Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
File: 0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft (raw, json)
Hash identifier: bOcKUmcNEGyTbg8benjq3E5NTFWZZBZemefQAcbv3bE=
Subject key identifier: 78:8D:FC:47:22:C4:22:CC:05:7D:EC:09:EF:99:9F:3A:EB:20:44:9F
Authority key identifier: D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD
Certificate issuer: /CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
Certificate serial: 01A13C6E307F65BB7C4EA3E0951E01E9C6DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
Manifest number: 0F05
Signing time: Wed 14 Oct 2026 22:00:16 +0000
Manifest this update: Wed 14 Oct 2026 22:00:16 +0000
Manifest next update: Thu 15 Oct 2026 22:00:16 +0000
Files and hashes: 1: 0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl (hash: hK5Nz9ctKlN9e+lp46VXzZ+ESbrYGxanNJ+iZCVAeqI=)
2: 1-bzA-LC9HAAJGIHNZyWh_5MoU-g.roa (hash: RnN32d6e4MWESaRTbw2K0CLbZb59w+5PKP+DYaK/k9o=)
3: rTSOfv72iKS4Od2LIB0_G10Sm1g.roa (hash: gNhIcqNEFyGD4jxJEKcU893kImcieeuHGUa4eFshagU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 22:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:6e:30:7f:65:bb:7c:4e:a3:e0:95:1e:01:e9:c6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
Validity
Not Before: Oct 14 22:00:16 2026 GMT
Not After : Oct 15 22:00:16 2026 GMT
Subject: CN=788dfc4722c422cc057dec09ef999f3aeb20449f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:41:bd:38:f3:81:51:c2:27:85:dd:93:ac:0d:
4c:61:6f:ea:09:bb:a3:f4:8d:1d:92:ce:df:a9:89:
43:9c:bf:46:4a:cc:3b:80:73:65:d0:28:04:36:f6:
97:0e:a9:00:cf:52:ad:4c:18:07:3c:6e:fb:90:c8:
e6:34:bd:27:e8:ce:56:77:e9:d2:e4:fd:d7:70:c1:
38:1d:fb:40:75:03:58:58:c0:b5:41:f9:58:1d:b5:
70:32:76:1f:81:05:7d:6a:83:05:5b:a9:83:8d:d9:
1e:9b:30:90:53:a8:63:58:5a:38:23:5c:95:88:46:
f5:ce:af:e5:1b:86:a6:2f:23:24:2a:12:2f:2d:6c:
59:12:c6:45:2d:8e:02:77:69:16:be:42:2f:44:ba:
51:8e:05:db:83:02:df:a2:ad:fc:28:76:70:44:43:
f1:a8:81:79:72:c4:f9:ce:12:c0:b6:a2:1e:aa:0e:
5b:79:54:d0:98:0a:4e:ae:2e:cd:e1:c3:91:74:26:
57:7a:b2:e6:ca:33:ed:68:20:82:9d:1d:14:fa:95:
2d:ed:fa:4e:88:1a:3c:5d:82:f5:f6:5a:56:b2:c2:
87:89:6c:6b:f1:3a:a3:74:2c:67:e4:d5:16:8e:81:
ba:61:72:29:0e:1c:b1:11:41:fa:a8:04:e3:f9:cd:
64:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8D:FC:47:22:C4:22:CC:05:7D:EC:09:EF:99:9F:3A:EB:20:44:9F
X509v3 Authority Key Identifier:
keyid:D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:75:9a:65:d0:1d:c5:53:c2:cd:64:b4:11:6f:4e:17:17:53:
a5:17:4f:52:9a:db:93:97:8c:e8:42:a2:36:61:40:29:17:85:
5b:2f:5b:b0:7b:4d:76:89:86:22:af:0f:d7:33:07:3f:a9:bb:
a2:ee:74:3e:33:aa:c7:03:62:f6:44:32:fd:98:13:8e:a0:8a:
83:ea:c4:f3:06:4d:81:d5:a2:c6:57:c3:6b:e5:b2:aa:31:a1:
4b:6c:7d:3d:22:95:89:c4:85:c9:5e:1e:98:77:02:c1:7d:46:
4c:b1:c5:bb:9c:6f:9e:e9:d1:82:b9:37:e1:d7:7f:66:be:80:
86:ef:91:09:0b:6e:cc:16:20:27:5f:dc:c7:7a:03:00:2e:a2:
91:64:f7:f9:8b:b9:5a:c5:18:bf:5d:84:fa:dd:54:bd:14:81:
0d:d5:6d:da:90:2f:4f:6d:35:e9:b0:ee:66:88:e4:9a:3d:3f:
14:6c:2f:a3:28:48:30:ed:d6:89:6d:93:c0:05:0a:87:ab:5b:
ca:87:c5:fc:fa:d1:c8:c5:c3:bf:2d:f5:d4:3e:66:c9:5e:18:
4e:c4:09:b7:b1:7a:9d:36:c1:df:5a:0c:1e:92:03:c1:e6:fc:
a4:fc:fa:bd:e7:2f:92:ad:05:08:be:9d:29:05:d4:b8:22:29:
a0:da:d8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:10 2026 by rpki-client