Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft
File: 0dMLd0soDDfhxe1dimnLmvZIsGU.mft (raw, json)
Hash identifier: 8bEcX9FlTGsqMvLMKCl2pHJuQuIV3MOW4+Nzsiq+UHo=
Subject key identifier: 0D:74:D2:48:3A:38:6D:6C:05:1B:C1:3C:9A:B0:A6:87:67:5E:9D:E4
Authority key identifier: D1:D3:0B:77:4B:28:0C:37:E1:C5:ED:5D:8A:69:CB:9A:F6:48:B0:65
Certificate issuer: /CN=d1d30b774b280c37e1c5ed5d8a69cb9af648b065
Certificate serial: 01A119AB789D82143E9D678B84F26C52177C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dMLd0soDDfhxe1dimnLmvZIsGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft
Manifest number: 0EFF
Signing time: Thu 08 Oct 2026 04:00:30 +0000
Manifest this update: Thu 08 Oct 2026 04:00:30 +0000
Manifest next update: Fri 09 Oct 2026 04:00:30 +0000
Files and hashes: 1: 0dMLd0soDDfhxe1dimnLmvZIsGU.crl (hash: fCNz6+dauEYSkLANf1PaBMcLMy6GyDVrQ9uDW5K4nFA=)
2: 4uCW8KDL5eygnSjCYi7-Nukptjw.roa (hash: Lz95AsDo4OKSWuKZICMJRolQCwkNIP0tKUYk7qYQ5RA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dMLd0soDDfhxe1dimnLmvZIsGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:ab:78:9d:82:14:3e:9d:67:8b:84:f2:6c:52:17:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1d30b774b280c37e1c5ed5d8a69cb9af648b065
Validity
Not Before: Oct 8 04:00:30 2026 GMT
Not After : Oct 9 04:00:30 2026 GMT
Subject: CN=0d74d2483a386d6c051bc13c9ab0a687675e9de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:78:a5:7c:e0:7f:da:0a:49:31:55:ba:3a:42:
ca:f6:16:e0:e3:49:7b:c9:a4:33:d2:ee:13:57:59:
42:d6:02:6f:3a:ec:fb:f6:06:0f:fe:65:96:60:16:
7f:b4:83:02:f8:06:a6:63:15:01:ad:15:6f:ef:3a:
c6:ea:fd:bb:3a:1c:54:6b:51:2e:89:80:34:9d:50:
c2:a6:65:98:aa:00:d5:41:4e:2b:1f:4d:74:eb:0d:
6c:8f:26:1d:69:66:d0:f7:44:78:67:96:cb:45:c4:
49:ca:3a:e9:58:21:38:66:7b:fa:cb:1d:08:15:27:
52:d2:78:2d:f6:98:af:23:8f:ff:c2:ac:7e:7b:cd:
26:3a:5a:eb:a1:6a:99:be:47:e0:2a:61:85:d3:c9:
54:3c:e1:33:35:f8:e3:6e:cc:80:d8:b8:8f:83:dd:
b7:78:9a:3c:73:3d:27:30:9e:11:4c:b3:b3:82:ec:
54:17:ea:bc:cf:11:94:f4:16:2e:f3:9b:ed:f0:29:
42:a4:6e:ee:e9:48:08:34:25:97:9d:e6:b4:15:e8:
21:60:57:a5:c3:cb:81:a3:af:58:73:c0:e7:3f:9d:
e3:c9:d2:14:6f:8e:56:de:96:e4:14:4c:82:4d:2f:
99:86:ef:a2:3d:e1:f6:e9:24:41:25:69:3b:45:39:
10:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:74:D2:48:3A:38:6D:6C:05:1B:C1:3C:9A:B0:A6:87:67:5E:9D:E4
X509v3 Authority Key Identifier:
keyid:D1:D3:0B:77:4B:28:0C:37:E1:C5:ED:5D:8A:69:CB:9A:F6:48:B0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dMLd0soDDfhxe1dimnLmvZIsGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:37:d2:46:0f:3e:61:b8:74:41:68:db:b8:21:f2:11:f1:61:
aa:40:4e:33:f9:19:d8:db:84:ac:ec:87:a1:9f:58:49:44:03:
c4:fc:4e:d4:cc:d5:30:98:4b:00:40:ae:26:de:bd:05:5d:57:
01:f9:7e:6b:ce:e6:6f:82:0a:48:17:fd:16:dc:6e:5a:83:a8:
98:ed:7f:bd:fe:c7:ea:13:68:f2:db:a7:ae:00:b1:d0:93:50:
c8:ff:4e:a9:5b:af:76:fb:ca:69:12:de:ca:3e:35:04:f5:bc:
47:96:2b:0c:3d:ff:96:4d:8a:b2:28:21:d0:b5:2a:47:4d:b9:
c3:36:72:d9:ce:67:c8:2d:82:e8:d5:fb:e7:07:71:7a:70:79:
f1:aa:31:1c:ff:bc:95:76:e1:4f:e1:f5:83:3e:59:04:59:5f:
a9:44:a9:52:51:75:53:5f:fd:14:21:4f:5f:b4:2a:00:c9:06:
d2:82:70:c7:11:01:2b:23:45:40:ae:92:be:ef:e1:00:1f:26:
87:fd:53:10:f5:f3:e3:e8:f2:7c:a1:2a:d4:3d:ab:b9:41:41:
53:dd:bc:c7:89:16:1e:86:aa:f3:64:05:a2:04:dc:74:f0:6c:
5a:1d:77:03:71:ea:30:c5:dd:2b:cc:24:aa:b4:ee:96:e0:67:
b3:8e:10:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:56:14 2026 by rpki-client