Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
File: 0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft (raw, json)
Hash identifier: kvj2HZYO+Lxu5gHDAQ8dNjaIBtZY1AxcTYYefUZiph8=
Subject key identifier: 0B:E0:68:B1:57:B3:74:A1:24:80:B8:E2:7C:29:93:52:21:45:DE:15
Authority key identifier: D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06
Certificate issuer: /CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06
Certificate serial: 01A13E26990DC6E455FE195DCEDC9A746B5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 06:01:18 +0000
Manifest this update: Thu 15 Oct 2026 06:01:18 +0000
Manifest next update: Fri 16 Oct 2026 06:01:18 +0000
Files and hashes: 1: 0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl (hash: ipAk/WSG11ZtM39avWsrgd0br6RBjslWonoYOVchppA=)
2: lNZ8b2GqipxFmFvx0Lw_q8EwfSo.roa (hash: qDLpSNqlibtH6zRBXzlD7tUyev4dQUA/1eIb4IG63oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:99:0d:c6:e4:55:fe:19:5d:ce:dc:9a:74:6b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06
Validity
Not Before: Oct 15 06:01:18 2026 GMT
Not After : Oct 16 06:01:18 2026 GMT
Subject: CN=0be068b157b374a12480b8e27c2993522145de15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:70:b6:93:18:1f:12:65:77:f7:dc:21:71:fb:
fe:03:46:5c:fd:ec:30:f9:09:75:e6:12:7a:86:6b:
89:a4:80:e3:0f:a7:fd:e0:e0:15:5e:93:b9:cd:38:
68:7c:5d:f3:e4:87:0e:d6:95:c9:1b:16:0c:d5:22:
a1:15:d0:98:1a:e2:8d:22:43:f9:5a:18:1e:cc:9b:
46:8c:42:4d:a8:e8:8f:cf:37:de:3b:a5:29:cf:48:
ec:4f:13:8d:be:cf:7d:33:82:ed:60:9d:9b:3b:c2:
4f:de:a4:bd:82:e0:b7:92:df:d3:1c:4d:13:ae:ae:
aa:fc:da:1a:90:fa:96:fe:b8:fb:2a:03:a5:64:37:
fb:63:5c:91:0a:7b:7d:33:90:b9:1b:7b:be:62:e3:
f3:e8:b5:03:da:45:a6:cf:95:e7:ff:cb:a4:1c:17:
99:27:81:13:81:28:32:a1:e0:8c:c1:1a:74:f3:a7:
09:e9:00:90:5b:12:9d:4f:af:a2:60:60:96:30:da:
6a:7f:4f:de:7f:fb:b3:a5:a8:24:1b:e9:a5:ab:41:
0a:0c:72:61:9a:7b:5d:d2:9c:94:a3:0f:84:68:f7:
42:cc:72:a9:8d:0a:11:c0:b5:2f:8f:e8:54:b0:d0:
7e:6a:a9:d2:9f:22:81:80:59:fb:51:8a:e8:bd:08:
7e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E0:68:B1:57:B3:74:A1:24:80:B8:E2:7C:29:93:52:21:45:DE:15
X509v3 Authority Key Identifier:
keyid:D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d3:52:c5:d1:f6:34:81:45:b1:a6:7d:f7:05:e1:8a:39:49:
21:18:74:e0:92:02:55:52:28:1a:0f:8c:40:74:b7:70:5d:99:
91:49:cf:95:3b:eb:56:36:43:13:45:a1:4e:87:bc:77:76:46:
bf:47:fc:ea:31:dc:f8:c9:f1:bf:e9:52:3b:70:56:b3:2c:58:
26:c3:25:23:07:de:9a:3d:0e:bb:db:6f:f8:ab:05:04:8e:ef:
2b:96:c1:bb:6d:2e:2a:81:7b:e5:97:28:4c:78:9b:50:1e:0a:
59:f0:c9:74:ea:31:76:99:81:8f:ea:be:37:c8:49:85:3f:1b:
2e:47:6e:ff:d4:6f:43:2d:55:9d:c2:a9:7e:4b:20:02:04:27:
68:52:07:fa:4f:4d:15:ae:7f:e7:ef:40:2a:de:52:72:95:28:
80:40:2b:d5:88:e3:dc:ce:d5:e4:0f:d2:5e:64:b3:ac:fc:e5:
7f:3b:a5:77:e6:e1:f9:c2:92:47:68:81:49:06:9d:39:37:39:
f4:ae:ce:ee:f7:33:7f:46:ec:9d:bf:df:a5:a4:c8:fc:5e:52:
b0:95:9a:6b:81:ab:ca:d8:bd:0c:d2:9d:db:9e:5c:8e:90:e8:
92:1e:49:c5:56:3d:22:c6:ed:19:80:72:f2:f1:a2:0d:69:f3:
85:84:0e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:16:50 2026 by rpki-client