Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
File: rd0qgVBgqn5iGiCUNJdYsgNolvA.mft (raw, json)
Hash identifier: uCmoA5EDnS6OxQ+pLaISH9UnG3+d4ndfDLZ+/80ubvo=
Subject key identifier: D2:A1:8A:1A:96:A2:54:94:E9:D7:C5:B2:FB:93:11:60:47:27:32:49
Authority key identifier: AD:DD:2A:81:50:60:AA:7E:62:1A:20:94:34:97:58:B2:03:68:96:F0
Certificate issuer: /CN=addd2a815060aa7e621a2094349758b2036896f0
Certificate serial: 01A0889ED9F45E6193F63FCBCF7A243BCF6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
Manifest number: 06A2
Signing time: Thu 10 Sep 2026 00:01:46 +0000
Manifest this update: Thu 10 Sep 2026 00:01:46 +0000
Manifest next update: Fri 11 Sep 2026 00:01:46 +0000
Files and hashes: 1: Mw3ACAhcMDXBuRq_X19P75n7CqI.roa (hash: 0uTqpS4C1XoKrdQcU5VVh2z78vf6LmyT+JyUmMpcNqg=)
2: dw0pzmkTaZts4fybHtDLSMI8pwU.roa (hash: POq13Xf4ByDXuaJoDtQFN2IdIJQyKKVS8tZJvFhZ98Q=)
3: pgBIs-3GoZthMmbw9U-r3itRgXQ.roa (hash: +p2wOZUmpgnrYwvX+umOGcelDbIr/AvBcaa1sjakkaA=)
4: rd0qgVBgqn5iGiCUNJdYsgNolvA.crl (hash: cLhtjyDIEK5EXtMuhG7ZlrbmICGJ90HJBUUqQkJ/DRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:9e:d9:f4:5e:61:93:f6:3f:cb:cf:7a:24:3b:cf:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=addd2a815060aa7e621a2094349758b2036896f0
Validity
Not Before: Sep 10 00:01:46 2026 GMT
Not After : Sep 11 00:01:46 2026 GMT
Subject: CN=d2a18a1a96a25494e9d7c5b2fb93116047273249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3c:57:44:f1:68:d5:14:ca:5f:af:42:83:8e:
a5:a1:d2:75:5b:3b:e4:30:37:f7:b0:5e:43:b4:dd:
1a:48:d7:12:d8:16:65:23:ad:62:89:b1:f8:7e:65:
06:f1:44:31:98:2d:73:a4:da:a4:fd:af:0e:68:92:
90:4c:0c:a2:69:0a:86:b7:03:77:97:50:a9:8a:9b:
53:6a:f7:bf:30:49:2d:4b:e8:2e:a4:56:2e:fa:e8:
1e:74:2c:f3:62:6c:42:7a:3e:f7:6c:c7:32:4a:f5:
be:ea:b3:27:84:0a:1b:f0:c8:e2:c6:67:00:56:fa:
34:16:4e:46:02:8c:6e:a5:9e:a6:2e:d3:9b:d7:b6:
79:9e:40:5c:a3:66:9f:72:4b:73:62:a1:ac:6c:50:
06:5b:79:cc:25:bc:41:ad:6c:3a:d4:ca:b5:25:25:
46:bf:c2:28:74:03:88:21:36:43:20:9c:71:81:b5:
3a:7d:6b:a0:93:a1:58:ac:31:81:89:4a:c1:5d:65:
64:9e:f1:6e:6a:bd:8b:77:9c:24:79:9a:c0:a1:6f:
ab:1e:89:fb:8a:29:2b:25:40:69:e3:d5:e4:ef:b2:
9e:ab:dd:0e:8c:c3:d9:6a:3d:79:a5:c0:33:4e:20:
a6:03:6c:7d:86:ef:97:c4:cd:ef:b4:fb:56:94:73:
5c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A1:8A:1A:96:A2:54:94:E9:D7:C5:B2:FB:93:11:60:47:27:32:49
X509v3 Authority Key Identifier:
keyid:AD:DD:2A:81:50:60:AA:7E:62:1A:20:94:34:97:58:B2:03:68:96:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:91:46:3a:0e:a9:25:91:90:c0:0c:6c:85:0d:1c:d0:46:ec:
35:6a:a5:fc:7b:72:9f:18:b7:71:ac:df:65:20:74:23:2c:35:
f8:d4:fc:15:93:d3:2e:c1:5a:27:c3:c7:43:5c:48:90:88:9d:
4b:63:b0:ad:b0:c3:12:c9:bc:0b:3e:a8:b3:42:a1:37:a3:12:
31:4e:33:e3:c9:cd:bf:34:70:4c:ca:0c:93:85:ed:7c:60:f9:
28:76:0d:f7:57:28:a9:ca:6b:76:e8:d9:5e:0a:c3:fa:6f:4f:
06:92:bf:cd:22:47:3b:e3:2a:ce:be:e1:6a:51:78:5a:18:82:
fa:23:7f:1c:76:d0:9f:d2:2e:29:fe:84:25:4c:04:8e:28:24:
b8:4b:ca:a9:46:88:30:56:cc:cd:68:1c:14:c0:c3:ae:03:26:
bb:ec:51:50:4a:97:8d:8f:89:80:32:00:c2:7f:ff:2d:14:ee:
1a:49:cd:3f:21:42:f0:b9:e7:3b:53:7e:a3:39:6f:65:6c:dd:
b2:6a:32:fb:23:db:37:ab:1c:fe:a8:c6:ca:31:ff:4f:af:69:
ce:f1:d3:5c:a1:2f:c7:6b:1a:80:f6:50:a6:b5:89:cb:58:4d:
80:b9:f9:03:4a:93:2a:c4:ed:d5:2e:a9:f4:e4:b6:a3:8b:1e:
b2:88:9a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:43:18 2026 by rpki-client