Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.mft
File: 0d2oMnacMWgfglaFFHNorzoR9vg.mft (raw, json)
Hash identifier: Fp9RP6tTocybXsHROkeaju+ypHADJFTNO8htpvt2iHQ=
Subject key identifier: FF:5F:F0:0F:B0:98:17:6D:7F:BB:CD:58:79:E5:00:1B:63:02:FD:37
Authority key identifier: D1:DD:A8:32:76:9C:31:68:1F:82:56:85:14:73:68:AF:3A:11:F6:F8
Certificate issuer: /CN=d1dda832769c31681f825685147368af3a11f6f8
Certificate serial: 01A001A67718E2C5847053F3ABEB5B74B06E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d2oMnacMWgfglaFFHNorzoR9vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 19:01:21 +0000
Manifest this update: Fri 14 Aug 2026 19:01:21 +0000
Manifest next update: Sat 15 Aug 2026 19:01:21 +0000
Files and hashes: 1: 0d2oMnacMWgfglaFFHNorzoR9vg.crl (hash: +SHWLYNrBL56Zspe1DBjKXA4Rt492CGRN52iWjqrRrA=)
2: EHzjD2BaSdt6dlWwGmMzrIvaNCg.roa (hash: S94ye2gvt+ykcb3AuWBczPrNA3UQ52LMfEF8Lq+CnR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0d2oMnacMWgfglaFFHNorzoR9vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:77:18:e2:c5:84:70:53:f3:ab:eb:5b:74:b0:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1dda832769c31681f825685147368af3a11f6f8
Validity
Not Before: Aug 14 19:01:21 2026 GMT
Not After : Aug 15 19:01:21 2026 GMT
Subject: CN=ff5ff00fb098176d7fbbcd5879e5001b6302fd37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d9:bd:b4:cd:90:6e:1a:2c:2c:fb:47:27:14:
9c:2e:53:07:c5:4b:63:f5:05:11:c8:38:55:16:77:
6e:12:87:e6:eb:58:07:78:60:37:e8:df:8f:0e:da:
23:1e:96:73:7c:fe:bc:50:11:52:41:b5:1d:4d:9d:
e0:5a:1a:49:db:a7:30:d4:ef:25:89:5a:8e:23:9c:
84:8c:34:32:83:ac:7a:ff:d8:91:f1:8c:53:b6:6a:
7d:a9:1a:0b:d2:7e:16:24:b7:c3:e1:e3:82:7f:4e:
1e:36:27:a3:6c:11:00:99:e9:20:6e:8d:b4:ec:cd:
23:48:df:bf:74:db:22:ca:5f:21:46:05:b5:88:b8:
a7:77:3c:14:fb:1c:3f:73:3f:5f:e2:51:82:7d:9d:
71:1e:6f:e4:27:f1:f0:5d:07:29:fd:0c:44:4c:cf:
54:18:63:9d:ae:ef:8c:24:76:e5:0c:96:f1:41:32:
f6:f2:04:2c:7f:a5:af:3b:ff:87:93:30:37:bc:ec:
bd:49:bc:9f:9c:76:b0:34:2b:0d:29:5d:78:8c:34:
b6:09:d8:46:61:a7:c2:09:cc:b4:f4:84:37:f3:4c:
17:92:fb:93:06:0e:f9:6b:c5:46:93:22:3d:36:03:
f2:1c:cf:e0:5e:78:fa:20:f7:01:43:83:fa:36:06:
d7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5F:F0:0F:B0:98:17:6D:7F:BB:CD:58:79:E5:00:1B:63:02:FD:37
X509v3 Authority Key Identifier:
keyid:D1:DD:A8:32:76:9C:31:68:1F:82:56:85:14:73:68:AF:3A:11:F6:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d2oMnacMWgfglaFFHNorzoR9vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:77:24:48:d0:14:15:2d:cb:dd:ff:f4:71:1f:28:8c:bb:b8:
3b:68:20:ef:ef:b5:b2:94:31:7e:93:61:db:2f:8a:a6:03:5a:
ae:2f:b0:13:74:0c:fb:4e:ef:ee:4d:a8:64:d8:02:1a:62:d0:
8a:ef:b2:88:1a:ec:bb:9e:24:9d:c4:ff:f1:95:37:fc:9d:bd:
9d:25:67:54:96:1b:db:5b:54:47:ee:ac:14:37:60:60:86:31:
94:11:af:b8:71:a0:28:1f:52:18:af:cb:c6:f5:2f:dd:dd:06:
9c:f6:e0:1e:96:05:e3:f4:1f:99:12:8b:0b:ab:ba:48:b9:98:
55:5a:27:e4:e2:31:89:13:79:65:c7:a9:48:03:29:ca:be:3a:
18:ba:71:15:bb:79:45:8b:00:da:eb:2d:a4:90:b2:30:a5:1d:
fd:91:24:89:d2:6c:0a:34:da:79:28:f9:e8:78:df:a6:63:50:
e8:1f:c3:b9:a1:17:9d:f6:fa:f2:6d:a2:20:77:78:79:3a:61:
5b:60:7d:d6:fb:1b:1a:33:02:f8:c9:0e:d9:c9:c5:49:cd:34:
47:38:b7:8f:78:07:3e:7e:9b:a8:91:d7:d4:c9:02:27:c6:4e:
e8:03:cc:49:0c:9d:23:2a:59:f1:bd:0f:52:89:b6:d5:68:ab:
89:ab:01:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:31 2026 by rpki-client