Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
File: 0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft (raw, json)
Hash identifier: HhFnNeioc/vaZ8BCBGaTcd044Wqn9KSDNEqddTaYY/s=
Subject key identifier: 7F:E7:84:85:49:E8:98:0B:2E:B7:BF:FF:AC:85:4A:0E:ED:CA:F0:13
Authority key identifier: D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06
Certificate issuer: /CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06
Certificate serial: 01A0016F6C016F4FC4127A7DF381AF7D4E63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 18:01:14 +0000
Manifest this update: Fri 14 Aug 2026 18:01:14 +0000
Manifest next update: Sat 15 Aug 2026 18:01:14 +0000
Files and hashes: 1: 0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl (hash: OjmkP96MC1zOMKSFIDj6y1bLAzUVNcM546iyCb0eqgw=)
2: lNZ8b2GqipxFmFvx0Lw_q8EwfSo.roa (hash: qDLpSNqlibtH6zRBXzlD7tUyev4dQUA/1eIb4IG63oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:6c:01:6f:4f:c4:12:7a:7d:f3:81:af:7d:4e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06
Validity
Not Before: Aug 14 18:01:14 2026 GMT
Not After : Aug 15 18:01:14 2026 GMT
Subject: CN=7fe7848549e8980b2eb7bfffac854a0eedcaf013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6f:f9:fd:72:c6:01:c6:4c:ab:68:4a:12:2a:
fb:c6:4a:10:a7:74:46:4d:f2:bc:2c:4f:99:64:5b:
34:30:51:e8:96:61:39:e9:77:28:11:69:e5:92:1a:
81:b1:9a:52:7d:89:ac:18:50:8d:2d:b0:2e:96:f3:
17:70:28:d3:91:2c:5f:1a:71:e1:4f:5b:9c:ec:4b:
cb:1b:4c:98:14:23:28:f5:b6:b4:89:3f:8e:d2:b9:
4f:63:5d:44:d9:ce:23:09:81:c0:cf:a8:68:5a:e7:
23:63:e2:51:71:1f:2f:b2:46:5a:e1:8c:e4:87:63:
05:a6:a1:e8:9f:1d:a9:d9:72:80:44:4a:79:a1:d5:
fb:84:31:2d:e9:0b:81:86:49:4c:74:fc:1a:34:6f:
bc:fa:c7:02:39:2e:63:db:60:f1:17:ee:85:c4:89:
c9:bb:78:e2:23:f8:37:28:ea:5c:4b:1d:eb:6c:4f:
aa:ee:47:76:c3:ef:1b:6d:95:21:63:13:24:75:93:
85:4a:fb:95:d8:55:5f:81:e2:7d:8b:04:8e:26:0d:
f9:ed:97:46:bd:74:13:84:2d:e0:58:68:2b:b4:de:
1b:d2:90:a8:62:e6:86:08:44:b7:9c:47:f4:29:9d:
2d:fc:c0:ee:62:c6:3b:ed:d7:35:f3:76:ef:98:4d:
68:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E7:84:85:49:E8:98:0B:2E:B7:BF:FF:AC:85:4A:0E:ED:CA:F0:13
X509v3 Authority Key Identifier:
keyid:D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b8:e0:c9:ef:6d:00:a5:cf:02:64:0b:f6:63:3e:6a:2a:98:
b1:6c:0e:81:13:32:d9:01:78:c4:4f:d0:7a:2e:69:84:89:ed:
65:99:f3:5c:83:5f:71:4a:bf:e0:25:d7:53:47:88:02:5d:9a:
92:34:95:33:ec:19:15:52:a5:13:5a:50:16:3f:63:3f:56:5b:
9c:4f:80:d3:6e:3e:a4:fa:37:b0:83:07:08:aa:91:e2:1f:6d:
99:7a:44:fc:9b:6b:2c:ac:c4:86:a3:41:42:e5:05:49:36:a7:
da:3a:6d:df:49:68:b9:48:00:68:55:07:37:0a:8e:b1:60:4d:
9b:dc:c4:6d:22:47:75:d6:d2:20:dd:20:41:fc:4e:1b:97:9a:
90:c5:70:87:30:ce:37:1d:c5:b8:74:88:aa:b7:f1:9f:57:f9:
31:81:90:f6:e2:4d:3a:12:1f:77:b7:ba:0f:36:3e:8d:9e:61:
b1:7a:27:05:fa:f7:fe:37:f3:d7:0c:ba:4a:7e:1b:84:ad:ec:
cc:17:42:4f:db:0b:de:1a:ac:2f:20:9f:3f:16:18:98:09:12:
30:99:ae:a2:6d:7c:89:ad:68:51:df:ae:e0:5a:9d:92:06:66:
98:b1:50:fb:0d:82:c8:56:f1:dc:ad:2b:24:8a:ef:c1:65:fe:
52:d9:6c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:38 2026 by rpki-client