Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/bb0509-4e3b-410b-91a0-f46c5640bdcf/1/0D5xe7-QcTgk6mJxktXgJOqB2uk.mft
File: 0D5xe7-QcTgk6mJxktXgJOqB2uk.mft (raw, json)
Hash identifier: ddt17gfDNi5t0vVHYvbjricdSTokqdEu83Tl3bGESic=
Subject key identifier: 8F:02:08:08:7F:5E:F4:F1:F6:59:15:7F:CB:E2:33:B4:C7:73:B4:36
Authority key identifier: D0:3E:71:7B:BF:90:71:38:24:EA:62:71:92:D5:E0:24:EA:81:DA:E9
Certificate issuer: /CN=d03e717bbf90713824ea627192d5e024ea81dae9
Certificate serial: 01A03F72D9B3F31AAE9380430B2ABD542E40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0D5xe7-QcTgk6mJxktXgJOqB2uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/bb0509-4e3b-410b-91a0-f46c5640bdcf/1/0D5xe7-QcTgk6mJxktXgJOqB2uk.mft
Manifest number: 4D
Signing time: Wed 26 Aug 2026 19:01:26 +0000
Manifest this update: Wed 26 Aug 2026 19:01:26 +0000
Manifest next update: Thu 27 Aug 2026 19:01:26 +0000
Files and hashes: 1: 0D5xe7-QcTgk6mJxktXgJOqB2uk.crl (hash: j3Tnv9V+4Kt1Io2sl3M1klQLoT6vy8GTeQayAjAXURA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/bb0509-4e3b-410b-91a0-f46c5640bdcf/1/0D5xe7-QcTgk6mJxktXgJOqB2uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/bb0509-4e3b-410b-91a0-f46c5640bdcf/1/0D5xe7-QcTgk6mJxktXgJOqB2uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0D5xe7-QcTgk6mJxktXgJOqB2uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 19:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:72:d9:b3:f3:1a:ae:93:80:43:0b:2a:bd:54:2e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d03e717bbf90713824ea627192d5e024ea81dae9
Validity
Not Before: Aug 26 19:01:26 2026 GMT
Not After : Aug 27 19:01:26 2026 GMT
Subject: CN=8f0208087f5ef4f1f659157fcbe233b4c773b436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0f:64:1b:10:fb:dc:3f:45:13:55:d2:70:9f:
66:09:e9:7d:d8:30:09:51:10:2b:0d:5f:8a:0c:f5:
57:83:a1:2c:68:67:0c:c5:d5:7d:5f:b1:79:87:5f:
17:14:ae:bd:09:fc:b1:8f:1c:cd:c2:a7:5e:89:8a:
e4:36:66:43:65:47:e2:67:bb:dc:35:39:0a:5f:9d:
03:7f:5e:07:54:c7:1e:ce:82:34:43:d6:a3:9d:3c:
54:9a:da:48:c3:20:79:a7:60:7a:d5:5d:32:52:bc:
37:a9:36:a7:2f:4d:c4:0e:38:16:c8:60:05:1d:c9:
b3:d4:d5:07:70:29:fb:94:0f:cd:ba:8c:d2:5f:dc:
59:77:fa:1d:15:fa:2a:93:e8:a8:44:ad:2b:46:36:
87:ff:b6:0d:62:d2:00:20:24:ef:c3:93:16:d5:2d:
9d:7d:c7:50:75:79:29:50:a2:9d:44:2e:a8:5a:13:
c8:d2:0b:bf:c8:4a:ca:6c:06:77:c4:87:e9:12:66:
36:20:3c:9b:5f:3b:ef:6f:c6:a3:2d:d0:61:98:ab:
a5:00:92:99:6f:91:2b:aa:b0:c7:a6:58:35:8b:93:
bf:cb:7a:a9:81:86:2c:a2:df:a6:07:a5:94:5a:e3:
14:1e:96:4d:38:c5:0b:64:fe:45:4d:93:4d:87:5e:
b5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:02:08:08:7F:5E:F4:F1:F6:59:15:7F:CB:E2:33:B4:C7:73:B4:36
X509v3 Authority Key Identifier:
keyid:D0:3E:71:7B:BF:90:71:38:24:EA:62:71:92:D5:E0:24:EA:81:DA:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0D5xe7-QcTgk6mJxktXgJOqB2uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/bb0509-4e3b-410b-91a0-f46c5640bdcf/1/0D5xe7-QcTgk6mJxktXgJOqB2uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/bb0509-4e3b-410b-91a0-f46c5640bdcf/1/0D5xe7-QcTgk6mJxktXgJOqB2uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:12:f9:16:16:af:8a:2c:4b:8f:62:de:55:78:47:88:ae:60:
9d:0f:dd:87:29:d4:9e:5f:75:00:b7:2f:82:f9:76:d4:17:1d:
b8:ea:de:a6:7c:bb:24:96:7f:ce:1f:6f:07:10:ea:eb:f2:c6:
6e:72:e4:7c:57:ad:fc:78:15:5a:76:8e:36:d2:69:c1:10:16:
0e:b1:a8:b5:a6:73:f0:23:c4:fb:d0:44:85:1b:19:8d:d8:1d:
10:4d:d6:92:d7:d9:97:53:48:bc:7b:81:61:bd:9b:ef:f8:71:
7f:a6:9f:78:d3:85:31:ab:77:d3:1b:48:75:21:89:63:6f:d0:
6e:d3:4f:4c:82:a3:cd:5e:51:8a:ce:f0:5d:6d:18:fb:7c:9f:
61:42:4a:b8:c1:ca:21:ca:dc:9d:8d:90:52:f7:5a:3a:a3:31:
06:3e:1d:8e:85:99:ad:58:40:5d:bf:b9:6d:14:ef:70:1a:95:
b6:4b:9c:5a:3d:4b:3f:e8:c1:ef:e1:04:3c:41:3d:bf:8b:d3:
bf:73:b1:0f:85:8d:bf:d6:5d:60:bf:28:16:f8:5a:af:1a:cf:
ee:80:c0:1e:b1:bd:9c:17:a0:12:c4:a7:52:15:95:d9:0a:bb:
d1:4b:1e:7d:01:1e:29:ba:fd:d4:81:d0:13:b6:56:b0:96:97:
9f:a0:cf:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:50:41 2026 by rpki-client