Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
File: 0RaDXQN3hmIKnp96DjYEmLtlQSc.mft (raw, json)
Hash identifier: 9tdg+pyWBV47Bfy/YizWKQQxYH2BUuwfvsom94o88F8=
Subject key identifier: F9:D1:C0:EE:3A:AE:4C:0F:F2:AB:C7:43:8F:AB:6F:53:E1:65:C5:48
Authority key identifier: D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
Certificate issuer: /CN=d116835d037786620a9e9f7a0e360498bb654127
Certificate serial: 01A16AFEBEA4887ECB45EA16B58B8B7BBC89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
Manifest number: 0ED3
Signing time: Fri 23 Oct 2026 23:00:42 +0000
Manifest this update: Fri 23 Oct 2026 23:00:42 +0000
Manifest next update: Sat 24 Oct 2026 23:00:42 +0000
Files and hashes: 1: 0RaDXQN3hmIKnp96DjYEmLtlQSc.crl (hash: V0fxx5AR3wKgLG0FKI2iLjrMVDlVT+LKdfXJcHuuybY=)
2: GxXxtmytTeePZFqMmjKewv0phDk.roa (hash: DQNMt4Qmq5pWK/m+65wngsoZgA7+I6etgVuEFLBf9P8=)
3: hrfVvtnK2yUD8q8kqhgwgxBrIWA.roa (hash: knPxWaldCF2NZQN6BPLTcSuiJLTa63/Ehra1OYIbZUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:fe:be:a4:88:7e:cb:45:ea:16:b5:8b:8b:7b:bc:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d116835d037786620a9e9f7a0e360498bb654127
Validity
Not Before: Oct 23 23:00:42 2026 GMT
Not After : Oct 24 23:00:42 2026 GMT
Subject: CN=f9d1c0ee3aae4c0ff2abc7438fab6f53e165c548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:89:48:cd:94:a6:0a:12:57:c4:c1:1d:9c:85:
ef:18:ea:ce:2c:59:27:1e:f0:89:3d:6a:cc:a8:70:
d0:9d:3c:2f:bc:4d:71:8a:d4:19:5f:bb:74:01:99:
b0:1d:d1:de:eb:a0:b9:49:fe:5b:25:a1:44:fa:00:
e6:db:42:3a:49:4b:12:9d:84:7c:0d:5c:d8:39:d5:
c8:e0:f5:f4:9d:55:fb:43:39:07:f1:57:3f:7f:69:
b5:03:f7:c8:8e:88:4a:b6:3e:32:bc:24:ad:95:82:
c9:17:28:22:c9:08:57:60:80:65:b6:fc:1d:ad:f6:
a6:8d:e2:f1:00:1e:89:6a:29:d3:fb:7e:0a:7f:c1:
2d:36:0b:7c:4d:5d:aa:e7:98:9b:e2:59:d8:e4:25:
e6:fb:85:b7:ca:c0:27:e5:a9:7c:23:e1:51:e0:be:
5d:6e:b8:23:bd:e6:16:e7:ac:43:f2:88:77:63:44:
68:c2:35:2c:05:00:d9:4d:bd:4f:c3:61:0e:c0:a1:
b7:0b:01:71:9f:7c:e8:14:ba:79:ff:36:7a:cb:84:
bd:e2:0b:ac:bb:e4:41:a5:dd:35:fe:55:99:3b:32:
57:2f:31:c1:66:c1:d1:b2:26:ac:5b:09:64:6f:38:
ca:4e:4b:da:d5:ff:05:1e:63:8a:f4:e6:10:3e:ac:
d8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D1:C0:EE:3A:AE:4C:0F:F2:AB:C7:43:8F:AB:6F:53:E1:65:C5:48
X509v3 Authority Key Identifier:
keyid:D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f9:6e:d8:92:50:21:8e:54:39:40:5b:60:36:42:d1:56:bd:
31:45:52:c0:92:d9:e2:3a:42:07:ef:8b:70:47:87:5e:c8:09:
b7:8f:42:34:20:5c:a4:3c:47:67:6c:f4:86:93:92:5a:b5:df:
98:f9:c0:3e:62:68:94:00:91:1a:2d:dc:69:8b:63:98:8c:0c:
2d:40:4d:83:61:3c:c8:18:e7:3f:20:c5:af:93:5e:11:46:19:
bd:a5:90:27:85:f4:dc:1b:82:f4:f7:08:50:d8:56:5b:a0:87:
14:1d:9f:04:2e:01:1e:4c:77:84:5d:54:cd:47:bc:6a:7e:1f:
25:60:e9:6a:47:12:b5:5d:48:6a:0c:c8:33:fc:f8:09:eb:8d:
f3:d7:fc:26:b4:90:ba:ec:d1:2f:f2:e5:e1:30:da:a6:8f:f5:
1e:10:d4:a2:64:15:a9:d6:55:61:4f:ad:b5:d5:1b:e7:fb:fc:
63:4c:9d:ca:6f:7e:26:c4:79:5e:3b:b1:3b:f1:a4:f4:73:5c:
cc:40:20:0c:ae:90:13:f0:c0:ef:89:c6:9f:09:0b:54:75:f9:
62:51:64:0a:69:3a:bb:99:91:48:ba:00:2d:fa:6c:ab:6b:f0:
eb:48:2f:67:fd:c5:b3:cb:66:15:f2:98:63:51:7a:50:d6:fb:
85:59:5c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:14:27 2026 by rpki-client