Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
File: 0rtm-96q__Q7llCx9svk8p7a9Yw.mft (raw, json)
Hash identifier: sn+dPj0BsyXwLc7wh54c5jiHvMTNg3HqcHD4KSBDDRQ=
Subject key identifier: CD:8D:38:4C:6A:18:A8:AE:0D:88:8C:95:E1:40:DA:3C:42:A2:81:6F
Authority key identifier: D2:BB:66:FB:DE:AA:FF:F4:3B:96:50:B1:F6:CB:E4:F2:9E:DA:F5:8C
Certificate issuer: /CN=d2bb66fbdeaafff43b9650b1f6cbe4f29edaf58c
Certificate serial: 019CC8D0E94D1AE76B9BA0D39DAF91CBD6E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
Manifest number: 1857
Signing time: Sat 07 Mar 2026 15:01:00 +0000
Manifest this update: Sat 07 Mar 2026 15:01:00 +0000
Manifest next update: Sun 08 Mar 2026 15:01:00 +0000
Files and hashes: 1: 0rtm-96q__Q7llCx9svk8p7a9Yw.crl (hash: 050q05wJGPq22+RdlJA4KuXJq9rcnnxhgZRA2UozhWA=)
2: eqRZK_JGFaT4pOqnhAyJvjkUCoA.roa (hash: jItvJdxi3E9SOd6i/gjBeEHoNNhvY/8u3V8hrLU5X7c=)
3: pdBEIOtIWrJ0TSk32Jmh_QpJkK8.asa (hash: sxkJU3Q3LaQ8TF/6A6BbBQGeo7WMZ4PLTizqyUpaQgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c8:d0:e9:4d:1a:e7:6b:9b:a0:d3:9d:af:91:cb:d6:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2bb66fbdeaafff43b9650b1f6cbe4f29edaf58c
Validity
Not Before: Mar 7 15:01:00 2026 GMT
Not After : Mar 8 15:01:00 2026 GMT
Subject: CN=cd8d384c6a18a8ae0d888c95e140da3c42a2816f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:37:c2:3c:32:41:34:f5:6e:95:4f:6c:ce:9c:
36:04:b3:5a:9e:1a:70:48:1c:4a:9e:6f:e8:9d:90:
fa:47:96:cc:a9:ae:c7:33:63:be:33:69:eb:f1:ce:
dc:2a:c4:5a:f7:ad:8f:a3:c0:d6:bf:c4:20:aa:b9:
96:41:7d:a5:b7:bf:82:de:55:3c:b0:84:fe:83:7a:
a7:7c:40:4b:a5:75:df:3b:07:8e:5b:43:3a:fc:1c:
cb:c4:1f:7b:bb:e3:f0:00:a6:e1:e5:9f:fa:26:79:
53:01:6b:e7:ca:f8:01:09:5c:2a:9a:f0:34:b9:79:
7a:75:23:70:16:9d:27:80:b1:dc:e0:f9:dd:46:95:
bf:51:84:be:38:c7:fe:75:8f:a7:03:32:c7:db:68:
17:ce:fe:71:7c:00:a3:45:b4:53:7e:f2:38:a1:78:
3a:b2:a0:ad:c7:bc:44:e0:b0:fb:d6:44:2e:8b:c3:
d5:87:7b:e1:cf:1e:33:22:11:72:07:a2:39:2d:77:
4e:64:94:f5:0f:87:07:36:bb:95:f8:fe:41:76:6b:
b6:6a:5c:5a:6e:47:94:53:e6:73:0f:d1:01:50:57:
5e:a7:2a:24:fa:c1:98:74:f0:36:55:ad:8d:16:e8:
8d:cb:e6:1d:5e:be:de:12:e2:12:04:ff:a2:52:42:
6c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8D:38:4C:6A:18:A8:AE:0D:88:8C:95:E1:40:DA:3C:42:A2:81:6F
X509v3 Authority Key Identifier:
keyid:D2:BB:66:FB:DE:AA:FF:F4:3B:96:50:B1:F6:CB:E4:F2:9E:DA:F5:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:fe:ca:e8:be:db:94:2e:85:ac:42:1f:0d:6c:dc:aa:75:ce:
fa:5c:49:8e:21:6d:6d:ab:02:f3:60:f2:8e:23:36:fd:41:30:
c2:c7:d3:6d:ec:17:67:ed:d0:eb:ff:24:d5:37:64:4b:f5:fe:
4e:d6:70:20:6b:a3:a2:56:2d:5c:ee:c1:66:c5:67:90:7f:4d:
83:69:a7:6b:95:b1:15:fc:97:55:4b:93:f0:ff:42:64:15:d3:
8f:16:19:66:32:58:f0:0c:4f:9f:1c:30:23:f1:87:20:bc:93:
76:73:f4:5c:b5:c0:0e:c1:fc:bc:41:43:ea:3d:76:d0:ee:6b:
a0:ef:a5:86:cc:ac:78:ee:6e:dd:42:bf:7d:70:31:74:5e:fa:
33:ed:8f:a3:37:7e:78:5d:c3:17:3d:bc:eb:6a:4a:66:5d:80:
aa:b3:1e:c7:fb:85:fc:e4:49:ab:d5:0c:74:15:14:33:83:4c:
3c:b2:96:3e:98:b1:1d:3e:32:ec:55:e9:38:cf:7f:2a:b0:35:
c1:05:b9:d3:f7:1c:e5:03:18:e1:56:4a:14:35:68:4e:ad:a1:
a9:85:eb:70:cc:0f:49:9b:92:db:e0:90:9c:72:87:7a:62:76:
b8:96:22:d3:81:ce:1d:28:4d:97:f9:e2:8f:da:83:d5:9e:61:
24:fe:d5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 21:17:17 2026 by rpki-client