Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
File: 0u9GpBNBlOckI9VyobZtSp0uTBM.mft (raw, json)
Hash identifier: fU9im8pttADFcYoB4PSVrN1Npg7fv1Bd73MLoKUDMM0=
Subject key identifier: 4A:76:71:DA:FD:78:86:2E:9E:C1:79:C4:BD:ED:EF:B2:EB:32:97:21
Authority key identifier: D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13
Certificate issuer: /CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13
Certificate serial: 01A14CF47144486B6C22AB9A15756D304ED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
Manifest number: 17EE
Signing time: Sun 18 Oct 2026 03:00:50 +0000
Manifest this update: Sun 18 Oct 2026 03:00:50 +0000
Manifest next update: Mon 19 Oct 2026 03:00:50 +0000
Files and hashes: 1: 0u9GpBNBlOckI9VyobZtSp0uTBM.crl (hash: m/8uxJ/1poVDpMew2/kwNG0ihPQaDU7zT38f/YZ9Ew4=)
2: _1jwukIhOCi8MpxTLw5Kv601c_s.roa (hash: 0/3KAxQZwAWnmzvMwd4pIg6xUGZxILgfs+mT+10r3v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:f4:71:44:48:6b:6c:22:ab:9a:15:75:6d:30:4e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13
Validity
Not Before: Oct 18 03:00:50 2026 GMT
Not After : Oct 19 03:00:50 2026 GMT
Subject: CN=4a7671dafd78862e9ec179c4bdedefb2eb329721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:34:0b:ee:e1:05:6c:f9:29:e0:13:54:d1:af:
fa:9b:46:d4:7a:fb:a0:8d:25:94:d6:7d:4f:79:aa:
8c:a7:81:f6:d7:35:09:5f:23:47:6b:91:b7:b4:76:
b2:9e:83:ad:91:9f:b2:e2:c7:9c:42:59:29:d3:a2:
82:23:17:12:71:6a:7b:0b:62:4a:8e:82:5a:d6:79:
b9:14:81:61:77:0e:2c:ad:22:1c:cd:f1:0f:91:9c:
2d:6f:04:e9:8c:70:59:14:8a:6d:ba:a3:7c:aa:38:
2c:c0:31:6d:d3:c3:36:7a:64:d1:e5:6a:f0:d0:4a:
80:3d:65:de:05:76:3a:d2:dc:39:bb:82:0f:ef:a5:
c7:04:7f:fc:26:f2:c0:7d:ca:48:22:22:0b:9d:3c:
3c:1e:e5:60:f5:1c:15:e0:79:33:70:8a:74:ef:2a:
2c:45:5a:db:fc:7e:6b:34:49:21:ca:98:c1:fe:e0:
16:8e:54:d7:05:d8:3a:68:85:8c:81:9a:d8:b5:5d:
df:a4:01:c4:5f:6a:a0:0f:f3:f3:b0:1c:e6:24:25:
80:6e:bc:18:6c:16:ba:48:17:a9:fe:49:f2:4b:3f:
4c:44:be:24:f2:94:56:aa:c1:ef:1f:ef:77:e1:0c:
85:b1:66:7c:d1:69:9c:a7:0d:2b:99:33:d4:1a:09:
2e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:76:71:DA:FD:78:86:2E:9E:C1:79:C4:BD:ED:EF:B2:EB:32:97:21
X509v3 Authority Key Identifier:
keyid:D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:62:a0:9f:5c:ee:24:97:f1:33:29:52:69:ee:02:77:fe:7f:
9e:30:64:6f:a2:4f:a1:cf:4d:fc:81:74:7c:37:05:82:43:5d:
d5:72:f6:83:0a:d4:d5:94:9a:f0:d2:48:ce:08:6d:4c:7d:eb:
a7:17:45:cc:ef:ea:06:04:4d:22:94:7c:ce:8c:2d:f3:16:bf:
4c:a0:4a:2f:48:15:b4:03:03:a5:b7:6a:4c:a4:77:20:4f:93:
95:f8:67:ba:75:4a:85:56:f2:6d:5d:87:0c:be:f9:03:75:c6:
fc:ad:67:2b:b2:21:e2:4d:87:2d:0a:51:89:74:0b:98:ec:b1:
58:65:34:61:45:71:3e:63:bd:43:52:30:2f:c4:2e:e5:a4:fb:
9b:0e:52:d0:c1:41:51:d8:be:68:1e:3b:6e:d1:87:3c:c5:f7:
c5:aa:0d:bf:8a:a1:7d:eb:d8:8f:b3:a4:d7:10:0b:29:f3:21:
11:4c:84:7a:f1:c3:64:b2:cd:de:e4:eb:65:c0:7b:6f:76:03:
b7:fd:3c:a1:7f:6e:90:9f:4c:8a:bd:44:8d:90:1f:4b:9e:0a:
3f:08:69:11:58:35:09:9a:61:7e:24:e7:0e:ac:f3:23:5c:fc:
88:e6:e8:90:43:a5:6a:b4:06:b3:40:0f:a7:5a:83:87:cb:bb:
f1:88:04:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 11:33:29 2026 by rpki-client