Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.mft
File: d0HROhWph91gAZwCZdLs7EhAlEo.mft (raw, json)
Hash identifier: oRo/6SCVKX1RRDH2YggaeLKCYpISQkoPle1kxClykcU=
Subject key identifier: A9:84:31:E4:C0:E1:28:1C:5D:46:03:93:53:7E:B2:F7:86:13:F0:D9
Authority key identifier: 77:41:D1:3A:15:A9:87:DD:60:01:9C:02:65:D2:EC:EC:48:40:94:4A
Certificate issuer: /CN=7741d13a15a987dd60019c0265d2ecec4840944a
Certificate serial: 01A116E1801C53B193ABC8F369511A63688F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0HROhWph91gAZwCZdLs7EhAlEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.mft
Manifest number: 0BA4
Signing time: Wed 07 Oct 2026 15:00:39 +0000
Manifest this update: Wed 07 Oct 2026 15:00:39 +0000
Manifest next update: Thu 08 Oct 2026 15:00:39 +0000
Files and hashes: 1: 2aVju54fgg9bD1JRsSNN37U-9Hk.roa (hash: gQ2ZXX3Kuvxj5T+dbec4hU1fv3yACHxOQmVvGeAb560=)
2: d0HROhWph91gAZwCZdLs7EhAlEo.crl (hash: Z66kVH7JjYgsD7HAPyogp+VeRsnqOONYRuVJ8qNC9p0=)
3: sRYXppUiSNJrW5d1MVXqJ1v0U0g.roa (hash: e8cW0JrKBdNEagEPQSlGciScba5vYX0jEPFos43/Uno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0HROhWph91gAZwCZdLs7EhAlEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 13:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:e1:80:1c:53:b1:93:ab:c8:f3:69:51:1a:63:68:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7741d13a15a987dd60019c0265d2ecec4840944a
Validity
Not Before: Oct 7 15:00:39 2026 GMT
Not After : Oct 8 15:00:39 2026 GMT
Subject: CN=a98431e4c0e1281c5d460393537eb2f78613f0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:90:0e:26:50:67:bc:d3:1c:5c:61:bb:94:02:
5d:03:0e:7c:d7:5c:3e:0d:35:95:02:5f:78:ba:8d:
79:4a:ea:2f:4a:cb:f2:43:43:69:59:16:07:84:90:
73:65:08:91:ba:c3:a6:90:2e:23:ec:35:9f:6d:8d:
37:3b:40:2d:d4:82:59:00:73:5f:d2:2c:24:07:6d:
5e:ee:ab:f7:d2:35:d1:f9:f1:fd:62:02:f2:c9:ba:
8b:c4:1d:8b:0c:f8:21:36:d4:df:e2:43:79:91:3f:
e0:ec:8c:7d:82:3d:72:58:5c:2d:d0:c0:3c:9b:2e:
cc:e7:b0:58:a0:83:ff:fa:62:f2:ce:36:22:aa:1c:
7f:76:89:10:98:7a:32:f9:e3:35:69:5e:da:e7:be:
e4:04:d1:32:97:2e:a3:29:91:5a:c9:8f:31:86:df:
9c:52:00:a3:e1:54:a2:c3:ef:61:0a:e2:3d:8c:4c:
f9:e3:57:49:c8:56:d6:f0:83:8d:5f:d0:fb:6b:5a:
59:f9:70:6f:bb:ff:10:e5:70:21:bf:09:4a:34:03:
c1:82:62:5f:91:dd:67:70:cd:38:25:b0:a0:a2:a5:
62:d9:51:b6:a2:16:12:8e:ce:48:8e:38:30:62:b2:
a1:a4:a4:a7:b1:5c:03:c3:b5:fc:e3:ec:f0:01:c5:
59:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:84:31:E4:C0:E1:28:1C:5D:46:03:93:53:7E:B2:F7:86:13:F0:D9
X509v3 Authority Key Identifier:
keyid:77:41:D1:3A:15:A9:87:DD:60:01:9C:02:65:D2:EC:EC:48:40:94:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0HROhWph91gAZwCZdLs7EhAlEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:a5:28:90:ed:a3:6b:2c:f6:f0:68:bd:1c:60:2a:a0:97:89:
16:f5:4f:a7:39:b6:ca:13:ec:60:b7:f7:e8:df:62:40:34:52:
9b:48:cb:9e:0a:6f:a4:ed:fb:ae:60:b6:89:c2:d8:3b:93:10:
73:04:d3:74:13:1f:cc:11:3d:81:55:e8:4b:b8:6e:49:ca:35:
11:50:39:f5:92:41:cc:19:21:d3:4d:e4:57:f1:9d:e6:82:9c:
5c:38:81:4b:4d:b0:f4:3a:89:60:d4:a6:d5:93:b2:58:93:6f:
03:51:ef:64:23:22:39:53:3b:1f:59:16:9a:4e:22:84:75:a1:
6e:fb:61:b7:60:cd:10:0c:9f:a2:0b:32:c8:27:f6:55:21:c6:
37:04:ca:19:6e:a3:75:71:c9:e1:c0:df:8b:dc:a2:bf:68:e4:
7f:d2:41:9d:78:74:27:00:82:99:2c:da:1f:59:38:76:f6:04:
bb:d0:13:e2:85:c6:4c:24:be:15:ea:9b:fc:bd:f5:13:e5:28:
0b:ac:16:8b:12:ac:15:e8:8c:e6:6f:b5:a1:12:78:d1:8c:07:
c4:08:9a:fe:93:43:a6:1b:d7:a0:7f:2a:d8:07:f1:4f:9a:3f:
8d:62:d2:5d:05:95:94:b0:d6:95:7a:9d:89:fb:61:ba:f3:54:
f5:9a:a2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 00:04:17 2026 by rpki-client