Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
File: 0RaDXQN3hmIKnp96DjYEmLtlQSc.mft (raw, json)
Hash identifier: APoxZJrbQPW2hvINR7Piphqp6/LckRSbbyX2/tj+k9c=
Subject key identifier: A6:57:18:B2:E2:55:E9:08:A7:22:80:BD:6E:11:FC:06:09:79:59:2C
Authority key identifier: D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
Certificate issuer: /CN=d116835d037786620a9e9f7a0e360498bb654127
Certificate serial: 01A06E02BF5FBB9FAA52B0CDB0AEB0BE700A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
Manifest number: 0E50
Signing time: Fri 04 Sep 2026 20:01:08 +0000
Manifest this update: Fri 04 Sep 2026 20:01:08 +0000
Manifest next update: Sat 05 Sep 2026 20:01:08 +0000
Files and hashes: 1: 0RaDXQN3hmIKnp96DjYEmLtlQSc.crl (hash: UKD80jHel8lnvUiiBPSEwde0FHGnjMC524qwrDMmvwA=)
2: GxXxtmytTeePZFqMmjKewv0phDk.roa (hash: DQNMt4Qmq5pWK/m+65wngsoZgA7+I6etgVuEFLBf9P8=)
3: hrfVvtnK2yUD8q8kqhgwgxBrIWA.roa (hash: knPxWaldCF2NZQN6BPLTcSuiJLTa63/Ehra1OYIbZUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:02:bf:5f:bb:9f:aa:52:b0:cd:b0:ae:b0:be:70:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d116835d037786620a9e9f7a0e360498bb654127
Validity
Not Before: Sep 4 20:01:08 2026 GMT
Not After : Sep 5 20:01:08 2026 GMT
Subject: CN=a65718b2e255e908a72280bd6e11fc060979592c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dc:f3:8a:ee:0f:d1:f4:e5:c2:15:50:6e:72:
a3:ad:a8:da:7c:6d:ad:e9:1e:8e:eb:f0:2a:e2:64:
61:f3:0d:55:b2:ae:59:a4:f1:e6:b4:ac:e3:81:8d:
b4:94:cc:af:98:76:6c:ac:ee:70:8a:97:60:97:54:
d0:fa:10:13:02:89:e8:6f:5a:63:dc:ef:d9:da:6b:
08:b8:ff:7e:7b:d6:ad:2f:a8:de:7b:0b:13:de:1a:
32:c2:7b:6e:e1:7e:57:fb:b2:e7:bf:bc:c7:25:9a:
8c:bc:ba:02:bd:54:4d:96:5a:af:4c:8e:7f:d4:f5:
6c:0e:74:f9:56:6a:71:fe:37:38:71:d8:00:bc:7e:
7e:b0:e2:7e:7a:f6:2d:f8:b6:9a:e2:45:7e:46:3f:
23:5a:53:dc:4b:49:34:9f:6d:c1:c0:02:af:c0:26:
4e:d3:49:75:cb:50:eb:1c:13:36:02:66:96:81:38:
1d:b3:22:03:e1:2e:0e:0c:ac:87:ac:48:35:f4:b1:
8d:65:8f:c5:2b:3d:58:cd:05:35:39:f6:1b:51:2d:
d1:0e:d6:29:9f:cd:ac:b0:45:94:ee:b5:31:7d:22:
88:94:f3:95:07:17:5a:59:6b:4f:02:c6:1f:c0:38:
96:3d:87:05:52:eb:54:e6:b1:1e:f6:02:d4:1e:cd:
71:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:57:18:B2:E2:55:E9:08:A7:22:80:BD:6E:11:FC:06:09:79:59:2C
X509v3 Authority Key Identifier:
keyid:D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:fa:17:19:96:17:58:f1:ec:b8:e4:db:38:84:af:90:50:9b:
65:84:20:1a:02:5e:12:dd:65:6d:71:56:c7:0a:09:96:ef:14:
c5:78:e9:12:e3:d3:24:44:9f:c3:bb:16:19:6c:16:58:7a:a7:
de:b9:64:b5:f6:22:b0:05:ae:80:b8:54:72:81:3e:11:82:95:
f5:2a:fd:ee:17:af:b2:94:ef:d2:da:3d:ab:29:b6:3b:68:1f:
0a:6b:5c:74:f4:7d:da:b2:ca:64:d4:2e:61:33:18:f3:e8:55:
b9:fa:4f:37:7f:79:74:6b:54:96:15:c8:20:14:94:1b:2f:a9:
65:f7:5e:8f:20:ea:15:e7:f1:90:1f:fd:a7:a8:26:75:cf:39:
cd:18:1e:d7:bd:dc:f4:51:6f:cb:f4:b7:6e:08:3b:6b:1d:12:
55:a4:70:e7:7d:9c:a0:6d:3b:b8:8e:23:13:0a:64:7f:27:f1:
38:be:ab:02:70:66:cf:de:a7:0f:f4:c5:3e:4b:7c:7e:85:78:
76:69:4e:66:c1:f8:1c:f5:d9:ef:b8:b5:29:b0:cd:84:00:58:
fb:d3:da:4a:37:28:82:50:d3:8f:4f:75:4a:72:a5:17:d3:4d:
8e:3c:96:0b:d8:eb:13:fb:db:5f:a0:57:20:e5:dc:6c:71:2e:
17:4b:a5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:23:32 2026 by rpki-client