Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
File: 0RaDXQN3hmIKnp96DjYEmLtlQSc.mft (raw, json)
Hash identifier: jGv4wAae9M4XAQCjmHEUx5vH3FbhGSiH4NelYB0h5hM=
Subject key identifier: 5B:08:FB:DB:78:46:65:7E:58:27:DE:14:8C:5F:82:BA:3B:6E:57:B0
Authority key identifier: D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
Certificate issuer: /CN=d116835d037786620a9e9f7a0e360498bb654127
Certificate serial: 01A16156DE7CA9A9625C8FCE2370A14E7209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
Manifest number: 0ECE
Signing time: Thu 22 Oct 2026 02:00:45 +0000
Manifest this update: Thu 22 Oct 2026 02:00:45 +0000
Manifest next update: Fri 23 Oct 2026 02:00:45 +0000
Files and hashes: 1: 0RaDXQN3hmIKnp96DjYEmLtlQSc.crl (hash: Sn/YzvHOFENB8xibonMw5kif1DfUDYzYSrDOC1ZZwVI=)
2: GxXxtmytTeePZFqMmjKewv0phDk.roa (hash: DQNMt4Qmq5pWK/m+65wngsoZgA7+I6etgVuEFLBf9P8=)
3: hrfVvtnK2yUD8q8kqhgwgxBrIWA.roa (hash: knPxWaldCF2NZQN6BPLTcSuiJLTa63/Ehra1OYIbZUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:61:56:de:7c:a9:a9:62:5c:8f:ce:23:70:a1:4e:72:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d116835d037786620a9e9f7a0e360498bb654127
Validity
Not Before: Oct 22 02:00:45 2026 GMT
Not After : Oct 23 02:00:45 2026 GMT
Subject: CN=5b08fbdb7846657e5827de148c5f82ba3b6e57b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:86:bb:6e:09:13:6d:c0:de:b5:66:4e:b9:94:
6b:54:68:44:b9:cd:a1:71:e9:9f:a5:1b:2e:40:24:
ae:7b:c0:8e:64:90:d8:fa:b6:e5:b6:7c:96:9b:6a:
86:0c:6d:76:1e:2c:17:60:14:dd:2b:bc:da:b9:c0:
89:ba:a9:e8:4d:7a:dd:e6:ee:3a:87:25:a4:2f:ac:
1b:67:93:af:60:9a:03:d1:f1:c0:db:8a:29:c6:01:
b3:5d:2d:c0:eb:d3:c9:4a:06:cf:4c:e9:f8:79:32:
ea:42:5f:5e:db:3c:35:54:0d:d6:4c:cf:64:cd:8f:
e5:ba:4d:80:89:75:c7:f1:62:8d:d6:b6:0f:d7:c8:
c8:4c:3d:00:37:26:94:0c:75:c9:2b:42:0a:17:d7:
cd:01:5a:26:2a:80:25:29:54:fb:45:2d:8b:d4:7e:
db:dc:49:da:91:8d:37:ff:dd:5b:ea:58:2a:59:d6:
fd:ac:cd:21:eb:a3:a0:8d:62:a5:8a:85:c8:53:22:
b0:16:ac:d1:40:00:98:69:65:c6:fc:2d:e1:2c:77:
8c:49:9f:6c:aa:79:db:89:90:e4:89:d3:b6:68:52:
45:0c:b0:56:d7:11:31:bd:f2:f4:08:69:0a:61:32:
b6:6b:6f:3f:89:32:f1:61:d9:08:49:0d:8a:12:a5:
3e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:08:FB:DB:78:46:65:7E:58:27:DE:14:8C:5F:82:BA:3B:6E:57:B0
X509v3 Authority Key Identifier:
keyid:D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:bf:40:15:cc:d2:b8:f1:f7:21:9b:5f:21:61:81:53:a1:a5:
ea:6d:8a:8f:3e:52:cd:91:d3:fd:71:40:fc:a8:21:d8:ef:df:
18:25:4c:1d:a3:13:07:c1:25:a0:1b:bf:f6:21:c2:c5:56:ae:
c7:84:14:a1:6f:60:e1:ad:f1:69:74:68:ec:c3:68:9a:35:1b:
e9:6c:01:8b:dc:57:8c:ee:e7:9d:4c:d6:e0:58:9c:82:99:25:
23:5f:69:9c:82:e8:34:c0:6e:c8:88:95:a7:23:b4:57:16:75:
0c:64:b7:7d:39:cc:d6:ab:98:64:e5:34:e4:dd:4a:ad:13:a0:
fe:d7:75:53:48:e5:81:5a:6b:73:1e:01:ce:b3:21:9d:e7:3f:
05:3e:df:bb:45:98:c8:df:d2:ba:c3:b7:23:94:3d:62:80:42:
07:06:05:6b:53:5f:ea:71:f0:a5:06:71:92:de:13:aa:b3:18:
55:30:16:d4:4d:48:9e:86:29:4c:4c:0d:78:f3:9b:a2:54:d6:
93:20:64:25:86:46:73:08:de:6d:62:8e:80:e0:08:11:ad:48:
fd:dd:f3:1c:72:bb:03:ed:a8:21:e2:5f:d2:78:64:a8:21:e0:
f1:23:86:46:3a:80:8f:f6:ba:89:3d:d7:ef:31:c5:e5:b8:4e:
fa:c2:c0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 05:55:23 2026 by rpki-client