Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
File: 0PbNMLTPoZPiJrupKC42aiKjEQ8.mft (raw, json)
Hash identifier: pipiptZs0Z/7BrXbygL1z7n3ITueF1obivIznphqQr4=
Subject key identifier: C6:54:25:6B:8A:AB:DB:F7:D8:99:F8:C8:30:42:BF:B5:AC:0B:36:DC
Authority key identifier: D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
Certificate issuer: /CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Certificate serial: 019D37C0B6900F4CCF9E95B481B81F8F35B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 04:01:09 +0000
Manifest this update: Sun 29 Mar 2026 04:01:09 +0000
Manifest next update: Mon 30 Mar 2026 04:01:09 +0000
Files and hashes: 1: 0PbNMLTPoZPiJrupKC42aiKjEQ8.crl (hash: ptqVqC8XBc/2TH7RRp3slP7/WSYdfgby9j1a3fGVmZQ=)
2: 0g907WBXD4qZBS5Lv--lVG4AGmY.roa (hash: ADx0uWHqRsIMIEM4zrRsIaFkNMUykkO7aZ3mKfDHgOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:b6:90:0f:4c:cf:9e:95:b4:81:b8:1f:8f:35:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Validity
Not Before: Mar 29 04:01:09 2026 GMT
Not After : Mar 30 04:01:09 2026 GMT
Subject: CN=c654256b8aabdbf7d899f8c83042bfb5ac0b36dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:39:6d:49:d8:c3:f8:83:9f:54:b9:fe:e5:75:
dc:93:08:f2:39:af:08:ec:60:7f:f2:57:de:df:f0:
75:72:49:8b:b4:79:be:43:bb:68:fd:f6:ee:49:15:
86:63:46:d1:9e:86:39:2b:cd:47:b0:b7:1b:c0:ea:
99:b7:59:f7:16:7b:68:b9:9f:2a:b5:e4:87:76:fa:
25:0b:dc:3b:cc:48:73:88:dc:65:ed:57:10:12:e3:
45:26:17:85:53:26:ec:7f:b9:6b:70:37:2b:7d:96:
e8:1b:57:00:87:d4:f8:8d:03:45:6c:17:92:ed:b6:
e2:0d:47:51:40:17:10:59:07:b5:4c:ba:0e:5d:22:
1b:57:7a:db:58:c4:0e:94:b4:48:ba:7f:29:d8:41:
a9:e3:bf:c1:12:12:ba:a3:0d:3a:54:62:f7:54:17:
37:51:20:5c:cf:da:3c:e8:15:be:6e:0a:59:a5:45:
1d:80:e7:61:52:d4:c1:94:59:e7:25:5c:8b:cc:98:
eb:80:d3:c8:79:7a:1e:88:c0:ad:4c:f8:18:72:e2:
e2:62:c2:fd:f8:33:48:b4:06:35:8e:d5:85:03:3a:
5c:4d:3f:a4:51:89:3a:87:be:dd:7c:1d:a4:31:fa:
fe:82:bd:f4:11:2c:06:92:3d:9c:a5:63:b9:2c:97:
40:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:54:25:6B:8A:AB:DB:F7:D8:99:F8:C8:30:42:BF:B5:AC:0B:36:DC
X509v3 Authority Key Identifier:
keyid:D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:fc:66:0c:60:81:a6:0a:b1:3d:b4:67:2e:16:19:45:6d:19:
71:00:7d:b4:6a:01:a3:d4:e7:c3:30:f3:88:f8:77:7f:04:24:
27:61:93:91:be:4b:fb:eb:43:03:bb:86:c9:cd:99:e7:a3:55:
81:8e:c5:33:b6:91:a0:3f:e0:e5:f1:63:dd:0d:8b:fc:ea:7e:
fa:56:47:1c:e4:b5:ca:59:f4:ab:70:a8:f3:75:85:b0:0a:e6:
fc:46:21:1b:5e:76:49:5b:12:54:85:b8:29:a9:ce:29:a2:1e:
f0:5c:dd:ac:39:35:75:a9:6a:5c:f0:e8:52:21:2d:39:9a:36:
f5:ad:67:ac:b0:d4:3a:d5:29:b5:b3:cd:5a:3b:0e:4d:72:c2:
3a:66:57:be:cb:f4:b1:d7:23:af:df:a9:62:1d:d2:d3:21:4d:
fe:1a:07:81:71:b8:23:6e:49:a8:99:28:e1:40:8a:56:d6:0c:
de:13:ea:a7:21:13:33:b8:03:a3:41:c0:6a:db:a4:82:59:c9:
4f:47:a0:fd:c1:ea:b3:7d:2c:a0:c0:31:43:6c:bb:e8:ac:bc:
a0:34:c7:62:78:93:59:75:ff:50:79:c4:87:d9:65:9a:50:7d:
4a:fa:c6:1b:8b:93:da:af:19:b4:cd:eb:9f:ef:4d:35:d3:b5:
1b:45:77:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:53:59 2026 by rpki-client