Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
File: 0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft (raw, json)
Hash identifier: fOg606dOULle8+LU7fWDR2IsFVKrECdig90MM4VFQ0c=
Subject key identifier: 4A:8E:1D:F5:FF:16:CF:FC:A8:A2:DF:EB:4F:1B:55:67:C6:9A:BB:CE
Authority key identifier: D0:F6:B8:43:6F:66:34:CD:31:D7:09:7C:E2:42:A5:49:93:5B:18:D7
Certificate issuer: /CN=d0f6b8436f6634cd31d7097ce242a549935b18d7
Certificate serial: 01A08DFC2DDB42ECE2FB9494AD2EEFAD41B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
Manifest number: 1A1E
Signing time: Fri 11 Sep 2026 01:01:49 +0000
Manifest this update: Fri 11 Sep 2026 01:01:49 +0000
Manifest next update: Sat 12 Sep 2026 01:01:49 +0000
Files and hashes: 1: 0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl (hash: jdYrDR4oq3w8GqqqJ7kLDlngGQIycatZgYEi5d7Ud6U=)
2: 5oT4wQDby08NkKpZXaWKlUX_zBw.roa (hash: UH0KTt9pI8ZDsM/VAmcpjDz5ijVSpSbjaototx0G23E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:fc:2d:db:42:ec:e2:fb:94:94:ad:2e:ef:ad:41:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f6b8436f6634cd31d7097ce242a549935b18d7
Validity
Not Before: Sep 11 01:01:49 2026 GMT
Not After : Sep 12 01:01:49 2026 GMT
Subject: CN=4a8e1df5ff16cffca8a2dfeb4f1b5567c69abbce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:19:8c:85:93:2d:62:33:fe:69:85:e1:f8:b4:
bc:70:35:a0:f2:1a:1b:cc:5b:22:b8:3f:1f:94:54:
5b:0f:bd:7d:8e:b3:70:23:44:40:0e:5d:6b:27:e7:
48:4d:23:be:d9:c8:14:db:ad:0b:9e:2a:0d:a8:5a:
d3:b6:b0:5e:bb:b9:97:07:5b:a2:1d:23:2a:6d:51:
65:ae:32:2d:9f:45:c6:ac:f5:2a:78:00:a5:26:f1:
e3:db:b7:53:4b:0e:b9:aa:83:90:d9:67:2b:ec:b6:
b7:06:82:b3:82:28:e3:76:db:18:3b:7c:2e:5d:da:
0d:78:b3:fb:c7:b8:46:4e:eb:92:69:16:35:e5:21:
6b:60:25:88:28:77:51:47:54:44:73:4a:5e:ec:04:
f6:5e:a5:6c:9e:3c:25:33:11:0e:47:1d:e1:cc:2e:
5a:dc:12:14:39:c9:0d:6f:aa:04:a6:4a:9b:80:49:
b6:94:16:6f:94:29:f7:e7:71:9b:be:95:3c:40:81:
93:f4:5b:ec:08:50:a2:84:dd:ed:89:30:9d:8f:fd:
0b:04:f5:52:8f:15:c7:ba:dc:a8:19:1e:ff:30:43:
dd:13:96:1c:e5:17:26:f4:ac:7a:2f:24:19:2d:bc:
1d:e0:a2:09:4c:a9:ba:11:37:2d:70:be:7b:05:5c:
66:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8E:1D:F5:FF:16:CF:FC:A8:A2:DF:EB:4F:1B:55:67:C6:9A:BB:CE
X509v3 Authority Key Identifier:
keyid:D0:F6:B8:43:6F:66:34:CD:31:D7:09:7C:E2:42:A5:49:93:5B:18:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:98:09:d0:38:0d:de:f1:ce:40:ef:fc:a1:c1:d4:e5:cd:44:
af:fb:b4:2f:b0:e1:ac:b8:4c:2e:b8:9c:5a:74:2b:a0:77:f3:
8e:71:66:33:18:e4:aa:4f:ff:a9:49:4d:f3:34:b9:a8:ff:a2:
29:6a:e9:c0:7f:ee:74:cb:3d:b4:24:50:f4:89:19:15:23:54:
17:97:c7:9e:fd:ec:46:4a:48:56:b7:92:22:8d:04:6e:a4:a7:
45:2f:0d:e7:7b:eb:49:76:f3:3f:02:09:1e:76:11:fa:02:fd:
4b:51:99:dc:54:e0:10:b4:38:0c:d9:87:47:a1:ab:a1:fc:24:
8d:96:a9:47:bb:ab:8b:6b:f2:58:ac:22:27:8b:fe:df:eb:f7:
bf:20:e6:d0:a2:76:54:f2:b0:f4:82:62:45:51:11:7f:1c:cb:
b7:bc:9b:32:d4:6e:6a:93:3e:47:36:82:b0:01:c4:82:93:ab:
49:cd:a8:81:0b:ca:aa:d8:3a:4c:71:25:2a:b4:8d:bd:7a:c7:
7e:98:7b:e8:ea:cc:6c:fb:1b:aa:67:f3:ca:d1:ee:74:6c:65:
8c:d0:52:03:54:b3:27:fe:5a:ad:af:f5:89:26:df:54:5a:8a:
8f:0a:e4:02:c3:5e:c3:a1:af:5d:ef:1a:92:db:d2:3a:5d:5c:
6d:e6:5d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:51:41 2026 by rpki-client