Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ce4e9a-7fc0-41f3-b80e-4f6b16ec33a7/1/0PhWqIToYidB9eFo7Hqno95vK8M.mft
File: 0PhWqIToYidB9eFo7Hqno95vK8M.mft (raw, json)
Hash identifier: +3+XqmaFk1vd2ktNurx/fM52viouskYgk0768r0N6GI=
Subject key identifier: BB:1A:C6:17:5B:15:FF:96:FB:9C:D4:32:AF:61:06:91:6C:0F:97:17
Authority key identifier: D0:F8:56:A8:84:E8:62:27:41:F5:E1:68:EC:7A:A7:A3:DE:6F:2B:C3
Certificate issuer: /CN=d0f856a884e8622741f5e168ec7aa7a3de6f2bc3
Certificate serial: 01A02167CB2A95D68A28865EE25472209850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PhWqIToYidB9eFo7Hqno95vK8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ce4e9a-7fc0-41f3-b80e-4f6b16ec33a7/1/0PhWqIToYidB9eFo7Hqno95vK8M.mft
Manifest number: D3
Signing time: Thu 20 Aug 2026 23:00:45 +0000
Manifest this update: Thu 20 Aug 2026 23:00:45 +0000
Manifest next update: Fri 21 Aug 2026 23:00:45 +0000
Files and hashes: 1: 0PhWqIToYidB9eFo7Hqno95vK8M.crl (hash: pSuT2RJs/YP6LVKL5lcltwkwNq/4Yd3o2GnY2ILutik=)
2: 5uwlb6VAMyxIYrxx11L4WCDtq5Q.roa (hash: zVxnrr7NCdH/hFMNNgmxYObL0zm+TgiecARXZu0CtnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ce4e9a-7fc0-41f3-b80e-4f6b16ec33a7/1/0PhWqIToYidB9eFo7Hqno95vK8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/ce4e9a-7fc0-41f3-b80e-4f6b16ec33a7/1/0PhWqIToYidB9eFo7Hqno95vK8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PhWqIToYidB9eFo7Hqno95vK8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:21:67:cb:2a:95:d6:8a:28:86:5e:e2:54:72:20:98:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f856a884e8622741f5e168ec7aa7a3de6f2bc3
Validity
Not Before: Aug 20 23:00:45 2026 GMT
Not After : Aug 21 23:00:45 2026 GMT
Subject: CN=bb1ac6175b15ff96fb9cd432af6106916c0f9717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:35:41:eb:d8:51:a0:e1:b0:92:73:7a:6b:b8:
81:2a:73:66:fe:8c:eb:4c:41:c2:cc:8f:ee:86:e0:
e9:e2:41:18:15:18:f2:0c:40:d9:ac:0f:ac:2e:e9:
c1:ee:f6:3c:be:6a:c7:2f:53:b6:f5:da:b9:1d:b6:
23:c1:80:da:c3:ee:9d:d0:e1:68:9d:59:3c:c6:8e:
e5:a0:b6:5a:8a:06:bc:0a:61:1c:14:8d:98:bd:e7:
1b:24:5f:f8:7c:aa:94:3c:af:08:b7:e7:16:65:36:
f6:92:6d:20:5d:6d:a8:ec:d7:37:ec:5f:ef:c5:6f:
b4:6e:0d:cd:0c:46:58:a3:68:13:37:0c:23:cf:e2:
21:c4:33:f5:4e:cf:be:96:6a:8a:43:34:c8:d8:e3:
f1:d5:d4:a9:0f:ce:a4:8c:4f:3e:e1:80:ea:b5:87:
a5:5b:96:52:11:75:ff:7f:e0:74:d9:81:b2:ce:6e:
6d:cc:ef:e2:25:b7:be:0e:bb:7e:d5:41:4c:36:1b:
4d:32:aa:10:a1:5d:92:56:8e:0b:65:e7:a3:6a:9d:
d2:ee:f3:ae:6a:b5:5c:8d:7b:ab:4a:1d:10:66:0f:
d8:61:f3:f4:83:a8:c1:cd:2e:90:7c:cd:83:53:35:
45:40:c6:10:92:71:97:7a:aa:5d:a6:ae:a2:b4:d7:
db:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1A:C6:17:5B:15:FF:96:FB:9C:D4:32:AF:61:06:91:6C:0F:97:17
X509v3 Authority Key Identifier:
keyid:D0:F8:56:A8:84:E8:62:27:41:F5:E1:68:EC:7A:A7:A3:DE:6F:2B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PhWqIToYidB9eFo7Hqno95vK8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ce4e9a-7fc0-41f3-b80e-4f6b16ec33a7/1/0PhWqIToYidB9eFo7Hqno95vK8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ce4e9a-7fc0-41f3-b80e-4f6b16ec33a7/1/0PhWqIToYidB9eFo7Hqno95vK8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:69:a6:8d:57:45:3d:7e:ba:ca:b7:b0:ab:6f:11:17:53:bc:
48:80:a0:48:9c:02:b4:f3:24:dd:ab:99:ef:7c:a4:0d:d6:50:
73:84:14:68:df:6e:e0:be:83:71:ba:f0:22:60:d1:79:97:e6:
99:d3:17:03:b5:d5:ca:2f:cf:dc:3c:91:24:13:04:c0:c1:12:
1f:c6:03:d7:f2:87:3e:88:4f:60:b7:89:65:b1:f9:38:18:26:
f6:32:bd:78:ba:b1:42:df:d7:c9:3c:00:e0:60:e3:43:3d:f3:
fd:d2:29:be:7e:ea:8d:17:40:09:6f:39:7a:67:cd:da:9e:d9:
30:05:a6:dd:27:a1:62:84:56:4c:e6:a7:89:17:d0:cc:07:fb:
d8:7e:0e:3e:72:c3:4e:8c:81:fc:a4:eb:d2:bf:bc:63:5f:8e:
77:d0:f9:ad:e1:28:fe:50:c4:90:1b:fa:02:c9:6c:74:6a:48:
dc:74:de:c8:0d:48:8f:19:06:6a:c2:32:d3:8e:01:0d:d5:1e:
58:63:50:8f:61:9d:5a:da:0e:3f:59:6b:6b:a1:b1:6b:6a:97:
c4:c0:3a:c8:8a:77:61:94:e9:49:fa:60:eb:ed:85:e1:10:f0:
64:99:d0:ae:ef:a2:b5:61:3b:27:10:cd:22:a6:13:1e:d9:4a:
cf:2f:5e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 06:32:31 2026 by rpki-client