Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft
File: 0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft (raw, json)
Hash identifier: 5ZzRAtETvuF1Xg5CDO56p+W16mc/3vhfaUpC5K6x9Ls=
Subject key identifier: A3:17:00:32:81:AC:DA:3F:63:61:B4:CE:12:2B:76:D1:25:57:40:D9
Authority key identifier: D1:0C:88:D8:2D:2F:AC:82:20:3D:42:A2:42:D6:EB:76:3D:13:BB:F8
Certificate issuer: /CN=d10c88d82d2fac82203d42a242d6eb763d13bbf8
Certificate serial: 01A001011CA1E26BF1A285908AE3B40253A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 16:00:45 +0000
Manifest this update: Fri 14 Aug 2026 16:00:45 +0000
Manifest next update: Sat 15 Aug 2026 16:00:45 +0000
Files and hashes: 1: 0QyI2C0vrIIgPUKiQtbrdj0Tu_g.crl (hash: lHjfoV2XUmI2lchtkr8Y7ehsWtHfqIDkTMwYArXgg4Q=)
2: spphO4hOBArOq2uvlMH_udCd6UY.roa (hash: lnnK0oGEj0iFi7KFhOVFgJ9Aw/tzmzgnPmc7SqloDLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:1c:a1:e2:6b:f1:a2:85:90:8a:e3:b4:02:53:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d10c88d82d2fac82203d42a242d6eb763d13bbf8
Validity
Not Before: Aug 14 16:00:45 2026 GMT
Not After : Aug 15 16:00:45 2026 GMT
Subject: CN=a317003281acda3f6361b4ce122b76d1255740d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:96:ee:07:0b:8a:1b:16:b3:94:d1:eb:b1:bf:
ba:e0:d7:b4:e4:ba:72:0a:dd:7b:18:d4:11:9e:1a:
2e:a1:16:78:ba:b9:a0:35:b7:61:84:3b:50:35:c5:
9c:f2:d4:e1:73:e8:2b:d2:f3:0d:a0:e7:e4:6a:ea:
66:ba:e8:09:92:30:17:b8:34:6f:42:05:94:b1:50:
49:a4:4d:a7:e3:3b:88:50:1b:1d:05:5d:56:c1:15:
3f:06:ac:df:61:a0:a6:57:2e:fe:8d:c5:9e:74:53:
39:26:f7:32:e9:0b:22:9b:da:f8:82:4c:91:f2:6a:
a8:d4:62:28:27:ae:55:52:3c:8d:1e:60:1d:72:34:
b5:75:81:23:2c:c1:55:7e:40:ad:13:a0:bb:4f:48:
d8:ad:f1:a3:83:bc:92:54:ec:5f:64:b9:29:26:84:
c8:02:9e:61:2e:8f:50:50:ab:59:c2:3d:de:b9:09:
2b:89:3b:d3:56:c0:95:a7:bf:83:a2:2e:13:47:a0:
de:3e:24:41:0d:ca:27:5c:a7:a0:2e:7f:48:60:5e:
38:87:4c:ea:fb:ad:c0:4d:47:70:87:37:d5:34:86:
83:ba:f1:bc:51:46:f8:da:cc:ac:d9:f5:d6:5b:cf:
c5:16:b9:3f:db:94:ee:6d:e7:2d:28:ee:7c:d2:c0:
a4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:17:00:32:81:AC:DA:3F:63:61:B4:CE:12:2B:76:D1:25:57:40:D9
X509v3 Authority Key Identifier:
keyid:D1:0C:88:D8:2D:2F:AC:82:20:3D:42:A2:42:D6:EB:76:3D:13:BB:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:5a:3d:a6:96:01:ba:29:d7:2d:b7:bd:92:bc:0f:f4:6e:66:
92:93:44:36:fd:cc:75:d8:4e:60:60:fb:f8:82:01:06:41:3f:
87:3b:97:71:df:20:25:6f:d5:b8:c1:5f:b9:42:44:a0:c9:c2:
18:73:39:c6:3b:4a:84:c3:3c:c4:93:d2:e8:53:36:9f:e6:d4:
b4:22:02:c5:04:67:f2:88:a8:af:c1:9f:3d:31:a7:7d:46:7f:
44:14:f3:86:cb:fe:f7:74:9f:a5:34:44:e2:b5:7c:06:bf:d2:
b4:f8:40:11:5b:b7:19:93:9b:3d:bd:03:14:52:63:2a:6f:f5:
fe:79:5b:17:3f:15:64:0d:db:d9:e6:76:32:d8:ec:5f:13:8e:
40:ed:ee:1f:ef:f1:66:fe:3f:0f:ec:7b:34:00:53:ab:c9:39:
03:d0:e8:4d:8f:23:62:09:2e:3e:5c:11:46:36:fa:04:dc:2d:
1a:d0:a9:d9:09:d2:97:16:da:f9:45:2a:dd:3a:1b:44:ae:df:
70:f1:c1:49:ab:aa:5b:d8:53:da:a4:37:5d:25:65:59:4f:6b:
5f:3f:94:c2:17:ef:c2:41:59:d0:c1:da:56:c8:bc:31:59:04:
ed:6a:43:67:59:d3:74:f0:cf:0c:12:fe:d5:89:5b:91:a8:90:
8a:89:4c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:39:38 2026 by rpki-client