Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
File: 0vONSutNAojbuFTR6uC9itP4Qfo.mft (raw, json)
Hash identifier: N3y/++E1IEIxWbuxc8SHHleHv9lstjFpr7QqdxLvu70=
Subject key identifier: 11:AA:52:CB:60:6E:93:0C:71:5A:E7:E9:E0:6D:6B:8E:69:BE:58:89
Authority key identifier: D2:F3:8D:4A:EB:4D:02:88:DB:B8:54:D1:EA:E0:BD:8A:D3:F8:41:FA
Certificate issuer: /CN=d2f38d4aeb4d0288dbb854d1eae0bd8ad3f841fa
Certificate serial: 01A002140F3D80D30FEBA1F100CCADE614C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 21:01:04 +0000
Manifest this update: Fri 14 Aug 2026 21:01:04 +0000
Manifest next update: Sat 15 Aug 2026 21:01:04 +0000
Files and hashes: 1: 0vONSutNAojbuFTR6uC9itP4Qfo.crl (hash: BrJN+QDPWlTtohNCqACIZ2OiFAEoqX27W8lfH9pHsmo=)
2: tquIiBHdfRgZoSkv66J5g5_rmsI.roa (hash: ewRKCXj1KUDIVFZwB0RpxCjNpMk+Zl5DzmkGO5LloCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:14:0f:3d:80:d3:0f:eb:a1:f1:00:cc:ad:e6:14:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f38d4aeb4d0288dbb854d1eae0bd8ad3f841fa
Validity
Not Before: Aug 14 21:01:04 2026 GMT
Not After : Aug 15 21:01:04 2026 GMT
Subject: CN=11aa52cb606e930c715ae7e9e06d6b8e69be5889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:33:54:4d:9d:84:95:f4:f1:be:c1:27:6f:40:
3f:a9:3d:96:2d:3f:09:e2:81:e7:62:4b:15:ec:fe:
10:ac:d5:e8:39:b9:ad:8a:33:4b:cf:d6:13:04:82:
a0:d8:df:e7:d1:72:59:16:7f:08:16:5d:eb:04:84:
36:94:b1:fa:b9:f3:19:b6:45:cb:ee:7e:6c:a3:b9:
14:d3:ce:fe:d9:ee:5b:31:26:8b:7d:f1:b9:f5:fb:
64:8d:93:5a:78:91:d0:c5:aa:af:3b:c1:4c:6e:7e:
8b:cb:f6:5c:13:9b:5d:b8:d7:49:d3:b8:da:c6:77:
a7:40:aa:c7:60:76:d1:a3:3b:3c:19:13:17:d1:75:
69:53:41:80:79:5f:eb:d5:cf:8a:25:3a:b9:fb:8e:
d3:c7:f8:7c:a0:7f:d8:20:e9:ce:44:48:27:b4:ea:
7a:49:ca:09:5f:93:71:13:b1:b0:ef:46:dd:ff:2a:
a9:2e:52:80:5f:f8:c9:f9:37:32:e5:16:4e:37:36:
63:f1:d0:79:5a:95:14:77:4e:84:55:29:b4:e5:5a:
d3:89:96:45:39:56:13:f9:fe:4c:57:cd:4c:88:9a:
d0:30:63:78:f6:e6:02:6b:49:48:9e:71:09:7f:29:
c3:21:19:a2:cd:9e:22:a5:1a:d3:20:aa:8a:cc:e1:
49:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AA:52:CB:60:6E:93:0C:71:5A:E7:E9:E0:6D:6B:8E:69:BE:58:89
X509v3 Authority Key Identifier:
keyid:D2:F3:8D:4A:EB:4D:02:88:DB:B8:54:D1:EA:E0:BD:8A:D3:F8:41:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:84:b2:de:7e:c3:17:db:47:c3:c9:48:ef:2e:60:a2:ae:94:
b4:8e:68:88:b7:c1:89:9b:16:d5:b9:ab:e2:22:af:b9:47:90:
24:7c:79:d5:6a:b6:a1:38:8d:df:a6:c9:01:2f:0d:41:c0:b6:
7d:8b:9e:c0:82:60:10:1c:32:15:60:a5:b4:73:e3:69:c1:25:
b1:05:03:19:30:fa:ab:10:62:ca:67:c5:1c:e4:31:d8:3e:ff:
52:6b:53:8a:ee:6d:60:88:74:28:31:96:b7:11:17:29:09:e7:
8d:40:d1:6b:26:8c:ef:59:66:c0:6f:14:7c:09:89:49:0e:9e:
27:94:d5:45:cc:02:23:13:85:5b:2a:88:5d:23:99:62:05:1a:
0e:f9:f3:d5:61:2b:97:d7:6c:2b:0b:b1:b4:11:87:4c:8a:ce:
c6:97:74:01:62:1c:ae:29:95:cd:0e:c3:b8:1e:3d:8c:f9:fa:
3a:65:62:7b:87:fd:e4:23:6a:05:49:aa:34:57:ca:5e:2a:63:
fb:0a:20:0d:2b:e6:fb:34:19:e6:68:7e:19:9e:26:5c:fb:83:
b2:52:ac:70:7b:fc:a0:26:e3:f6:ab:e5:97:cf:d9:3c:f8:f5:
26:b4:1d:0f:81:a5:3a:7d:66:2e:b7:48:96:ec:e2:fd:99:0c:
c5:2f:76:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:24:03 2026 by rpki-client