Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
File: 0d4HoaH2W9EW4R-fEQhgS26VzP0.mft (raw, json)
Hash identifier: QGF0Rkh/kVSIXgIXJtiMQYhF+cWY0DlstBx6l5BqaAg=
Subject key identifier: 37:CB:6C:E7:DA:91:87:7D:5B:B4:A7:F9:93:56:9C:21:D6:1C:62:2A
Authority key identifier: D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
Certificate issuer: /CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Certificate serial: 01A06EDE552A9852418C56AFBA73B4C64E85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
Manifest number: 15CF
Signing time: Sat 05 Sep 2026 00:00:59 +0000
Manifest this update: Sat 05 Sep 2026 00:00:59 +0000
Manifest next update: Sun 06 Sep 2026 00:00:59 +0000
Files and hashes: 1: 0d4HoaH2W9EW4R-fEQhgS26VzP0.crl (hash: HZXCrjPoVFyfosVPS9rgJwMjOswOa+3NIRoDWgYlMXA=)
2: 6AcW6a22cinoLIymW2byGAd7uWo.roa (hash: RoxEP6kBPzD8q8xHwCRknSTvIS7/SOyyVCFWMK8wKF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 00:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:de:55:2a:98:52:41:8c:56:af:ba:73:b4:c6:4e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Validity
Not Before: Sep 5 00:00:59 2026 GMT
Not After : Sep 6 00:00:59 2026 GMT
Subject: CN=37cb6ce7da91877d5bb4a7f993569c21d61c622a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3d:17:37:9f:08:f3:22:02:c4:48:be:a0:d1:
5a:df:88:9f:62:7a:55:36:80:d9:e6:4f:e2:3c:e8:
66:7d:7f:fc:c5:0c:40:97:36:ce:ad:80:15:1e:29:
36:31:32:9d:d6:64:29:47:8a:59:9d:93:d7:86:ac:
de:2f:32:59:9b:e6:55:09:0d:96:87:2f:90:9b:f2:
c0:61:81:71:38:3c:11:5b:2e:08:5d:22:d2:47:69:
e1:ec:1e:6a:54:25:ca:65:45:9b:2e:42:7e:ab:fd:
c5:c5:83:1b:cc:4a:13:c0:cf:41:af:bf:d6:63:c5:
bc:e7:c7:5f:9b:ee:de:ae:da:63:bb:12:8a:98:97:
72:b0:1f:1a:0f:77:a6:f4:39:96:f3:31:d8:19:3d:
bb:02:b4:a6:c7:b1:15:3a:7e:04:09:81:e7:8b:37:
96:47:2f:cc:f4:25:ab:88:43:38:e7:0d:b3:00:8f:
69:d6:aa:77:40:92:7d:59:ae:18:65:36:55:1d:94:
76:9c:bf:f9:6b:17:49:62:a0:93:5c:eb:3e:d3:12:
27:05:d7:93:e8:58:be:f0:0e:28:00:a3:bf:24:65:
63:b4:e7:95:e4:a6:7e:78:0c:71:23:c3:f6:da:48:
e4:a8:d7:cf:72:2b:c6:88:6e:6a:c9:67:b6:e7:ef:
db:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CB:6C:E7:DA:91:87:7D:5B:B4:A7:F9:93:56:9C:21:D6:1C:62:2A
X509v3 Authority Key Identifier:
keyid:D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:cb:e7:96:29:28:e2:47:0b:77:39:ff:41:b1:31:fc:90:0a:
be:f7:0e:58:d0:34:30:e0:3b:72:72:aa:48:25:ac:94:b7:c4:
93:9a:0a:59:f1:77:77:16:38:07:46:9e:1e:a9:b3:81:4b:01:
83:c4:44:e0:d7:9f:df:4c:25:3a:4a:fe:2f:4c:24:7c:a2:88:
b1:0c:80:d4:fe:7b:86:f5:65:9a:39:1e:09:ce:7a:1b:2b:77:
c2:7b:b2:8b:f7:a8:6a:a8:9c:ba:67:9d:56:49:ca:71:c4:e9:
1b:bc:51:1c:7b:21:a3:7b:96:90:f9:5c:63:33:3a:1e:de:40:
2e:ac:86:95:04:03:84:da:3f:f3:1c:0f:c8:d8:d3:5c:7e:10:
82:69:ae:8a:f8:df:5b:10:a3:2c:9f:57:10:b3:9e:49:49:6c:
d4:3f:6e:f0:cd:1f:a7:6d:92:21:ad:1c:62:27:d8:4d:a2:8b:
d8:bc:9d:5e:1b:62:c2:8f:5c:88:4e:d4:72:14:0e:18:f9:5d:
31:9f:f4:17:66:cd:99:4a:ad:f5:53:c8:f1:ba:ad:52:be:8e:
32:37:9f:ac:2c:32:83:57:e8:58:a9:02:f9:45:15:16:5b:11:
79:a6:71:6d:32:95:fc:f0:65:ab:36:ab:15:07:67:9e:75:d0:
e3:dd:6d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:49:40 2026 by rpki-client