Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
File: C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft (raw, json)
Hash identifier: pAJBZcJX+uu6j15RPuR9qwy6cuo6fJ1cpJiziHjHeJk=
Subject key identifier: 9F:3C:22:18:A7:F2:D3:B6:1E:45:83:08:73:5D:D1:FD:5C:54:8F:2F
Authority key identifier: 0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE
Certificate issuer: /CN=0b42fb4831c1daf2d963c47638d703086eeca8de
Certificate serial: 019D3866AE31F9C7F375A3F51A443F9A72FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 07:02:26 +0000
Manifest this update: Sun 29 Mar 2026 07:02:26 +0000
Manifest next update: Mon 30 Mar 2026 07:02:26 +0000
Files and hashes: 1: C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl (hash: EwWTSzmQZI6sUGSCiNMWf1GlA91nJLVfkwKAfymbAoc=)
2: CG82gzRyJjDfFWfuD3mZCTUFAGk.roa (hash: gKZxL4EPwYbDm8mzGxioP2eZTGCmezZu5Mvtzl5e1/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:ae:31:f9:c7:f3:75:a3:f5:1a:44:3f:9a:72:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b42fb4831c1daf2d963c47638d703086eeca8de
Validity
Not Before: Mar 29 07:02:26 2026 GMT
Not After : Mar 30 07:02:26 2026 GMT
Subject: CN=9f3c2218a7f2d3b61e458308735dd1fd5c548f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4c:fb:dd:83:2c:43:f7:6b:24:eb:52:96:f8:
71:30:e7:9e:e5:82:f9:84:cb:08:02:b6:ae:98:22:
92:7d:33:41:95:1d:10:2e:47:8a:2b:a4:46:23:58:
87:1d:a3:a5:56:49:e1:32:50:0e:da:0e:7a:56:6f:
8f:94:3c:b4:29:0d:53:a8:27:7c:cf:2b:45:c0:68:
c0:57:fe:74:79:47:d8:bf:29:56:99:2d:20:96:62:
7c:73:cb:ee:cd:d7:16:e1:42:ae:84:45:e9:84:fd:
9f:02:22:82:05:a6:cc:9c:00:e1:7b:25:0f:37:22:
06:2c:6f:15:32:02:21:5a:07:8a:60:3f:f7:38:6d:
50:ac:a9:6c:bc:b7:4c:99:65:49:42:25:34:43:51:
03:d8:01:91:e2:1a:75:08:46:58:b7:fb:c1:39:ba:
ff:e1:53:4b:ad:7f:9a:40:46:f7:6d:1d:c7:fa:1d:
7a:48:0f:df:f6:09:fe:81:82:f0:e3:f0:96:8f:8d:
c8:a4:62:03:c2:39:bf:d0:b4:0c:7b:ee:d5:98:d0:
d6:94:ca:af:bf:76:3b:83:2e:56:91:8a:50:2d:23:
35:c6:58:f4:b8:15:a3:42:b4:4e:7d:b3:1c:b6:f6:
75:f7:76:02:18:45:04:9c:d4:f7:b2:68:d7:4f:2f:
f4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3C:22:18:A7:F2:D3:B6:1E:45:83:08:73:5D:D1:FD:5C:54:8F:2F
X509v3 Authority Key Identifier:
keyid:0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:92:ee:7d:ec:10:76:29:9e:e7:34:b3:70:25:73:95:61:75:
79:db:37:b8:64:e6:60:ad:11:4a:80:b8:67:da:dc:16:0d:58:
51:58:62:a8:43:19:f5:cd:4e:82:a3:4e:2f:56:f1:c5:11:ba:
17:8a:7b:56:a8:51:09:30:a6:68:0e:f8:65:2b:c7:57:0c:11:
09:c2:b8:71:80:e3:81:1f:8f:96:97:2f:36:77:fb:2c:0b:67:
bd:4c:c0:97:17:ee:df:76:9e:b8:29:3c:0d:b4:e1:25:5d:e8:
40:c0:d6:ef:7b:cd:e1:34:9d:a6:a5:53:ec:5f:4a:2e:ae:14:
fd:95:dc:84:8d:56:2a:3c:c3:a0:ec:35:63:cb:be:e0:c8:01:
f7:90:50:dd:a1:a0:75:c0:4b:e9:fc:36:bf:25:f1:db:9e:65:
77:c5:a8:5c:76:11:9c:31:1f:7c:bf:25:a0:b7:f4:2b:70:2b:
ee:f6:5e:4d:53:71:5e:f7:0e:c1:15:cb:a0:89:a8:0c:3f:19:
d5:da:87:84:5f:09:72:d4:9b:f8:e9:9c:ba:15:88:3e:11:6e:
dc:d0:91:8a:60:4a:03:7f:d5:96:1a:44:ea:a4:97:4b:90:6b:
9b:d0:0c:80:3d:91:5c:e4:11:68:ef:98:4a:4c:19:83:f8:8a:
4d:2e:be:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zq4x+cfzdaP1GkQ/mnL+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNDJmYjQ4MzFjMWRhZjJkOTYzYzQ3NjM4ZDcwMzA4NmVl
Y2E4ZGUwHhcNMjYwMzI5MDcwMjI2WhcNMjYwMzMwMDcwMjI2WjAzMTEwLwYDVQQD
Eyg5ZjNjMjIxOGE3ZjJkM2I2MWU0NTgzMDg3MzVkZDFmZDVjNTQ4ZjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kz73YMsQ/drJOtSlvhxMOee5YL5
hMsIAraumCKSfTNBlR0QLkeKK6RGI1iHHaOlVknhMlAO2g56Vm+PlDy0KQ1TqCd8
zytFwGjAV/50eUfYvylWmS0glmJ8c8vuzdcW4UKuhEXphP2fAiKCBabMnADheyUP
NyIGLG8VMgIhWgeKYD/3OG1QrKlsvLdMmWVJQiU0Q1ED2AGR4hp1CEZYt/vBObr/
4VNLrX+aQEb3bR3H+h16SA/f9gn+gYLw4/CWj43IpGIDwjm/0LQMe+7VmNDWlMqv
v3Y7gy5WkYpQLSM1xlj0uBWjQrROfbMctvZ193YCGEUEnNT3smjXTy/0pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ88Ihin8tO2HkWDCHNd0f1cVI8vMB8GA1UdIwQY
MBaAFAtC+0gxwdry2WPEdjjXAwhu7KjeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzBMN1NESEIydkxaWThSMk9OY0RDRzdzcU40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82ZjY3NDMtMGIyMi00MzEyLTljMWEt
YjM2NjNhMzQ1NTE4LzEvQzBMN1NESEIydkxaWThSMk9OY0RDRzdzcU40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC82ZjY3NDMtMGIyMi00MzEyLTljMWEtYjM2NjNhMzQ1NTE4
LzEvQzBMN1NESEIydkxaWThSMk9OY0RDRzdzcU40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa5LufewQ
dime5zSzcCVzlWF1eds3uGTmYK0RSoC4Z9rcFg1YUVhiqEMZ9c1OgqNOL1bxxRG6
F4p7VqhRCTCmaA74ZSvHVwwRCcK4cYDjgR+PlpcvNnf7LAtnvUzAlxfu33aeuCk8
DbThJV3oQMDW73vN4TSdpqVT7F9KLq4U/ZXchI1WKjzDoOw1Y8u+4MgB95BQ3aGg
dcBL6fw2vyXx255ld8WoXHYRnDEffL8loLf0K3Ar7vZeTVNxXvcOwRXLoImoDD8Z
1dqHhF8JctSb+OmcuhWIPhFu3NCRimBKA3/VlhpE6qSXS5Brm9AMgD2RXOQRaO+Y
SkwZg/iKTS6+gg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:51 2026 by rpki-client