Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/0WkNdbRvruYmp5o7Dn32tqcj8yk.mft
File: 0WkNdbRvruYmp5o7Dn32tqcj8yk.mft (raw, json)
Hash identifier: 2nq5TXS/xGkKGoMcdRS7Ln/wZPx8W7ImTXqo4ufp0Vs=
Subject key identifier: 9A:50:EE:D2:2E:D1:8A:35:14:D6:15:9E:DF:9C:90:91:A2:17:D1:AC
Authority key identifier: D1:69:0D:75:B4:6F:AE:E6:26:A7:9A:3B:0E:7D:F6:B6:A7:23:F3:29
Certificate issuer: /CN=d1690d75b46faee626a79a3b0e7df6b6a723f329
Certificate serial: 019D397804BD5C2001AE4F5BDB4EEAA90E8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WkNdbRvruYmp5o7Dn32tqcj8yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/0WkNdbRvruYmp5o7Dn32tqcj8yk.mft
Manifest number: 1E
Signing time: Sun 29 Mar 2026 12:00:59 +0000
Manifest this update: Sun 29 Mar 2026 12:00:59 +0000
Manifest next update: Mon 30 Mar 2026 12:00:59 +0000
Files and hashes: 1: 0WkNdbRvruYmp5o7Dn32tqcj8yk.crl (hash: AiXbIGKaVXileqMJhnjKRk9c2iFIa8O9wriKIc+sQ1c=)
2: 1-yp1lR1t9CHfuX3rrZ9tBUSW6YU.roa (hash: ysaq9zqofJGOE0NIkNp0CsTNypyLgdEzk9CWYMwusP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/0WkNdbRvruYmp5o7Dn32tqcj8yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/0WkNdbRvruYmp5o7Dn32tqcj8yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WkNdbRvruYmp5o7Dn32tqcj8yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:04:bd:5c:20:01:ae:4f:5b:db:4e:ea:a9:0e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1690d75b46faee626a79a3b0e7df6b6a723f329
Validity
Not Before: Mar 29 12:00:59 2026 GMT
Not After : Mar 30 12:00:59 2026 GMT
Subject: CN=9a50eed22ed18a3514d6159edf9c9091a217d1ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e6:45:41:2b:e5:a6:0b:7c:9b:c0:c5:6b:ca:
91:9a:e5:3e:83:c3:39:8a:fe:fd:fe:df:e1:7b:33:
1e:d9:62:d5:f5:b3:46:d1:e5:a2:76:2c:96:1a:d7:
67:3f:df:6d:5c:41:f6:45:6b:29:1e:0a:57:72:9a:
9d:73:de:e4:2d:c4:cf:a1:32:b8:43:d7:6a:7b:a6:
1b:ac:57:da:29:81:5f:88:6e:82:97:9e:0b:6c:9d:
41:94:7d:eb:a2:a0:68:09:28:17:9f:85:ea:42:70:
8f:06:a0:54:92:a7:ba:ef:84:51:c1:89:ab:04:dc:
88:76:0a:f5:81:37:26:c3:8c:8f:f5:9f:ec:9f:9f:
fa:ce:4a:59:40:f9:14:1f:dd:52:72:76:9d:30:a9:
06:20:cc:26:57:cc:37:79:20:5e:8b:b3:86:4e:82:
ba:51:1c:42:55:72:9d:c6:28:fc:65:58:31:ec:a9:
aa:ca:72:c4:99:b1:d9:2e:25:8f:c7:74:3c:99:5a:
12:fb:d5:c0:e8:98:76:10:23:e0:56:3c:25:f7:c3:
90:ed:89:27:03:30:f5:79:90:f6:b1:b3:aa:08:2c:
75:72:6d:6e:83:96:55:3f:93:f0:0e:01:43:64:26:
a0:f6:62:93:fa:4b:56:a9:32:44:0c:42:87:31:c6:
21:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:50:EE:D2:2E:D1:8A:35:14:D6:15:9E:DF:9C:90:91:A2:17:D1:AC
X509v3 Authority Key Identifier:
keyid:D1:69:0D:75:B4:6F:AE:E6:26:A7:9A:3B:0E:7D:F6:B6:A7:23:F3:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WkNdbRvruYmp5o7Dn32tqcj8yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/0WkNdbRvruYmp5o7Dn32tqcj8yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/0WkNdbRvruYmp5o7Dn32tqcj8yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:07:a0:a7:4c:86:34:96:54:ec:51:14:99:7e:48:02:db:08:
23:74:7d:9b:e2:c3:5a:9f:eb:4a:83:b0:83:68:0a:ea:6e:66:
69:35:9d:0d:d7:d8:50:ee:1b:99:39:7c:19:41:65:61:88:f2:
b3:4b:e6:52:dd:36:32:49:85:19:9d:c4:08:cf:b9:4b:c0:30:
af:c2:90:3b:0d:ec:9d:b5:ea:22:ad:88:f3:7b:d5:c5:c5:d2:
78:69:fa:5f:65:0b:4e:d0:36:8a:71:7c:32:d3:d3:be:0f:72:
36:38:37:db:74:1b:88:67:be:5c:e5:81:9f:9c:24:1f:fa:49:
f0:06:1c:67:a6:1e:63:03:e7:a1:41:6b:30:f7:be:24:ab:a9:
e0:20:00:f0:5e:d5:81:ca:0a:71:2f:07:d0:bf:cf:14:e2:3b:
19:7c:23:cd:65:51:49:f6:99:5f:91:23:e0:03:ab:07:76:ca:
da:62:6c:f7:f4:b1:d5:b9:a2:b1:6b:33:16:0e:24:25:c1:cf:
18:ae:93:cc:8b:a2:4a:6b:6f:9a:4f:64:35:e8:27:0f:ed:fe:
76:b5:30:8d:00:e4:42:9b:78:49:d9:42:6b:5a:02:46:14:d0:
33:c5:bc:f9:dd:b1:1f:ac:15:27:4c:4b:c5:28:c9:f0:72:9c:
5f:bf:ca:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:36 2026 by rpki-client