Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
File: 0lgUed7jtZlPEcnZVkYxv1pATAc.mft (raw, json)
Hash identifier: EiTbU/e0Jk4PSeAbdNneqOzr9C4CjwrP5zezgDZDaLI=
Subject key identifier: 57:43:24:19:5B:73:56:A4:E9:C2:B9:B4:82:56:DE:8A:01:D9:CC:A3
Authority key identifier: D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
Certificate issuer: /CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Certificate serial: 01A14A9851516FAD2FCC38D7E544048A3BB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
Manifest number: 0BB8
Signing time: Sat 17 Oct 2026 16:00:58 +0000
Manifest this update: Sat 17 Oct 2026 16:00:58 +0000
Manifest next update: Sun 18 Oct 2026 16:00:58 +0000
Files and hashes: 1: 0lgUed7jtZlPEcnZVkYxv1pATAc.crl (hash: 89gUwzl+b26YvPEt1HrRoOX1KAsNuySWOSJhSGdjALw=)
2: _anBuNNw0qAbfJJyR7NUzCXshEI.roa (hash: u/OzH4PvqgIz0IcQamVppLorgGwznO76WkLllc9zkBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4a:98:51:51:6f:ad:2f:cc:38:d7:e5:44:04:8a:3b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2581479dee3b5994f11c9d9564631bf5a404c07
Validity
Not Before: Oct 17 16:00:58 2026 GMT
Not After : Oct 18 16:00:58 2026 GMT
Subject: CN=574324195b7356a4e9c2b9b48256de8a01d9cca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d2:32:0e:ce:bb:3d:33:32:d6:1c:66:06:e3:
74:62:44:81:cf:54:54:4a:f8:a3:1b:43:22:1c:dc:
21:b1:2d:d2:99:a8:11:9c:d5:2d:ee:41:70:91:79:
41:33:7e:1b:ca:07:41:b4:e0:ad:a8:44:7b:80:6f:
2b:10:83:e5:fe:ef:d2:43:6f:66:db:4d:c4:c7:c2:
d7:0d:5a:11:bd:f0:bb:05:9c:b4:f3:9f:b3:9d:97:
d1:0e:24:12:0a:9f:5a:2c:d5:7f:c6:0f:e8:35:fe:
25:4d:8d:62:e5:15:c5:30:3c:c3:aa:09:d9:0f:f9:
80:f7:bd:b5:8f:1b:21:e0:be:bd:6c:24:80:c7:3c:
dd:fa:6d:3e:77:04:ed:bb:c2:9c:1f:e4:9e:03:b2:
92:54:02:55:d2:56:cc:06:1b:64:03:88:d3:f4:c5:
97:78:59:92:cf:ea:f9:25:f4:23:a6:34:f9:10:9f:
c8:36:74:d9:50:ee:db:26:e4:ba:b7:79:66:da:88:
88:d1:51:06:24:31:d2:2f:12:f7:fc:4b:e5:b6:39:
24:f7:6e:9c:99:45:16:bb:ac:2a:63:12:f1:22:cd:
b5:f0:e0:f6:32:86:bf:1d:36:83:13:0b:53:88:26:
11:78:78:3f:68:6b:3b:f2:55:c3:7d:bf:92:5d:4c:
99:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:43:24:19:5B:73:56:A4:E9:C2:B9:B4:82:56:DE:8A:01:D9:CC:A3
X509v3 Authority Key Identifier:
keyid:D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:26:7f:1b:0d:bb:23:70:5e:39:4e:61:7b:6b:1b:99:34:52:
0e:f9:e1:7d:df:b9:d3:25:65:9e:25:ed:05:69:47:30:e0:6a:
7a:bb:b5:40:b0:6b:95:98:07:99:2f:6c:5f:95:1c:4e:e7:01:
41:8a:59:fd:08:3a:82:67:ef:c9:97:49:0c:d0:04:e1:c4:a2:
5f:8d:7b:0a:0e:a9:4a:55:5c:bd:41:8f:c2:3e:bc:c8:07:d9:
31:8b:4d:11:2b:5f:18:87:ac:1b:bc:da:51:61:dc:c3:66:9c:
a8:39:92:b7:fe:75:6c:10:c1:71:d1:67:c4:5e:63:9e:c7:34:
ba:69:01:4e:aa:c2:39:f1:3f:f0:55:b6:5e:e2:5d:6b:7a:1a:
f2:74:9b:f6:ad:00:5c:ab:96:ea:a8:3c:ea:52:45:0c:3e:12:
bc:59:6a:6a:15:43:9e:1c:06:74:01:df:ca:77:27:d5:38:5b:
95:2c:21:1d:f6:f4:40:18:34:8b:28:a4:04:eb:04:2f:26:d1:
9d:a2:da:9b:be:b4:20:f3:85:ea:d0:73:b1:62:5a:7f:03:e2:
cc:ad:6b:fc:6e:b0:2c:b0:3a:3e:93:8d:b5:29:4b:07:5a:3c:
9b:ed:e9:6a:c3:28:21:dc:be:7a:8a:db:46:77:25:98:34:15:
8f:fd:4c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 22:33:48 2026 by rpki-client