Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
File: 0-2n3wX226CeOefUvex7rg7_urA.mft (raw, json)
Hash identifier: BPg2d46FqiLIJSA63hnoJ///I7YKBydeGK8jahjQAFM=
Subject key identifier: 7C:10:81:1E:55:F8:42:1D:8F:28:9E:96:FE:89:B4:E4:FB:81:F0:7B
Authority key identifier: D3:ED:A7:DF:05:F6:DB:A0:9E:39:E7:D4:BD:EC:7B:AE:0E:FF:BA:B0
Certificate issuer: /CN=d3eda7df05f6dba09e39e7d4bdec7bae0effbab0
Certificate serial: 01A17BBB4DB65537D688FF009D720E5D4666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
Manifest number: 07CD
Signing time: Tue 27 Oct 2026 05:00:34 +0000
Manifest this update: Tue 27 Oct 2026 05:00:34 +0000
Manifest next update: Wed 28 Oct 2026 05:00:34 +0000
Files and hashes: 1: 0-2n3wX226CeOefUvex7rg7_urA.crl (hash: MhfOxTgpBll0FMgQhSvSqOfW6Yhj73csf/ZAVbbWrEo=)
2: qTWraqPBRkXUgfYW4gfB3AS-jm0.roa (hash: Rbt0ZTsq9hRwXO+cnDLn20WShDhAg5xFObZyVKiajFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:bb:4d:b6:55:37:d6:88:ff:00:9d:72:0e:5d:46:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3eda7df05f6dba09e39e7d4bdec7bae0effbab0
Validity
Not Before: Oct 27 05:00:34 2026 GMT
Not After : Oct 28 05:00:34 2026 GMT
Subject: CN=7c10811e55f8421d8f289e96fe89b4e4fb81f07b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:52:f6:c1:c7:b3:0b:1c:00:37:ec:bb:cc:8e:
34:8c:a6:cd:d7:86:35:ff:17:79:0c:3a:07:56:f3:
c3:05:95:05:6e:e9:91:44:3d:99:24:92:34:3d:9b:
98:ec:4a:f9:e4:24:5a:68:3c:e9:78:9e:22:ed:24:
34:52:bc:23:4c:97:46:01:74:77:9e:6a:72:63:f2:
57:dd:65:c5:cf:df:6e:bc:da:ad:42:7e:22:a5:c5:
73:90:c9:c2:8c:f2:b6:40:c4:fd:43:fe:5e:91:34:
98:41:8d:d1:40:e2:34:41:f3:39:4d:bd:b7:2c:13:
2f:45:a4:8d:eb:08:f6:56:f9:d7:e6:f3:ef:b7:d8:
63:5b:26:49:58:3d:ec:f4:cb:cf:06:20:e1:b2:8d:
98:d3:e1:47:00:04:22:8b:fc:33:d2:f5:76:38:a2:
4a:9f:62:32:10:32:35:f0:51:61:27:10:a0:84:bc:
30:4d:2c:cc:c0:60:6b:03:a9:a3:c6:b4:96:60:63:
89:aa:39:88:a3:c6:7a:8b:39:51:4c:ec:62:e0:52:
f9:92:81:c2:4b:b3:62:d0:42:1f:3a:ff:3c:81:fa:
7d:c9:ca:65:a5:7d:39:88:ab:c7:a2:6c:46:a8:13:
09:68:54:ec:cb:dd:ea:db:f9:ec:ac:c2:1b:b1:60:
ac:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:10:81:1E:55:F8:42:1D:8F:28:9E:96:FE:89:B4:E4:FB:81:F0:7B
X509v3 Authority Key Identifier:
keyid:D3:ED:A7:DF:05:F6:DB:A0:9E:39:E7:D4:BD:EC:7B:AE:0E:FF:BA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f9:92:87:77:10:15:fb:42:cb:9f:42:51:62:d9:bb:34:3c:
c3:4f:0f:b1:17:94:9d:1a:10:a5:15:87:e3:bd:fe:cc:54:b1:
7f:96:ec:42:52:24:d8:78:34:1d:31:11:e3:ff:1d:a3:0e:5c:
a2:a4:24:d8:49:a6:61:42:5c:79:cc:44:90:20:b5:be:e1:c5:
6b:8a:cd:fd:35:97:fe:0f:f0:81:1d:15:35:73:29:9d:9c:ad:
37:5a:c6:23:db:55:f9:21:d0:d6:f7:bd:eb:04:93:34:d5:8a:
61:7c:c2:df:a1:46:94:94:04:1a:d4:f9:ea:fa:e2:9c:bb:88:
62:b9:49:dc:a9:64:5a:0b:3f:a8:e5:e5:99:69:ba:06:de:17:
b6:af:b3:09:a5:96:ad:66:e9:03:b4:75:8d:80:9d:02:e7:03:
31:c8:4b:19:c5:32:54:af:57:f3:d7:a1:70:94:e2:4f:52:30:
59:d4:b0:b4:e5:c2:46:26:5b:40:1c:f7:85:a9:3a:56:95:d5:
f3:a1:01:aa:41:b2:d4:fa:f4:43:8e:0c:cc:f3:60:09:1b:8d:
d3:be:0a:15:1a:b3:c3:1c:96:b6:6b:34:49:29:6a:c6:e2:12:
f2:fc:ac:13:eb:5f:e2:b0:42:e3:28:4d:54:7d:4e:4d:7e:99:
43:88:6d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:34:01 2026 by rpki-client