:98:69:4a:bc:
e0:97:f9:74:47:71:5e:ed:8a:3d:84:cd:6a:7d:0c:bb:3e:56:
9f:cd:90:6f:4b:21:7d:9c:92:48:c3:2c:20:2a:f6:4f:f9:33:
7f:aa:36:47:de:93:8c:fd:c9:47:45:50:6a:6c:e9:78:d0:29:
48:de:14:a4:b7:0f:9e:6d:eb:c5:0b:a2:46:b0:11:02:44:3c:
40:7e:26:b2:f2:f3:dd:a8:08:8f:97:53:6e:9a:dd:78:06:cd:
9d:4b:5e:23:b1:68:4a:a2:f8:71:1f:b4:44:ab:93:ac:40:79:
e3:86:80:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 15:16:38 2026 by rpki-client