Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/217726-2df2-47af-a0ea-d94131da861d/1/0PDiyMFKgktU4AvZR5pIXXG_5HQ.mft
File: 0PDiyMFKgktU4AvZR5pIXXG_5HQ.mft (raw, json)
Hash identifier: hmov8dHRv8H4JC8ANf6SXWhjssV7dWFt1ixVrTRcnzg=
Subject key identifier: CE:36:2F:D2:FA:F5:8A:1B:6C:51:AA:4A:1D:D8:AB:0B:C6:65:CE:0F
Authority key identifier: D0:F0:E2:C8:C1:4A:82:4B:54:E0:0B:D9:47:9A:48:5D:71:BF:E4:74
Certificate issuer: /CN=d0f0e2c8c14a824b54e00bd9479a485d71bfe474
Certificate serial: 01A03F7233A531C42BB7053C8E485667D758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PDiyMFKgktU4AvZR5pIXXG_5HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/217726-2df2-47af-a0ea-d94131da861d/1/0PDiyMFKgktU4AvZR5pIXXG_5HQ.mft
Manifest number: 01DB
Signing time: Wed 26 Aug 2026 19:00:43 +0000
Manifest this update: Wed 26 Aug 2026 19:00:43 +0000
Manifest next update: Thu 27 Aug 2026 19:00:43 +0000
Files and hashes: 1: 0PDiyMFKgktU4AvZR5pIXXG_5HQ.crl (hash: ouzWJqCEm9IagIT9meovqoACZ5HYNbll+STuKAwV0s8=)
2: vz9xDUONTQdNGh2H7pR1j8DJb4U.roa (hash: wQlmjv0wxtwfgnsZbxR6Yv1Bicu90n9KXilxDJKClFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/217726-2df2-47af-a0ea-d94131da861d/1/0PDiyMFKgktU4AvZR5pIXXG_5HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/217726-2df2-47af-a0ea-d94131da861d/1/0PDiyMFKgktU4AvZR5pIXXG_5HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PDiyMFKgktU4AvZR5pIXXG_5HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:72:33:a5:31:c4:2b:b7:05:3c:8e:48:56:67:d7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f0e2c8c14a824b54e00bd9479a485d71bfe474
Validity
Not Before: Aug 26 19:00:43 2026 GMT
Not After : Aug 27 19:00:43 2026 GMT
Subject: CN=ce362fd2faf58a1b6c51aa4a1dd8ab0bc665ce0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:87:b8:c8:45:9a:ec:c7:c9:0a:a8:27:a6:6a:
a9:70:f1:3a:17:86:01:a6:30:56:31:a2:20:f9:ea:
6e:8e:21:02:bb:2a:89:1d:b7:2a:28:bc:c3:c4:1c:
b8:24:8a:98:75:68:a5:fd:c6:96:32:70:95:c6:74:
ed:8d:a9:6c:1b:31:91:8e:da:93:11:49:12:dd:b1:
63:f7:1a:02:b9:b1:aa:5c:61:42:af:fe:65:80:5c:
94:9f:1f:c6:d7:42:93:a2:8e:1c:6d:0a:f7:b3:9b:
b1:31:da:86:55:35:f7:73:79:69:85:6f:0e:36:ae:
2c:1b:b2:7d:f2:8e:1b:aa:d6:b1:89:a7:77:f8:fd:
56:a3:2d:63:a7:54:6b:c0:5d:56:35:ad:3e:04:f1:
9b:d9:5b:75:74:b4:de:d4:bf:d1:f3:d3:73:75:02:
58:0d:78:69:e6:54:23:1f:87:bb:33:ab:02:c7:a7:
ac:dd:b6:3e:3c:07:61:16:a6:81:b7:53:78:3b:94:
5e:93:48:9e:d3:10:15:4a:eb:fa:d0:ac:f3:29:1d:
9c:19:df:e0:26:a4:99:c2:e7:74:5e:5c:6d:3b:f9:
dd:16:a1:c3:c8:ff:ac:e8:2d:ad:e4:bf:aa:82:be:
4e:69:cd:39:ce:89:c3:1a:57:b0:02:ac:bd:10:20:
f9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:36:2F:D2:FA:F5:8A:1B:6C:51:AA:4A:1D:D8:AB:0B:C6:65:CE:0F
X509v3 Authority Key Identifier:
keyid:D0:F0:E2:C8:C1:4A:82:4B:54:E0:0B:D9:47:9A:48:5D:71:BF:E4:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PDiyMFKgktU4AvZR5pIXXG_5HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/217726-2df2-47af-a0ea-d94131da861d/1/0PDiyMFKgktU4AvZR5pIXXG_5HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/217726-2df2-47af-a0ea-d94131da861d/1/0PDiyMFKgktU4AvZR5pIXXG_5HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:47:27:f9:8b:6e:6b:ab:88:12:55:36:eb:c9:e1:30:9f:6e:
2b:f7:2a:99:ca:3b:73:ed:bd:0b:62:ad:39:80:07:ef:27:eb:
63:a0:31:a0:88:35:2c:f8:18:44:5b:8b:d5:9e:7e:cd:78:97:
fb:7a:1d:ad:02:fd:1a:7a:12:20:15:c7:3f:90:6d:ab:8c:3f:
87:27:5a:d1:03:c1:c0:07:c1:67:b1:2c:4f:16:c7:92:a7:a1:
3c:f6:13:6f:a0:16:24:d2:7c:68:36:1a:50:3b:7c:5f:01:f1:
d6:75:ad:50:44:f9:d9:cc:6b:69:a7:d0:1c:87:a4:05:28:72:
ba:29:14:c4:11:35:ac:ce:4b:e0:aa:40:44:db:a6:ed:d2:b1:
92:a2:d0:4f:6c:60:6a:24:04:fd:ba:3b:2b:13:f6:b6:cf:04:
a9:fa:dd:0f:7a:f4:21:b7:70:8d:13:d9:f1:d0:da:ee:fd:54:
0c:28:d0:eb:22:93:12:bf:a9:b7:3f:92:f9:bf:20:de:01:0a:
f2:7f:f5:40:90:7e:07:47:51:8c:17:4e:8d:20:8c:cb:36:4b:
04:65:14:fa:07:68:e5:1e:b5:47:c2:fc:18:84:79:cb:65:80:
a9:4e:87:16:1b:1d:59:7b:e9:ac:71:03:f8:93:d1:03:43:f2:
49:22:76:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:22:29 2026 by rpki-client