Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
File: 0vONSutNAojbuFTR6uC9itP4Qfo.mft (raw, json)
Hash identifier: hSOBZMD5FT5K3zP2+nWidK6VkBUY2pdiKc0MQ7muD8I=
Subject key identifier: A5:FA:5C:96:87:7F:4D:EC:15:45:07:2A:8D:D5:BB:FC:51:51:E7:EB
Authority key identifier: D2:F3:8D:4A:EB:4D:02:88:DB:B8:54:D1:EA:E0:BD:8A:D3:F8:41:FA
Certificate issuer: /CN=d2f38d4aeb4d0288dbb854d1eae0bd8ad3f841fa
Certificate serial: 01A13CDC79C6F5D5D374698F9581AF0D1318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 00:00:44 +0000
Manifest this update: Thu 15 Oct 2026 00:00:44 +0000
Manifest next update: Fri 16 Oct 2026 00:00:44 +0000
Files and hashes: 1: 0vONSutNAojbuFTR6uC9itP4Qfo.crl (hash: +TSuPtXeb2r3wcKffioxdyptt5sRlMY+F1dfbQv8hY0=)
2: tquIiBHdfRgZoSkv66J5g5_rmsI.roa (hash: ewRKCXj1KUDIVFZwB0RpxCjNpMk+Zl5DzmkGO5LloCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 00:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:dc:79:c6:f5:d5:d3:74:69:8f:95:81:af:0d:13:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f38d4aeb4d0288dbb854d1eae0bd8ad3f841fa
Validity
Not Before: Oct 15 00:00:44 2026 GMT
Not After : Oct 16 00:00:44 2026 GMT
Subject: CN=a5fa5c96877f4dec1545072a8dd5bbfc5151e7eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:62:3c:b3:a8:aa:ab:42:c2:f6:90:ea:15:12:
00:b5:ca:91:58:b7:8a:3c:a4:47:cf:b9:d6:64:ea:
a7:c4:fc:74:e1:06:92:50:12:6b:47:e1:ce:47:48:
56:88:5f:cf:62:6c:75:05:51:73:5b:b7:5f:9c:72:
55:ea:2a:d5:aa:94:fc:ed:dd:2b:cb:a8:7c:e7:47:
f6:bd:31:d6:6f:ab:bc:1d:e9:a7:98:32:73:b1:fc:
e6:87:a1:39:98:54:36:5c:70:8f:9d:ec:0f:35:34:
e3:48:55:04:de:a2:95:51:2a:ee:2e:f9:ad:f2:f0:
be:89:56:cd:25:f6:1c:39:b6:14:37:a3:13:17:b4:
08:4d:63:7f:92:96:75:29:4c:9e:3e:dc:2d:45:21:
ad:12:79:8a:92:77:9f:05:eb:e7:72:ba:c0:d7:c0:
94:dc:1e:03:23:78:a0:43:de:b6:49:cb:88:2e:cb:
8d:90:26:4b:20:da:f2:e0:75:94:2e:b2:d1:b7:a6:
82:30:9f:a0:b7:9e:5a:fb:92:c8:15:37:15:41:b6:
1d:99:fa:b4:06:92:28:05:e5:e2:f6:02:40:ac:2d:
89:f2:57:ef:2c:88:74:e3:da:47:92:de:cd:69:c0:
0d:6b:dc:86:1c:eb:ef:9a:0e:fc:b2:f5:0b:0c:04:
20:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FA:5C:96:87:7F:4D:EC:15:45:07:2A:8D:D5:BB:FC:51:51:E7:EB
X509v3 Authority Key Identifier:
keyid:D2:F3:8D:4A:EB:4D:02:88:DB:B8:54:D1:EA:E0:BD:8A:D3:F8:41:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:47:27:19:42:64:6f:9c:59:99:1e:3e:0b:59:02:e7:2f:22:
90:ad:04:c4:15:ca:bc:03:5a:e3:cb:3b:65:09:36:8e:f8:11:
07:f3:c9:ff:8b:28:d5:06:80:a7:a1:51:1e:c5:9a:a0:ce:ea:
dc:cc:9a:72:68:e6:e2:8b:8c:3f:bf:35:e9:b6:03:33:66:cd:
48:b7:b5:aa:a8:78:84:29:5d:33:c2:d0:9a:36:8e:21:59:46:
68:15:89:a9:98:e0:63:67:f7:cb:70:0e:ac:4e:47:97:51:f6:
48:94:d1:55:c2:47:4b:01:95:af:80:7d:39:c8:c1:d5:73:37:
89:3a:19:4c:18:00:12:e8:96:c8:22:33:12:01:56:57:da:9a:
26:6c:c7:89:9c:75:83:7b:8b:e2:ab:f8:a5:e9:84:8f:1b:ca:
f8:7c:1e:54:c0:fd:7d:e9:0e:a3:ac:50:15:8e:a6:79:a6:59:
ec:0f:3a:70:f2:a0:04:77:fb:10:85:57:49:ee:d0:fe:c5:67:
81:40:4c:ce:1c:17:27:9f:10:5a:d2:93:a7:74:db:d8:f5:68:
a4:34:80:64:cc:1a:cf:c1:be:21:db:31:c6:b3:b0:c3:80:fd:
de:0e:c6:13:48:9a:d0:19:7c:69:2c:8c:a8:ee:03:37:29:39:
ad:82:d4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:34:47 2026 by rpki-client