Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft
File: 0Mv2ugl6drYQyFYDW8GN55fCpnc.mft (raw, json)
Hash identifier: ZFvZZfCi9kak/w4GNdm9M4jTauEZ5m6JR18/n6Np7os=
Subject key identifier: 64:E0:5F:5A:76:29:ED:BC:2C:6B:54:A7:1C:00:19:71:EE:D9:CD:15
Authority key identifier: D0:CB:F6:BA:09:7A:76:B6:10:C8:56:03:5B:C1:8D:E7:97:C2:A6:77
Certificate issuer: /CN=d0cbf6ba097a76b610c856035bc18de797c2a677
Certificate serial: 01A1826252D50353CE92F4FACFCEDD2526DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft
Manifest number: 0CB1
Signing time: Wed 28 Oct 2026 12:00:44 +0000
Manifest this update: Wed 28 Oct 2026 12:00:44 +0000
Manifest next update: Thu 29 Oct 2026 12:00:44 +0000
Files and hashes: 1: 0Mv2ugl6drYQyFYDW8GN55fCpnc.crl (hash: QfjNMCFCE/DqOvSlvz5SCEZ6dG4LaJ4yI2XxpRXdb/Y=)
2: DqXib1Ly2xFoTm2bjcxnicthk1w.roa (hash: g/TBWWlwOSVO9LY7Rp7QlLHadW83dAk0kFgZL+CVZlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:62:52:d5:03:53:ce:92:f4:fa:cf:ce:dd:25:26:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0cbf6ba097a76b610c856035bc18de797c2a677
Validity
Not Before: Oct 28 12:00:44 2026 GMT
Not After : Oct 29 12:00:44 2026 GMT
Subject: CN=64e05f5a7629edbc2c6b54a71c001971eed9cd15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:44:30:8c:19:59:ac:2e:5e:a4:b5:86:88:03:
c6:31:00:4b:64:49:0d:e4:99:3a:b5:6a:65:bb:d3:
71:f8:dc:4d:67:70:95:80:25:30:91:8f:e7:9e:c6:
47:4d:5a:d0:1f:b8:6c:94:3f:41:c2:01:c8:02:4d:
75:b1:0d:d8:92:ba:e8:e7:c4:c6:aa:d7:23:d0:fb:
bc:c8:15:d7:1d:b3:22:54:ff:1d:53:ed:fb:4b:86:
63:f5:c6:ed:e9:db:96:cb:b6:45:53:88:19:bc:d5:
5b:b0:5d:f7:e0:34:88:05:2a:e9:69:52:ae:28:5b:
0b:b0:23:89:af:45:94:92:59:35:97:91:e3:43:a8:
ca:46:50:d5:06:0a:89:be:1a:3f:e8:1a:85:5e:7d:
9f:b9:a4:26:76:29:de:dd:40:07:5d:35:16:ec:93:
60:1e:db:83:9f:5a:b6:7d:a4:47:15:2b:f7:64:b9:
b5:15:18:85:86:2b:a8:08:22:60:e7:67:d4:a5:94:
c8:76:30:da:c4:b0:99:fa:f3:98:70:57:32:4e:3a:
61:13:6e:dc:82:5d:06:b1:68:38:6c:62:d8:46:5e:
99:38:41:3f:fa:7d:06:15:c4:83:82:58:1a:30:89:
ca:dd:99:ca:5f:21:c2:85:93:e1:03:bc:b7:0d:d3:
80:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E0:5F:5A:76:29:ED:BC:2C:6B:54:A7:1C:00:19:71:EE:D9:CD:15
X509v3 Authority Key Identifier:
keyid:D0:CB:F6:BA:09:7A:76:B6:10:C8:56:03:5B:C1:8D:E7:97:C2:A6:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:44:fc:99:9d:f4:f8:7c:80:c3:ca:66:61:9a:0b:f7:bd:bc:
37:0f:0e:0b:df:3d:dc:e1:94:e0:32:ac:97:f8:f8:69:24:b5:
87:52:b9:90:ad:26:be:08:7e:fb:a2:77:dd:e3:fb:e3:57:69:
01:af:9c:2b:a1:29:78:29:ba:f3:ab:59:5f:46:78:2f:17:fb:
74:ed:d4:42:9e:4f:00:67:64:98:4a:12:d3:86:86:0d:94:65:
6d:0f:b7:70:05:28:55:79:e8:1f:f9:2d:b9:ae:9d:33:bd:42:
cc:ad:0f:31:d6:59:ec:9c:24:97:f4:67:fa:23:34:9b:fa:35:
df:2b:64:ee:7a:a2:2a:34:9c:53:ea:d5:bc:4c:d4:bc:76:ba:
74:42:75:b2:55:cb:1f:9b:31:ab:0b:d4:4f:25:ee:69:0c:c0:
4c:60:be:e7:59:85:1d:49:59:61:7c:e7:79:8b:2c:86:aa:3a:
07:59:79:ca:f5:19:95:fd:14:e2:64:95:04:34:5b:8c:7c:7d:
6e:66:34:ed:9b:4c:1a:e5:5b:49:cc:18:d8:4e:f4:b8:88:b0:
d2:72:26:13:4f:89:31:e5:1b:d7:55:79:56:45:a1:98:57:79:
82:db:d0:58:78:76:16:d4:f3:52:e7:96:26:15:ba:5a:40:10:
88:ec:6b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:49:15 2026 by rpki-client