Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
File: 0d9IA-VLCEqZy3uwRL95EydZS3M.mft (raw, json)
Hash identifier: cL/Xs8DzHPG9bURUdoW7ueGsnj6xdwPn1rO0rotaExM=
Subject key identifier: 28:1A:EA:C2:44:20:CE:7E:90:4D:2E:B7:89:51:BF:27:AB:45:FE:C1
Authority key identifier: D1:DF:48:03:E5:4B:08:4A:99:CB:7B:B0:44:BF:79:13:27:59:4B:73
Certificate issuer: /CN=d1df4803e54b084a99cb7bb044bf791327594b73
Certificate serial: 019D3941984F82A7B75DC17A216CD623583C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 11:01:33 +0000
Manifest this update: Sun 29 Mar 2026 11:01:33 +0000
Manifest next update: Mon 30 Mar 2026 11:01:33 +0000
Files and hashes: 1: 0d9IA-VLCEqZy3uwRL95EydZS3M.crl (hash: 2cXjJ9SbxLUqNw44XZCvO3+o3EH75TandQ7krMmOnnU=)
2: 28LudlG1yP68N48FiZaHtqk72K8.roa (hash: 5dBhZER1Qa42n7n8NoOAfpg90tBUobSV95L4NLM5PZA=)
3: A4ui5uqLkX9PBLLxf1O5MibqJ2Q.roa (hash: heMNmY/PuI8OxFj8v8yD7W3dtUKrag//RQPXs4fd034=)
4: B3sV0jnamNo239vQrhEaWaSxAqM.roa (hash: 9SPwVzjU/44IydDd5luHKS0eXy9i/DzhGcx7z6/dCF0=)
5: MWww8mg4IAuQ7tfubwcnBwcN-wc.roa (hash: h5+JwC9CF+2XnTKrJ979fW9yKh/yquKOOiCoaTps0Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:98:4f:82:a7:b7:5d:c1:7a:21:6c:d6:23:58:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1df4803e54b084a99cb7bb044bf791327594b73
Validity
Not Before: Mar 29 11:01:33 2026 GMT
Not After : Mar 30 11:01:33 2026 GMT
Subject: CN=281aeac24420ce7e904d2eb78951bf27ab45fec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5d:23:ab:03:b0:8e:b6:df:f9:06:01:50:5a:
0b:3a:6f:ec:4b:1e:1d:4f:26:5c:99:17:37:af:f5:
06:ce:fa:be:9a:6c:a6:9f:05:4e:f4:53:f7:09:b3:
c6:21:fe:f3:aa:fa:75:4d:2f:9d:9e:fa:6e:d7:ec:
69:f4:b7:21:04:54:fb:ca:1c:52:5e:53:60:1c:79:
a1:a8:d0:7c:7f:35:43:74:5f:c7:b3:72:f4:02:ef:
06:96:5f:d0:77:df:84:f5:dc:64:90:48:17:8c:bd:
93:6d:3a:aa:b2:45:dc:e8:a2:86:d2:f8:25:07:21:
37:38:55:a2:6b:3c:8e:f1:dc:f7:e6:32:77:9c:11:
03:0b:8b:1e:9a:ac:e1:32:ac:03:8d:29:1a:fe:38:
b2:60:a9:df:da:a2:60:5c:e8:6e:75:59:3e:24:49:
b8:0f:d9:a2:47:fe:1c:a9:6f:89:1d:f9:ce:dc:ae:
db:80:49:9e:2f:13:90:c9:e1:d2:7c:cc:8c:c1:78:
85:50:c0:f1:c9:06:22:63:72:cc:8b:37:b8:8c:ee:
5a:04:68:8c:09:c7:33:95:cf:34:88:a1:29:94:a3:
c6:2a:ec:50:20:2a:dd:cd:01:2a:fc:51:fe:2e:0c:
67:c5:6e:ab:7a:4e:c0:ad:2d:74:c1:07:92:04:50:
90:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:1A:EA:C2:44:20:CE:7E:90:4D:2E:B7:89:51:BF:27:AB:45:FE:C1
X509v3 Authority Key Identifier:
keyid:D1:DF:48:03:E5:4B:08:4A:99:CB:7B:B0:44:BF:79:13:27:59:4B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:77:bc:d4:3e:c6:53:fc:7e:00:6b:94:15:2e:c2:b6:34:e3:
31:e8:72:e7:54:4c:18:bc:2e:1f:d7:81:ca:55:ec:b8:03:8d:
97:a3:4c:58:b3:4c:e4:2f:07:f1:49:84:c8:a1:49:ad:ab:8b:
23:7c:cc:20:e4:b1:3b:0f:72:fd:75:a5:4f:d0:aa:06:60:ea:
b1:ea:d3:a5:4f:e0:73:fe:e0:e5:4e:4e:ad:9a:45:a3:96:7a:
7a:a0:70:e8:ad:de:4d:a2:88:19:29:79:47:5f:49:91:4f:63:
43:07:6a:b5:de:2a:0f:af:2a:b6:97:7c:5d:bd:3c:68:5f:56:
7e:95:13:84:15:ad:4c:52:ca:87:23:86:d0:af:23:4c:ac:1f:
d9:13:05:f0:f2:c8:4c:9a:f1:4c:2a:2e:fb:c6:a2:15:2b:03:
6f:52:41:ba:79:ba:66:f0:31:09:53:23:b4:5f:09:1c:36:d5:
4c:ae:1d:7f:7c:20:87:01:a4:6e:79:14:35:d9:ba:e0:f6:81:
4b:86:50:ea:b8:f2:00:fd:73:d7:0d:ee:72:25:c1:46:32:be:
a0:3e:5d:19:71:75:51:19:0b:26:85:e2:7d:5d:4a:70:2f:07:
15:b4:c1:b2:d6:31:fc:e9:54:01:2d:e5:22:e6:b8:26:17:92:
c0:fc:e7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:51 2026 by rpki-client