Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
File: 0rERWbctQBXthntCt4Q4Hl2VWo8.mft (raw, json)
Hash identifier: y+33l2leNc3d83aOJ+2fhASf9iYNjQkCYJpKPRWqasU=
Subject key identifier: E2:94:6D:64:D9:E8:42:79:54:82:B2:CF:A8:97:9F:FA:14:B7:DE:51
Authority key identifier: D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F
Certificate issuer: /CN=d2b11159b72d4015ed867b42b784381e5d955a8f
Certificate serial: 019D3AF8AC818944DFC31693E6A08ECC370D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 19:01:08 +0000
Manifest this update: Sun 29 Mar 2026 19:01:08 +0000
Manifest next update: Mon 30 Mar 2026 19:01:08 +0000
Files and hashes: 1: 0rERWbctQBXthntCt4Q4Hl2VWo8.crl (hash: 73bqN5kCBIFAUxZp4/wZzH6ZIlsvKkrU47n/UQSHUs0=)
2: 6lRgb3MGRN0CzqxKgomWEIyJ3Mg.roa (hash: CYhce381HzbX7vSncPONtF+Lbdg5xHx48Q/vd4tyB6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:f8:ac:81:89:44:df:c3:16:93:e6:a0:8e:cc:37:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2b11159b72d4015ed867b42b784381e5d955a8f
Validity
Not Before: Mar 29 19:01:08 2026 GMT
Not After : Mar 30 19:01:08 2026 GMT
Subject: CN=e2946d64d9e842795482b2cfa8979ffa14b7de51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3b:81:46:78:68:07:5e:ab:c1:94:b9:52:dc:
f7:84:02:e4:78:63:0d:e5:b3:23:8f:eb:e9:0b:b2:
99:77:d2:0d:10:27:e2:82:47:c7:79:00:a9:3d:a2:
b2:68:e6:18:db:7e:3f:1f:5b:22:02:ad:c7:ee:ec:
9b:55:b2:f7:14:32:8f:d1:b4:b6:0f:69:76:14:36:
bd:ba:bf:1b:17:5d:dd:bc:f8:92:63:1d:8b:57:7e:
a3:c5:86:2e:8c:98:3c:71:41:5f:9a:52:11:e1:e6:
e0:d2:a4:0f:fd:bd:bd:4d:c8:78:15:af:e0:b1:fb:
ba:f5:7c:c4:4f:87:3b:09:a6:a1:96:6b:b5:1d:9d:
19:3c:10:75:0e:75:17:ef:a6:87:8b:2f:9c:14:22:
62:68:09:11:f4:d1:fa:34:68:c6:05:66:28:a3:5a:
4a:04:00:83:db:b3:0f:5f:69:24:6b:b4:ca:8c:ff:
ab:5f:57:47:8a:15:67:77:27:2d:4b:c5:89:d7:3a:
cb:38:7c:ac:bf:da:56:a9:ef:2a:9a:b5:2c:18:ab:
26:18:ca:ca:1c:d1:d4:bf:12:af:6a:32:8b:b3:15:
27:a8:2c:e4:f1:f3:41:90:5e:df:e1:3c:bf:6f:b6:
2b:a7:6e:49:d7:f7:0d:9b:cf:2a:f9:9f:ce:40:79:
2d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:94:6D:64:D9:E8:42:79:54:82:B2:CF:A8:97:9F:FA:14:B7:DE:51
X509v3 Authority Key Identifier:
keyid:D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b4:d6:d4:d4:2d:a7:14:09:51:43:88:11:c3:37:14:e2:e0:
a4:77:71:d0:36:7d:be:d8:ed:ed:ff:26:9e:37:31:fe:83:7f:
12:9b:4e:f8:b3:31:cd:0b:93:20:4f:b6:fe:8c:28:b7:d0:77:
a3:af:ad:f5:93:f2:af:4a:44:e7:53:9d:a3:b0:73:1d:db:fe:
93:31:1f:68:07:9e:49:2d:8f:63:44:92:1a:89:0f:ca:de:94:
d2:34:de:a6:22:52:0b:4a:62:33:d2:c1:c1:50:6f:57:0a:74:
d0:5e:0e:52:0c:d6:de:4b:29:86:af:66:e1:62:4b:d2:a8:4c:
14:44:cb:c2:7d:79:05:0c:01:b6:f1:01:6b:40:35:e9:ac:66:
e1:54:69:fd:d5:db:07:d4:d2:7a:e5:ff:d0:06:f9:c0:5e:34:
b2:e8:fe:0f:bc:19:20:b7:a2:4a:6b:63:74:24:c6:58:a9:a4:
09:4b:1f:60:8a:e5:d1:c4:0c:53:24:70:2a:f3:88:5f:da:0b:
2c:25:f0:3a:7f:28:5b:68:d9:6a:23:75:f3:a6:30:e2:c9:a6:
37:2c:25:a3:0d:aa:be:ba:86:3d:94:c5:21:f7:53:01:72:83:
c0:ac:c1:7b:09:3c:07:33:0d:1b:b3:46:89:b8:ed:ac:9d:e4:
59:d4:5a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:22:17 2026 by rpki-client