Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.mft
File: 0LYdHx2czatrbY4UUMLJNtOX5nA.mft (raw, json)
Hash identifier: KB6KnI53sGPCk/fd+PN5J9/Datf9sU37zYBPAK5RsyM=
Subject key identifier: 4A:56:B0:58:F3:E5:4D:B1:CC:C3:B2:E4:2A:4F:68:A9:51:25:74:52
Authority key identifier: D0:B6:1D:1F:1D:9C:CD:AB:6B:6D:8E:14:50:C2:C9:36:D3:97:E6:70
Certificate issuer: /CN=d0b61d1f1d9ccdab6b6d8e1450c2c936d397e670
Certificate serial: 01A10E82E81B599A3EEA84F1B9ADAB659328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LYdHx2czatrbY4UUMLJNtOX5nA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.mft
Manifest number: 0780
Signing time: Tue 06 Oct 2026 00:00:22 +0000
Manifest this update: Tue 06 Oct 2026 00:00:22 +0000
Manifest next update: Wed 07 Oct 2026 00:00:22 +0000
Files and hashes: 1: 0LYdHx2czatrbY4UUMLJNtOX5nA.crl (hash: l/MSSP4tivhsg+PwPKzoLm0aMYHVPK5+VS9N7aKfkKQ=)
2: zga9Hrw7zuD_QLdtCJpMRKMP3DQ.roa (hash: AOEGUef18XORevLws81X/8IWws1WokZExo2mQVZZKN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LYdHx2czatrbY4UUMLJNtOX5nA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:82:e8:1b:59:9a:3e:ea:84:f1:b9:ad:ab:65:93:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b61d1f1d9ccdab6b6d8e1450c2c936d397e670
Validity
Not Before: Oct 6 00:00:22 2026 GMT
Not After : Oct 7 00:00:22 2026 GMT
Subject: CN=4a56b058f3e54db1ccc3b2e42a4f68a951257452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e2:e2:f0:56:03:47:31:bf:da:e8:a9:4a:64:
f2:86:76:60:ce:1d:63:79:be:4b:90:62:9b:ef:85:
ff:bc:ea:c6:11:db:a3:f8:12:ed:4d:cc:2b:eb:e7:
44:91:26:41:38:a6:02:84:87:ad:d7:da:9c:6e:f6:
13:df:46:08:07:74:e3:5d:c8:2e:a9:08:12:75:6f:
31:0e:30:23:3a:6f:a4:5c:23:0c:b8:77:c6:a1:67:
05:9f:23:88:33:a6:07:b8:a4:e9:4c:64:f3:bd:32:
95:71:69:5e:98:e1:a0:04:9b:5d:44:df:e7:ad:b2:
47:8e:86:72:4b:f2:b6:bc:71:24:75:76:b5:ab:30:
e4:d6:66:d2:cf:08:d7:a5:02:a9:a6:26:36:75:f3:
d3:df:9a:34:c3:c8:8a:53:a9:0e:20:c4:5a:af:f9:
95:e6:31:d0:18:c9:54:ac:70:98:4a:c6:e7:70:78:
4d:b7:74:f8:0a:75:c5:93:07:a6:79:7b:4d:05:93:
ad:26:b6:f5:df:62:99:f4:50:1e:33:51:e0:f2:c7:
b5:7f:5e:2f:2b:cc:d7:16:49:df:f0:7f:9a:6d:db:
91:f5:26:6e:1c:08:46:4b:29:6d:85:94:de:ed:b9:
12:dc:fb:5a:fc:fb:14:1b:a2:30:67:61:d4:9e:df:
e9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:56:B0:58:F3:E5:4D:B1:CC:C3:B2:E4:2A:4F:68:A9:51:25:74:52
X509v3 Authority Key Identifier:
keyid:D0:B6:1D:1F:1D:9C:CD:AB:6B:6D:8E:14:50:C2:C9:36:D3:97:E6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LYdHx2czatrbY4UUMLJNtOX5nA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:61:7c:be:49:a6:20:4d:fb:f7:a2:72:ac:8e:26:25:4d:29:
25:f9:58:dd:8b:9c:d6:fc:e0:a4:ca:05:f0:52:46:0c:ca:c0:
c3:f7:30:ce:ab:fc:3a:64:20:ae:43:a7:9b:8e:19:12:93:2b:
0e:8f:be:e0:30:2c:4e:3c:00:10:07:75:46:da:ff:3a:c6:ec:
9a:42:e0:7d:62:20:49:8a:1c:2b:3b:e1:bc:1e:6e:e0:b9:ba:
02:58:27:2f:66:1e:6b:fb:59:03:37:7b:c2:90:55:b7:af:3e:
17:b3:36:37:6d:e2:b1:c3:73:9a:cf:c9:c4:16:2e:3e:89:9f:
b9:5f:e6:26:f1:61:16:31:a6:ac:0d:bf:a6:96:dd:c0:b7:30:
03:36:f2:37:8c:71:58:04:39:75:89:cb:a2:e7:6a:93:4d:3f:
6c:e6:f9:51:ed:e1:e3:47:e1:0c:c3:de:9d:cf:92:39:4e:e2:
60:fa:40:02:b8:ca:9a:c3:90:9c:30:11:13:81:d6:5f:74:78:
9b:84:69:62:91:48:28:d7:f0:7b:6c:f2:4c:f2:46:d2:16:2f:
a8:26:ed:24:22:53:9a:aa:fc:46:89:4a:8f:1e:0f:90:dc:df:
d2:f6:d1:df:b9:70:bd:21:e0:1d:2b:4b:e6:c6:07:35:6c:7c:
cd:84:59:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 07:14:47 2026 by rpki-client