Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
File: 0RaDXQN3hmIKnp96DjYEmLtlQSc.mft (raw, json)
Hash identifier: xpgLzMmqRlAIkHoT5tEnFEBVGtfkPyR2CLQ2BWKKBoo=
Subject key identifier: FF:C2:A2:E8:20:08:63:57:A9:E8:1A:5E:6C:DB:1D:74:A5:79:1B:04
Authority key identifier: D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
Certificate issuer: /CN=d116835d037786620a9e9f7a0e360498bb654127
Certificate serial: 01A165340938A839573B4C76B3BD37E639F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
Manifest number: 0ED0
Signing time: Thu 22 Oct 2026 20:01:11 +0000
Manifest this update: Thu 22 Oct 2026 20:01:11 +0000
Manifest next update: Fri 23 Oct 2026 20:01:11 +0000
Files and hashes: 1: 0RaDXQN3hmIKnp96DjYEmLtlQSc.crl (hash: MQDetXQw6aR+15uAJyxSFHVrVUCJ5Bovi1bTDMp+AeQ=)
2: GxXxtmytTeePZFqMmjKewv0phDk.roa (hash: DQNMt4Qmq5pWK/m+65wngsoZgA7+I6etgVuEFLBf9P8=)
3: hrfVvtnK2yUD8q8kqhgwgxBrIWA.roa (hash: knPxWaldCF2NZQN6BPLTcSuiJLTa63/Ehra1OYIbZUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 19:43:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:65:34:09:38:a8:39:57:3b:4c:76:b3:bd:37:e6:39:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d116835d037786620a9e9f7a0e360498bb654127
Validity
Not Before: Oct 22 20:01:11 2026 GMT
Not After : Oct 23 20:01:11 2026 GMT
Subject: CN=ffc2a2e820086357a9e81a5e6cdb1d74a5791b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:86:23:d0:07:68:60:7a:c9:67:41:d9:0d:43:
aa:7e:91:b9:6d:c3:93:22:76:66:7a:c6:54:5c:4f:
a7:0b:2a:7f:fd:0e:b8:ff:14:33:93:f7:8b:6c:4a:
c0:d7:73:4d:78:07:66:2d:f4:f1:f1:70:b2:5f:b2:
3d:ad:a6:56:11:65:f3:a5:26:56:f8:1c:b1:48:a4:
b5:93:b8:1d:44:d8:de:6e:ae:99:76:62:b1:1b:6c:
83:44:06:cb:1e:b3:37:68:aa:e4:2f:db:70:8c:77:
56:9f:1b:26:05:5d:7e:32:fc:98:7c:c4:32:96:48:
69:57:7d:e9:8f:49:26:07:4a:97:b9:f2:36:e8:41:
33:14:c4:b1:41:79:68:4e:d5:b1:8a:24:af:a6:e7:
fc:87:86:27:12:39:d6:f5:83:70:63:09:ea:5e:82:
c1:ca:76:ac:a8:d9:e3:9d:cb:93:67:f6:b6:b1:4b:
16:95:e6:33:ca:cb:7a:66:67:de:04:df:d0:aa:ad:
ed:50:9e:f9:f8:2b:2d:57:6c:29:d7:b5:8b:d6:f3:
73:b4:19:dd:5b:1d:da:50:a9:eb:c1:52:4c:e1:5b:
39:51:10:e6:df:e0:ec:d0:0c:1c:cb:a6:b0:f5:3c:
30:63:3b:bf:1d:f4:24:59:f0:a6:9b:b0:4b:77:80:
2f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C2:A2:E8:20:08:63:57:A9:E8:1A:5E:6C:DB:1D:74:A5:79:1B:04
X509v3 Authority Key Identifier:
keyid:D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:f8:17:61:b8:64:9b:72:49:4d:50:77:e8:d4:fa:ac:35:f7:
66:16:51:f0:b4:4c:9a:dc:0c:c2:6d:7b:e0:3d:5e:6e:90:82:
f6:92:59:08:a1:af:ad:1c:57:30:84:51:60:8f:71:83:91:67:
3a:23:fa:41:f1:ea:5d:57:0c:16:90:12:2f:ab:fd:4c:54:ea:
cf:dc:99:8a:2f:2c:20:87:db:70:d5:42:36:e1:07:07:1d:61:
b2:85:cd:a9:ad:fd:84:42:7d:64:cf:8f:24:c3:04:11:a1:d3:
dd:52:59:07:d6:ee:45:2a:be:10:f5:a9:ee:3a:b0:44:da:da:
5e:4d:a3:c6:78:c6:23:61:93:a5:1d:23:22:8a:70:48:81:2c:
8a:3d:f4:65:0b:93:d1:f9:eb:65:e9:35:fe:ac:e8:70:17:ba:
9f:d1:5b:05:bd:ae:fa:a5:12:b6:8e:14:ac:aa:e4:12:16:e6:
36:ff:d8:fe:d2:61:86:97:bd:52:00:73:f3:c8:b3:19:43:fd:
75:ef:68:2d:28:f2:8e:69:27:6b:66:2c:36:d5:a9:4f:3a:3a:
1b:ea:da:c2:27:37:13:37:90:49:35:8d:cf:44:13:df:11:2e:
82:ba:e9:95:41:83:59:68:7f:31:5f:c1:e9:ea:da:53:1f:d6:
dd:93:e4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 04:48:25 2026 by rpki-client