Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
File: CtBt0nvZOjgNpMddGovwdoKP1ko.mft (raw, json)
Hash identifier: 3fzEQrGvj6oaLxc6zNsunoDdGGL3GuH0XIRZYzhZkVI=
Subject key identifier: 20:E6:88:D8:32:25:99:4E:0D:D4:4F:0E:24:5D:09:F4:EC:33:CA:12
Authority key identifier: 0A:D0:6D:D2:7B:D9:3A:38:0D:A4:C7:5D:1A:8B:F0:76:82:8F:D6:4A
Certificate issuer: /CN=0ad06dd27bd93a380da4c75d1a8bf076828fd64a
Certificate serial: 01A13E26C6869F5418ED13E9B890881DB978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
Manifest number: 0D9D
Signing time: Thu 15 Oct 2026 06:01:30 +0000
Manifest this update: Thu 15 Oct 2026 06:01:30 +0000
Manifest next update: Fri 16 Oct 2026 06:01:30 +0000
Files and hashes: 1: CtBt0nvZOjgNpMddGovwdoKP1ko.crl (hash: H2I2BcWS+pKkZED6FpXcuwnyCls9AhwZwcIpdXZSnU4=)
2: rRTCz9gdKZmCD2CPH7ZEPITaxno.roa (hash: IkdpUdMuuhLbUbcbS19kzqtq8+mEc9r+5ZSOWumJXFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:c6:86:9f:54:18:ed:13:e9:b8:90:88:1d:b9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ad06dd27bd93a380da4c75d1a8bf076828fd64a
Validity
Not Before: Oct 15 06:01:30 2026 GMT
Not After : Oct 16 06:01:30 2026 GMT
Subject: CN=20e688d83225994e0dd44f0e245d09f4ec33ca12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ca:81:2a:be:43:ce:0b:6c:6e:0d:2e:39:e6:
38:3a:54:16:9a:67:f3:68:ac:d7:2d:3b:10:e6:ae:
85:8d:81:7b:e5:c8:f4:6b:0f:28:95:42:5f:56:29:
e0:77:f1:eb:21:f3:15:90:db:5d:57:fc:bf:52:cf:
da:42:03:25:3a:59:81:02:bc:fb:c9:96:4f:2e:ef:
5a:70:6f:4e:b9:89:96:7e:ab:c5:34:f0:c3:02:f7:
33:5c:62:5c:b8:97:c8:d8:b1:40:e5:c7:fe:98:d9:
78:0a:29:ba:fc:ed:3f:2d:5a:de:4a:72:54:de:c1:
72:62:3b:7f:0a:dc:a2:ee:19:ad:76:cb:93:57:b6:
83:95:99:3f:60:4a:b7:08:15:2b:5f:0c:8b:ad:f8:
6a:a7:af:f5:c4:73:a3:96:65:dd:5d:b1:0d:08:4e:
2a:4c:22:77:a5:2b:d0:d3:f8:53:d1:cc:f7:88:96:
19:23:9e:8f:ef:02:a7:76:2a:f0:6c:6a:a5:0e:ba:
72:80:b1:c7:b3:3e:23:7e:26:71:70:56:be:42:5d:
74:2a:c6:e9:00:c6:68:fb:02:2d:b7:27:ef:82:50:
12:07:b8:7b:bb:13:86:09:c6:a4:a6:ee:12:df:12:
49:cb:e4:78:47:7a:61:b8:9e:93:9a:c1:2e:a0:3e:
9b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E6:88:D8:32:25:99:4E:0D:D4:4F:0E:24:5D:09:F4:EC:33:CA:12
X509v3 Authority Key Identifier:
keyid:0A:D0:6D:D2:7B:D9:3A:38:0D:A4:C7:5D:1A:8B:F0:76:82:8F:D6:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:13:5e:14:b8:0a:32:d0:6d:fe:b4:2e:f6:45:1b:7a:1c:11:
58:2f:12:43:32:c6:e9:f2:db:f3:b3:23:a0:30:0d:6a:33:dc:
9c:92:7d:d4:ef:92:ea:3b:82:5e:43:22:23:ee:02:3c:31:ca:
01:6c:07:cf:7b:c6:66:15:d8:1c:f8:8a:b2:a9:71:b1:01:02:
84:4e:bd:f1:3d:f1:56:e9:e1:1f:f5:5e:e0:7e:22:bd:aa:0b:
78:63:ea:e6:f5:89:b9:e6:f2:dd:3f:af:a1:0f:a5:0f:e7:cc:
60:3f:f2:f5:21:40:b1:c8:12:08:ab:23:73:97:e7:9b:12:90:
23:43:d6:94:12:f6:2d:25:16:d1:68:7a:40:36:69:84:34:96:
04:34:65:31:ee:9b:c1:40:c1:aa:69:a5:3f:7f:18:a6:7f:02:
32:4b:9d:55:db:fb:a1:7c:2b:ee:df:13:c0:cf:51:b2:12:13:
86:3e:84:7c:15:8f:98:20:a0:d5:b1:9c:7f:f9:8b:fa:02:aa:
08:93:4d:13:62:b4:93:89:0e:0b:6b:b1:ff:7e:4f:ee:23:2c:
9f:0c:6c:49:9c:99:14:8f:68:42:58:35:6a:42:92:c9:b9:21:
29:79:00:8b:b3:c6:27:0c:82:e2:a1:4e:71:b5:62:33:37:d5:
16:90:9d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:18:35 2026 by rpki-client