Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft
File: 0dXq4THDsQiP-wI3mA1u4YiWaMY.mft (raw, json)
Hash identifier: 9Hu6Md8jAZdhZRe2N0VNMwVFDC/Rpnrm0OhNC4YPAag=
Subject key identifier: 8A:DD:8E:39:EE:8D:D8:CB:46:C4:42:C5:43:A2:CD:E0:09:80:7C:75
Authority key identifier: D1:D5:EA:E1:31:C3:B1:08:8F:FB:02:37:98:0D:6E:E1:88:96:68:C6
Certificate issuer: /CN=d1d5eae131c3b1088ffb0237980d6ee1889668c6
Certificate serial: 019CB513813385394818F9925FE8FA594477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dXq4THDsQiP-wI3mA1u4YiWaMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft
Manifest number: 01C6
Signing time: Tue 03 Mar 2026 19:01:20 +0000
Manifest this update: Tue 03 Mar 2026 19:01:20 +0000
Manifest next update: Wed 04 Mar 2026 19:01:20 +0000
Files and hashes: 1: 0dXq4THDsQiP-wI3mA1u4YiWaMY.crl (hash: mzbtFC6bGPU98g7/6f9AUG0dVUZIHzVyQSf8lnyN7w4=)
2: 0w_3pj-YjXdlGCOQrO5MmHi3QRU.roa (hash: NCRRT15Nw1RlGwpm/ytoJz8CpfLxBA4RH0mKpwLqRd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dXq4THDsQiP-wI3mA1u4YiWaMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 15:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b5:13:81:33:85:39:48:18:f9:92:5f:e8:fa:59:44:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1d5eae131c3b1088ffb0237980d6ee1889668c6
Validity
Not Before: Mar 3 19:01:20 2026 GMT
Not After : Mar 4 19:01:20 2026 GMT
Subject: CN=8add8e39ee8dd8cb46c442c543a2cde009807c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:30:c9:61:72:fb:c8:87:77:3d:ed:72:69:d1:
af:46:e8:1f:cf:b6:d9:cc:21:df:64:a4:cd:4d:e8:
30:f3:e7:64:d4:dc:78:9b:6c:01:9f:a8:a2:6f:45:
e7:3f:16:1f:18:85:8a:32:44:5e:73:96:7c:99:a1:
0a:7a:11:77:04:30:58:8b:5b:07:57:96:d2:3a:04:
f7:29:6e:ad:07:dd:0d:70:77:87:12:80:7b:8d:61:
42:e0:e3:91:28:03:a5:f0:e1:71:d9:7d:f3:c7:a9:
56:64:b6:ba:ea:96:83:09:54:a4:0f:6a:e4:88:1c:
3d:5a:c2:91:c2:11:b5:2c:a4:93:48:76:0f:8b:ee:
f2:cb:41:4b:f0:a5:85:3d:ed:de:d5:16:fb:7c:27:
95:49:d0:2a:7d:3c:c0:95:33:9f:86:80:b1:a3:cb:
be:94:5d:6a:f2:1e:80:10:b7:ff:e8:a5:07:30:33:
92:ae:5a:eb:54:66:e1:46:d2:95:26:94:5e:c6:ec:
f7:3b:8f:92:10:af:0d:62:c8:1a:5a:82:df:c1:c6:
a0:12:06:86:87:ff:98:53:86:7e:89:4b:db:74:b0:
64:4d:b6:f7:6e:62:f2:91:0b:8a:2f:af:cb:d2:30:
a1:05:5d:72:5a:0c:eb:6e:65:16:65:64:95:61:0e:
ae:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DD:8E:39:EE:8D:D8:CB:46:C4:42:C5:43:A2:CD:E0:09:80:7C:75
X509v3 Authority Key Identifier:
keyid:D1:D5:EA:E1:31:C3:B1:08:8F:FB:02:37:98:0D:6E:E1:88:96:68:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dXq4THDsQiP-wI3mA1u4YiWaMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:7c:6c:98:3e:bd:34:15:37:2f:73:7c:cf:21:10:c2:bb:1f:
a9:17:ed:77:db:81:c6:e6:da:15:de:47:6b:15:63:7a:01:00:
e4:21:f8:ed:e6:44:a1:01:8c:b9:b6:dd:ad:31:7c:6a:5e:1a:
fd:b6:e3:eb:44:2d:80:b8:71:97:4a:e9:86:05:9a:00:47:be:
45:2b:93:1d:fb:57:96:5a:c4:51:f7:b6:86:df:d3:41:43:12:
f6:d6:eb:bf:9a:77:43:1e:03:0b:47:a0:de:07:c6:85:ca:44:
9e:00:21:00:fe:c3:70:20:88:0a:c7:12:fb:b7:12:ba:51:a4:
75:32:d3:bb:c8:f3:d6:ff:cb:a2:5e:fe:d2:c8:7a:26:dd:ad:
56:c2:54:f9:f2:85:61:01:8c:f1:04:37:6b:5e:2c:c6:c3:a9:
2f:6a:6b:88:a0:96:5e:5c:09:08:24:d6:1f:5a:52:4d:de:d5:
64:a1:3a:3a:57:84:aa:e9:6a:96:49:e0:f5:dd:b2:f5:80:9e:
53:7c:ea:44:b3:46:bd:2f:68:98:5d:7a:78:97:4b:9e:c5:7a:
2b:cd:50:62:de:84:5b:82:0a:9e:02:6d:5f:c0:b9:67:af:16:
32:eb:73:93:50:c1:c8:1f:65:03:6f:45:28:aa:95:12:13:a2:
bc:83:75:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 23:51:57 2026 by rpki-client