Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft
File: 0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft (raw, json)
Hash identifier: EZzgkbNC0gE9JZJGKwJtEk6znk4HxzAryRDLXoH+yuI=
Subject key identifier: 0C:E7:A3:B6:C6:6B:70:7B:8E:E6:CB:2B:17:32:62:E7:A2:6B:71:86
Authority key identifier: D2:B3:6A:D2:8E:52:1E:DA:B4:B4:DE:A3:49:A2:77:72:D4:B2:A7:BE
Certificate issuer: /CN=d2b36ad28e521edab4b4dea349a27772d4b2a7be
Certificate serial: 01A1517647E1C37370E1ACA6D9734A789277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rNq0o5SHtq0tN6jSaJ3ctSyp74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft
Manifest number: 17F3
Signing time: Mon 19 Oct 2026 00:01:08 +0000
Manifest this update: Mon 19 Oct 2026 00:01:08 +0000
Manifest next update: Tue 20 Oct 2026 00:01:08 +0000
Files and hashes: 1: 0rNq0o5SHtq0tN6jSaJ3ctSyp74.crl (hash: /TOA/5jDICwq8nHL6YRzwvQSkRoLOxE1J1Wvq+uBjeE=)
2: t0X5t_3y1eMrgSVfnROrir2IJb4.roa (hash: BPcyM2IeAIooAh+FVKFVf4qaLxjgFOkdsiFt2kQ2Eag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rNq0o5SHtq0tN6jSaJ3ctSyp74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 00:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:76:47:e1:c3:73:70:e1:ac:a6:d9:73:4a:78:92:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2b36ad28e521edab4b4dea349a27772d4b2a7be
Validity
Not Before: Oct 19 00:01:08 2026 GMT
Not After : Oct 20 00:01:08 2026 GMT
Subject: CN=0ce7a3b6c66b707b8ee6cb2b173262e7a26b7186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1b:a2:56:7a:d8:e0:b7:71:00:c4:57:79:dc:
7c:8d:a4:40:7a:de:98:ec:7b:87:b5:45:8d:93:48:
e4:33:7a:a8:dc:9d:8c:d0:29:7e:64:94:c0:64:60:
cd:5b:30:e2:8c:89:8b:26:29:99:c8:12:3f:8a:55:
a1:64:4e:36:af:03:74:10:52:ed:44:9b:e2:b2:c4:
22:c2:65:7f:ed:df:86:2f:03:01:83:ae:a2:b6:78:
b0:4e:ee:6a:38:f3:73:65:6a:ad:49:f9:a3:02:e0:
28:cc:5e:08:65:02:b3:33:0d:f0:3c:1c:8e:d6:8b:
ae:4b:58:9a:73:29:c2:ee:e7:32:ab:92:d2:d1:a6:
76:a5:e3:fb:dc:d5:02:35:50:f9:bc:a8:f0:be:cf:
a0:da:3c:c5:6a:55:40:7f:36:4c:90:7b:84:de:90:
21:bd:3c:1a:77:ab:94:05:08:7d:6e:1c:5e:72:84:
5d:40:40:74:96:f2:f0:f3:d6:91:a9:50:58:8f:df:
57:69:4e:e1:8b:e4:a3:f9:94:9b:76:fe:8a:ea:cd:
d8:fd:c1:23:b1:08:a5:49:e7:c6:08:cd:f3:47:10:
f4:db:76:89:11:a6:fe:de:c6:00:fa:f8:ba:10:58:
5f:45:be:4f:af:e6:08:7c:58:8b:dc:48:27:ff:3b:
e3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E7:A3:B6:C6:6B:70:7B:8E:E6:CB:2B:17:32:62:E7:A2:6B:71:86
X509v3 Authority Key Identifier:
keyid:D2:B3:6A:D2:8E:52:1E:DA:B4:B4:DE:A3:49:A2:77:72:D4:B2:A7:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rNq0o5SHtq0tN6jSaJ3ctSyp74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:fe:2c:13:79:9f:0e:02:8a:a2:ef:46:49:80:db:04:fc:42:
b7:d5:a5:ae:c1:e1:e3:77:f7:9e:cc:a7:3c:45:f0:b8:71:c0:
dc:4f:d6:7d:63:dd:7d:8a:72:42:3d:38:9f:f9:66:8c:e5:5b:
f1:70:10:1f:d8:42:e5:e0:18:ed:a9:a2:25:34:0d:c8:ac:56:
16:61:84:7c:6a:cd:a4:f9:31:ff:49:e1:e9:5b:c6:93:23:d7:
8f:95:68:83:6f:b5:14:1c:19:bc:11:d0:68:cd:00:b8:4f:47:
5e:d9:04:22:a7:be:12:eb:55:38:4b:c2:c6:90:da:3c:7d:2a:
4b:dd:1a:92:be:cb:eb:5b:ff:8c:00:eb:02:4b:e2:5c:a3:c8:
68:06:52:c0:54:8e:c9:c0:d3:f7:55:ce:e0:72:51:07:9e:56:
87:cf:4e:32:47:44:c5:f7:6f:b7:f6:1d:f8:ed:7c:10:1b:19:
82:97:09:b4:08:28:50:c4:2a:0a:ac:8b:2e:ed:13:c4:a8:84:
b6:8a:de:d1:f9:f3:38:6b:ae:f7:f5:49:f4:2d:45:2b:5b:df:
d3:fa:ea:ce:19:c0:60:7c:cf:43:f9:70:7e:93:71:51:9c:f2:
b2:1e:f6:68:3f:a7:1d:dd:ed:d0:c5:90:fb:f9:ee:a4:cf:c7:
8a:6a:e1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 08:06:28 2026 by rpki-client