Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
File: 0BDueLvUh9OdecsZgIXphPcCogg.mft (raw, json)
Hash identifier: Kp2Ui511ZQtFx5mhyGGTMelkKBenj9d/5UWRnk34X1c=
Subject key identifier: 34:C3:84:A8:0C:BA:74:18:81:F8:68:D3:B1:8A:D9:3D:49:DA:D6:72
Authority key identifier: D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08
Certificate issuer: /CN=d010ee78bbd487d39d79cb198085e984f702a208
Certificate serial: 01A13E25CFD8BBF1E72EBC101A938F047392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
Manifest number: 0D97
Signing time: Thu 15 Oct 2026 06:00:27 +0000
Manifest this update: Thu 15 Oct 2026 06:00:27 +0000
Manifest next update: Fri 16 Oct 2026 06:00:27 +0000
Files and hashes: 1: 0BDueLvUh9OdecsZgIXphPcCogg.crl (hash: wA7223kasv3n3ifcbkW/Ojo6/y5YBeykpzxcaFpRCHs=)
2: i61qYgJt7XASGajQVn7m5dP7IZQ.roa (hash: qGulv8eW7fr9lnRNaCMKhFZd/KxMM/VrsV3Shc1gsjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:25:cf:d8:bb:f1:e7:2e:bc:10:1a:93:8f:04:73:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d010ee78bbd487d39d79cb198085e984f702a208
Validity
Not Before: Oct 15 06:00:27 2026 GMT
Not After : Oct 16 06:00:27 2026 GMT
Subject: CN=34c384a80cba741881f868d3b18ad93d49dad672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ee:17:b7:73:80:9b:f9:ad:f8:93:91:16:04:
51:8a:e0:54:f1:b2:37:4e:91:4c:50:d0:7b:18:33:
7b:08:00:7d:98:c4:6b:51:e1:10:78:8d:35:f0:c9:
0e:f6:ce:a7:65:1f:db:e6:d0:a6:92:f6:48:fd:70:
47:62:d6:b6:f0:b8:2a:c5:89:23:1f:c9:85:17:41:
f9:ae:80:d1:a9:90:af:62:c1:43:7e:6d:d8:81:fd:
3a:e4:c5:2b:94:7f:f8:88:0b:65:8d:8a:94:02:97:
b9:59:c9:e2:de:a5:c8:19:d5:f1:a5:d5:bd:b8:55:
4b:26:c0:72:42:bb:ad:3a:5f:73:76:cc:d6:4b:48:
b9:9d:3d:5c:1d:07:7f:9f:16:e9:f7:7a:eb:6a:56:
79:55:fd:50:35:70:45:eb:89:36:4d:12:95:7e:e1:
d8:b5:f3:40:96:26:22:0b:d5:b2:44:45:97:d3:15:
61:5a:f8:62:66:f1:14:99:0b:37:fb:9f:9f:8f:fe:
39:97:2d:fc:75:7c:da:d9:4d:85:fa:2d:f9:be:a6:
1a:7a:e4:73:33:45:b9:d6:cc:75:69:7c:31:9f:9e:
a6:3e:15:26:e4:aa:da:7a:bc:cd:04:50:44:0f:81:
d9:7c:f5:cb:68:43:97:6e:e1:b4:21:74:6a:a0:5a:
c0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C3:84:A8:0C:BA:74:18:81:F8:68:D3:B1:8A:D9:3D:49:DA:D6:72
X509v3 Authority Key Identifier:
keyid:D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:3d:09:50:84:20:c0:24:da:6b:a2:b0:d5:fc:5e:60:40:7b:
39:85:c1:bb:a1:08:b4:74:c0:cd:13:30:0c:dd:d3:7a:4e:ce:
70:1b:c4:21:e6:ef:6a:0f:68:e6:37:a3:db:b4:bd:74:79:96:
51:42:cc:40:61:16:10:c1:de:c2:13:12:bf:51:38:24:62:11:
15:16:ea:9c:4a:d3:56:61:2f:d4:8c:a6:b4:60:fc:f2:f3:ec:
68:f2:f2:69:3e:ad:a4:01:f4:a3:a1:33:43:b2:23:e4:91:06:
b2:80:c1:b2:0a:05:14:ec:71:e0:ab:e6:69:49:da:eb:e5:b3:
e1:d6:e9:e0:7a:69:47:39:1d:b0:2f:25:90:d8:a7:03:f1:3b:
0c:54:2f:e2:3e:84:de:01:9e:b3:0d:42:99:ed:55:7e:ef:43:
82:a6:46:22:21:04:a6:a3:22:f8:6a:3b:da:c7:ce:86:4c:ff:
7d:26:21:40:9d:0d:1b:c0:15:4a:38:f1:e8:b9:ac:4f:03:a0:
bd:55:d7:29:87:27:8e:13:2b:7a:9f:dc:f7:d7:8d:da:4a:0f:
56:29:6b:60:73:d1:6f:d6:e3:60:44:17:1d:0e:05:70:63:6e:
83:63:2a:2e:d8:7e:0a:2b:10:5b:ec:fa:14:11:d7:d8:83:eb:
f6:9f:34:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:12:03 2026 by rpki-client