Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
File: 0i870LrmA6t5BgKpa7vEK1Mi6I8.mft (raw, json)
Hash identifier: 2U5KOoqstvbu/TbO0hpanFZJEPceUIxbMorVXYjQ5U0=
Subject key identifier: 69:C6:95:0E:86:0B:74:4F:1F:B3:D7:66:26:6D:3E:4F:D3:C2:AA:7B
Authority key identifier: D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
Certificate issuer: /CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
Certificate serial: 019D3865BBE0DEF1402B8DDBA16CF42A8CAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
Manifest number: 0F0F
Signing time: Sun 29 Mar 2026 07:01:24 +0000
Manifest this update: Sun 29 Mar 2026 07:01:24 +0000
Manifest next update: Mon 30 Mar 2026 07:01:24 +0000
Files and hashes: 1: 0i870LrmA6t5BgKpa7vEK1Mi6I8.crl (hash: iRfdqOXkYxbXaqWPSvMa4kUWgmqHeDbUzjCx3liI6qs=)
2: 8YQYzkkWSUbJ3UPPymYSW914MMg.roa (hash: 9lvLYcAIuT8e6AK3a0cVw0sCFSHzJhGpdm+DyXOpWt0=)
3: 96-EzPJNO2K_r89WsSa8F4wKfII.roa (hash: TgdBDufBqmIta91fueVV5ENNB6Zw3/BojYphtII6yZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:bb:e0:de:f1:40:2b:8d:db:a1:6c:f4:2a:8c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
Validity
Not Before: Mar 29 07:01:24 2026 GMT
Not After : Mar 30 07:01:24 2026 GMT
Subject: CN=69c6950e860b744f1fb3d766266d3e4fd3c2aa7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4f:52:33:01:76:84:67:7a:95:1f:86:4d:e4:
da:de:61:8d:0d:11:dc:00:ce:c8:c3:8d:cf:39:f6:
e3:d9:9a:df:35:eb:da:f0:2f:ec:e2:cf:ee:90:bc:
b5:2d:69:e4:37:06:a5:3b:33:8d:f0:d2:29:2b:41:
06:d5:3b:43:4b:f5:2d:6d:bd:39:f2:b5:de:0d:60:
78:ab:85:73:59:a0:26:9a:27:a4:61:21:12:25:8b:
de:84:b0:a6:6f:ab:24:1c:ca:58:de:2d:98:d9:25:
68:9b:55:af:f3:48:72:e2:e9:7f:8e:65:3a:a9:54:
bf:d8:d1:83:8e:0e:f6:81:59:79:2b:a2:2f:94:5a:
68:f9:83:c2:18:62:89:4c:9b:2e:fb:3a:bd:03:8c:
a8:15:60:d9:2a:c3:1c:2c:6f:7a:fb:a4:30:69:6e:
cf:ad:eb:20:29:5e:de:2a:60:9e:2f:96:d8:43:02:
04:e9:b1:c7:47:a8:e6:96:9e:6d:4e:76:8c:7f:ae:
1f:3d:41:bd:68:59:0b:33:d4:b1:c6:9e:e6:e9:5a:
14:be:5d:b3:73:34:cc:67:06:5b:6e:e7:7f:1d:9d:
e3:0b:fa:06:d7:9f:f9:fc:b4:0c:db:e4:3b:f2:55:
e3:a3:af:96:2b:b9:1f:5b:a8:03:dd:7d:35:66:f8:
2b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C6:95:0E:86:0B:74:4F:1F:B3:D7:66:26:6D:3E:4F:D3:C2:AA:7B
X509v3 Authority Key Identifier:
keyid:D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:48:ae:d9:cb:d5:8f:36:9e:24:ac:bb:cf:c2:74:1c:e7:57:
0c:ae:61:60:41:26:98:0a:5b:51:68:9e:6a:7a:61:fa:09:65:
b6:72:d2:bb:5b:1c:e6:8a:12:43:d8:8f:ab:7c:66:d8:ef:6b:
16:94:de:90:d9:1d:77:14:f9:1c:0e:0b:44:82:ae:dc:22:f7:
57:e1:42:6f:33:8d:e9:dd:eb:b8:8a:5b:d3:94:8b:c5:70:c1:
27:dd:16:53:89:8f:53:22:a5:6a:af:64:66:36:d7:62:ad:d0:
54:87:56:76:ab:9f:40:c7:49:47:a9:54:ff:56:3d:8c:b6:75:
b8:cd:94:2c:b9:76:fa:83:dd:15:2f:e3:e2:33:37:6e:84:46:
c5:e3:fd:35:de:b7:a0:2a:e1:4c:02:ca:2e:2a:a1:47:71:77:
1d:8b:f8:e2:91:ce:8b:3c:ab:59:ec:a7:5e:90:e1:19:a4:21:
cc:63:ba:68:d7:47:10:ea:9d:9a:09:ba:c2:50:3e:e0:16:36:
ac:0d:14:fd:f1:8b:8c:4d:b8:6d:31:d0:6c:dd:98:26:a3:43:
c2:45:a4:0f:b5:59:c4:a9:50:d8:92:b4:e2:1d:07:25:85:31:
88:5e:1e:fe:6b:ba:75:4c:89:ed:99:2e:53:10:57:f9:b4:20:
99:6a:3e:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zbvg3vFAK43boWz0KoyvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMmYzYmQwYmFlNjAzYWI3OTA2MDJhOTZiYmJjNDJiNTMy
MmU4OGYwHhcNMjYwMzI5MDcwMTI0WhcNMjYwMzMwMDcwMTI0WjAzMTEwLwYDVQQD
Eyg2OWM2OTUwZTg2MGI3NDRmMWZiM2Q3NjYyNjZkM2U0ZmQzYzJhYTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs09SMwF2hGd6lR+GTeTa3mGNDRHc
AM7Iw43POfbj2ZrfNeva8C/s4s/ukLy1LWnkNwalOzON8NIpK0EG1TtDS/Utbb05
8rXeDWB4q4VzWaAmmiekYSESJYvehLCmb6skHMpY3i2Y2SVom1Wv80hy4ul/jmU6
qVS/2NGDjg72gVl5K6IvlFpo+YPCGGKJTJsu+zq9A4yoFWDZKsMcLG96+6QwaW7P
resgKV7eKmCeL5bYQwIE6bHHR6jmlp5tTnaMf64fPUG9aFkLM9Sxxp7m6VoUvl2z
czTMZwZbbud/HZ3jC/oG15/5/LQM2+Q78lXjo6+WK7kfW6gD3X01Zvgr7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGnGlQ6GC3RPH7PXZiZtPk/Twqp7MB8GA1UdIwQY
MBaAFNIvO9C65gOreQYCqWu7xCtTIuiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGk4NzBMcm1BNnQ1QmdLcGE3dkVLMU1pNkk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82ZTUxY2ItNTE3Zi00Y2IxLWEzYTAt
ZDcyMWJkMmU5ZDUzLzEvMGk4NzBMcm1BNnQ1QmdLcGE3dkVLMU1pNkk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS82ZTUxY2ItNTE3Zi00Y2IxLWEzYTAtZDcyMWJkMmU5ZDUz
LzEvMGk4NzBMcm1BNnQ1QmdLcGE3dkVLMU1pNkk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd0iu2cvV
jzaeJKy7z8J0HOdXDK5hYEEmmApbUWieanph+glltnLSu1sc5ooSQ9iPq3xm2O9r
FpTekNkddxT5HA4LRIKu3CL3V+FCbzON6d3ruIpb05SLxXDBJ90WU4mPUyKlaq9k
ZjbXYq3QVIdWdqufQMdJR6lU/1Y9jLZ1uM2ULLl2+oPdFS/j4jM3boRGxeP9Nd63
oCrhTALKLiqhR3F3HYv44pHOizyrWeynXpDhGaQhzGO6aNdHEOqdmgm6wlA+4BY2
rA0U/fGLjE24bTHQbN2YJqNDwkWkD7VZxKlQ2JK04h0HJYUxiF4e/mu6dUyJ7Zku
UxBX+bQgmWo+Kw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:13 2026 by rpki-client