Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.mft
File: 0EXNAHNuWg7CO5CCZYcNVg1VGwI.mft (raw, json)
Hash identifier: 4FV6ikhJQkHU0Gklla4rMD+Ygq1nYX+mx+ZNWkX3xOc=
Subject key identifier: CA:20:2F:38:BE:D6:16:F5:DE:59:C5:32:55:6B:F6:B7:F2:1C:97:65
Authority key identifier: D0:45:CD:00:73:6E:5A:0E:C2:3B:90:82:65:87:0D:56:0D:55:1B:02
Certificate issuer: /CN=d045cd00736e5a0ec23b908265870d560d551b02
Certificate serial: 01A03FE0222F5AD527AF2DDE0055B823D5F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EXNAHNuWg7CO5CCZYcNVg1VGwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.mft
Manifest number: 02FC
Signing time: Wed 26 Aug 2026 21:00:48 +0000
Manifest this update: Wed 26 Aug 2026 21:00:48 +0000
Manifest next update: Thu 27 Aug 2026 21:00:48 +0000
Files and hashes: 1: 0EXNAHNuWg7CO5CCZYcNVg1VGwI.crl (hash: a2WJ7H1lIaMzM62z2kCQW/QTae+cDGZ81BMAbr+eddg=)
2: Pxo9ehHbXZebC306inRLM7y0iaU.roa (hash: DAOuRN4HFLh3V3C0ykmvw7d38j+IxJOCGqFgIfyZtA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EXNAHNuWg7CO5CCZYcNVg1VGwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:e0:22:2f:5a:d5:27:af:2d:de:00:55:b8:23:d5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d045cd00736e5a0ec23b908265870d560d551b02
Validity
Not Before: Aug 26 21:00:48 2026 GMT
Not After : Aug 27 21:00:48 2026 GMT
Subject: CN=ca202f38bed616f5de59c532556bf6b7f21c9765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ea:89:86:02:23:5c:11:36:1b:d3:05:d2:19:
f6:26:48:37:f4:cf:93:dd:d1:4f:ba:b7:88:6b:19:
7d:c3:e0:9f:0a:1a:4b:df:3a:59:76:a9:aa:45:de:
0a:a1:10:42:3d:28:23:3e:47:71:e6:b8:32:ea:6a:
01:02:e5:00:02:ca:12:33:cc:dc:e3:2d:8f:11:93:
d1:b4:81:30:22:66:3a:33:5f:50:75:b3:89:11:0c:
ab:af:77:bd:4f:19:8a:bc:96:75:d3:0d:f3:0b:9a:
e1:78:ff:03:19:64:f0:ed:ca:d4:eb:08:e9:b6:5b:
b8:6b:63:2f:f4:bc:03:d3:2d:a6:ab:b0:4d:91:d0:
0e:e8:21:2d:b2:54:17:31:db:20:6c:ed:d4:eb:c5:
60:64:45:6e:4d:b3:72:76:8f:d9:99:20:5e:ef:23:
3b:65:53:52:06:c0:f0:48:d0:96:88:3f:c6:ef:d6:
0c:3c:cd:7a:37:d2:3f:e0:44:4f:92:1e:cb:bc:17:
4f:08:5e:62:af:ff:e3:34:38:3a:14:b9:a8:8b:39:
a2:6b:bc:26:72:dd:bf:ee:ba:7c:d2:50:13:f7:26:
d0:4e:10:2f:80:9e:80:8a:ff:70:33:3e:bb:7c:1e:
7b:11:09:c3:e3:db:61:45:a3:c0:13:3e:42:5e:a5:
eb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:20:2F:38:BE:D6:16:F5:DE:59:C5:32:55:6B:F6:B7:F2:1C:97:65
X509v3 Authority Key Identifier:
keyid:D0:45:CD:00:73:6E:5A:0E:C2:3B:90:82:65:87:0D:56:0D:55:1B:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EXNAHNuWg7CO5CCZYcNVg1VGwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:11:98:b3:25:42:70:15:8b:8d:d6:24:87:3f:c2:28:b0:08:
5f:47:bb:ae:46:90:7e:88:fd:48:79:54:03:59:6d:5d:eb:89:
51:4d:ce:de:bb:66:c5:80:ab:b7:a7:17:95:80:87:65:be:05:
cc:da:ea:33:f4:06:73:f1:a5:8c:e9:06:28:b4:b9:91:f2:05:
73:fb:8a:75:cb:81:14:3e:39:dc:eb:28:c1:f6:3a:29:d6:e2:
d7:d7:73:cc:df:0d:b6:f3:2c:86:dc:09:e1:c5:4f:a7:99:6f:
ac:cd:80:ce:d3:34:39:21:94:12:52:4f:6f:bb:c4:f1:1b:69:
0b:db:dc:6a:31:8f:d2:dd:d7:fc:34:7b:de:6b:86:d2:2b:dd:
09:97:cb:36:47:b5:bc:7d:21:dd:d5:01:57:dd:cb:1c:cc:4f:
14:22:79:41:bc:ca:61:56:65:3d:74:82:a9:a5:db:75:62:e3:
5a:5e:43:d3:ec:22:0c:96:b6:31:ca:f8:34:a7:1d:de:51:93:
f0:bc:1d:38:b4:df:81:5d:e4:cd:81:84:79:e5:07:d0:40:24:
d0:d2:48:b9:cc:18:74:ef:5c:4a:56:d4:93:db:05:8e:db:6c:
dc:aa:d0:d0:4e:36:04:fc:83:b7:60:cf:5f:66:ab:ee:b1:cb:
b5:83:1a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:53:38 2026 by rpki-client