Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.mft
File: 0d2oMnacMWgfglaFFHNorzoR9vg.mft (raw, json)
Hash identifier: 23487KLpiW9OwYE1hEQddgU+ilNlTU4ULrvFyWyKTao=
Subject key identifier: CA:C4:D4:F3:61:CE:3D:0E:72:B1:39:E2:3A:F3:6E:4F:54:07:DD:1C
Authority key identifier: D1:DD:A8:32:76:9C:31:68:1F:82:56:85:14:73:68:AF:3A:11:F6:F8
Certificate issuer: /CN=d1dda832769c31681f825685147368af3a11f6f8
Certificate serial: 01A14BE1B25906D307A9878ACDEB3AA98EA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d2oMnacMWgfglaFFHNorzoR9vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.mft
Manifest number: 1AAD
Signing time: Sat 17 Oct 2026 22:00:44 +0000
Manifest this update: Sat 17 Oct 2026 22:00:44 +0000
Manifest next update: Sun 18 Oct 2026 22:00:44 +0000
Files and hashes: 1: 0d2oMnacMWgfglaFFHNorzoR9vg.crl (hash: MmVEChBTf/cqFaQbo7coFg2lmahzlbx6CMPwFuk4QnM=)
2: EHzjD2BaSdt6dlWwGmMzrIvaNCg.roa (hash: S94ye2gvt+ykcb3AuWBczPrNA3UQ52LMfEF8Lq+CnR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0d2oMnacMWgfglaFFHNorzoR9vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:e1:b2:59:06:d3:07:a9:87:8a:cd:eb:3a:a9:8e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1dda832769c31681f825685147368af3a11f6f8
Validity
Not Before: Oct 17 22:00:44 2026 GMT
Not After : Oct 18 22:00:44 2026 GMT
Subject: CN=cac4d4f361ce3d0e72b139e23af36e4f5407dd1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4a:86:73:2e:0e:46:39:20:06:c4:66:da:0b:
92:20:d7:df:5d:c0:1d:b8:24:b6:4a:7a:8e:76:f9:
69:6d:7b:56:cd:91:7d:41:7b:42:d6:93:f8:7e:e4:
1c:42:c9:97:af:e9:97:6f:2b:a6:1f:2a:46:46:00:
24:61:e6:bb:b6:d9:8c:6a:b1:82:bb:69:fc:99:9f:
3e:23:00:e2:f3:6b:5f:cf:ba:96:14:fb:11:93:b3:
0d:6c:03:69:9e:2a:d2:92:36:ce:8f:36:55:50:00:
35:c7:d6:82:70:5c:c7:6d:ae:69:83:a0:e9:7a:7c:
f2:a8:0c:20:a9:1f:3b:df:1e:07:1b:33:2b:24:3d:
7a:01:19:77:ce:ba:59:12:f0:a9:55:49:eb:cb:5e:
56:09:a5:cb:cd:5b:67:b4:10:21:b7:af:cf:89:10:
f2:77:2d:0a:62:43:87:ba:b7:13:9a:32:43:a2:12:
fd:c6:f8:8b:a4:9d:15:5d:ba:f1:31:df:2a:ad:f4:
b7:cc:4e:5d:05:c6:c6:ca:b5:b5:49:4f:50:36:9a:
75:29:8a:1e:40:01:fc:4e:13:cc:58:8b:46:e3:ce:
59:1c:53:46:4a:0d:e5:3d:2f:ff:f2:b9:50:a7:df:
5b:3e:73:11:6c:5d:76:04:c8:35:98:1e:99:b4:e5:
b8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C4:D4:F3:61:CE:3D:0E:72:B1:39:E2:3A:F3:6E:4F:54:07:DD:1C
X509v3 Authority Key Identifier:
keyid:D1:DD:A8:32:76:9C:31:68:1F:82:56:85:14:73:68:AF:3A:11:F6:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d2oMnacMWgfglaFFHNorzoR9vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:cf:50:75:6f:bf:93:23:3e:ec:aa:d8:80:0f:8b:5e:96:81:
a8:28:7e:68:bf:ae:be:b2:9a:3a:ce:6a:67:73:a3:3b:df:67:
28:6e:70:41:23:0d:a9:c6:4b:f1:64:fb:8b:3f:26:f1:0c:c7:
6b:e0:89:83:73:39:7c:2f:e0:2b:60:e6:88:7a:78:5f:c5:f4:
81:cf:f5:72:5f:7b:5a:15:7c:a4:a3:a7:3e:e3:98:1a:64:d6:
cd:d9:7f:17:7f:1d:df:b3:49:67:8d:35:39:72:91:24:6e:d2:
95:0a:74:3d:37:2a:5f:57:0f:58:51:58:94:09:76:c7:cf:aa:
17:c3:28:10:7f:59:ff:e1:68:4e:70:8a:91:c0:63:16:bd:e7:
3c:a2:5c:db:ce:93:f9:17:b8:b2:4d:f5:c5:22:3c:7d:1c:97:
2f:14:35:dc:a2:d9:91:db:17:1f:3c:69:1b:d8:59:1f:de:f8:
4d:af:f3:48:41:f3:41:ec:21:c7:49:ee:05:10:ad:a2:f5:5d:
16:54:1a:6b:b2:82:2a:ad:fb:7b:e1:08:cf:8d:b7:a2:e5:0c:
8b:50:c1:c2:71:6b:3b:e3:c9:13:ce:fc:b1:8f:ad:fe:9a:db:
9c:6d:15:47:70:a3:69:59:4c:16:72:dd:ad:38:a5:21:a7:f0:
c9:71:89:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 03:20:09 2026 by rpki-client