Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
File: 0z4TEAje9wWkF_DUDRSKNvJaGjk.mft (raw, json)
Hash identifier: GF8i7lHegJ3JG/1jSb0qEyzPRx+eK0rvTg2rrL5RDxo=
Subject key identifier: BB:6A:01:CD:11:6A:BE:96:1B:C6:93:DA:78:02:32:4C:0E:AF:CF:6D
Authority key identifier: D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39
Certificate issuer: /CN=d33e131008def705a417f0d40d148a36f25a1a39
Certificate serial: 01A08D8DECD399A7D9D81628772233C5E157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
Manifest number: 1444
Signing time: Thu 10 Sep 2026 23:01:23 +0000
Manifest this update: Thu 10 Sep 2026 23:01:23 +0000
Manifest next update: Fri 11 Sep 2026 23:01:23 +0000
Files and hashes: 1: 0z4TEAje9wWkF_DUDRSKNvJaGjk.crl (hash: W98RhHJqm1I9NZrvlghVbCyF38h10kw2192NBApcVfQ=)
2: q5b2DuF1EAMOC22AlAeZQWFkxpU.roa (hash: 6KXA/tbOOb8+a5Q0zFi+dIBOh0aAYoOzdzGbwggmS5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:8d:ec:d3:99:a7:d9:d8:16:28:77:22:33:c5:e1:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33e131008def705a417f0d40d148a36f25a1a39
Validity
Not Before: Sep 10 23:01:23 2026 GMT
Not After : Sep 11 23:01:23 2026 GMT
Subject: CN=bb6a01cd116abe961bc693da7802324c0eafcf6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a5:42:e8:e1:e3:5e:10:32:44:13:4f:31:f5:
5b:9b:7b:ba:b9:16:74:65:f0:a9:bd:25:53:65:87:
05:1d:63:b1:c4:5e:d9:f8:eb:46:1a:d4:ba:f5:1c:
03:5d:40:a3:47:f0:77:38:34:4a:08:20:0b:cc:8a:
91:f1:06:20:20:f5:11:7f:c5:d4:60:5f:81:f7:ab:
a7:2d:76:40:db:c1:67:5b:13:56:a0:99:53:ae:15:
ae:4d:4c:64:98:83:49:f1:62:c8:b2:3b:6d:b9:86:
8a:84:69:3b:ff:6b:83:a2:b3:fb:c2:e6:64:d7:a1:
bf:7a:24:c1:0d:85:08:fa:e8:dd:b4:98:a8:5d:9b:
f5:f4:e7:4b:1b:4f:66:65:02:26:a7:7a:96:05:e5:
c0:cb:cd:a8:c9:31:44:ef:cb:1b:23:2c:7e:62:25:
cc:d7:a0:37:c9:93:60:84:33:2b:c2:75:7d:e3:6d:
0c:39:52:d5:86:bc:82:1e:05:b6:70:a2:8d:ed:f7:
2f:98:96:7b:85:c3:fe:15:fe:76:47:71:74:7d:68:
28:74:b5:ca:78:b7:68:e2:1b:a9:21:60:a9:c9:1d:
89:64:90:11:52:2f:e6:0e:fd:e0:9c:4b:7f:fb:de:
45:f2:75:c8:18:5b:d6:b5:13:0a:f1:58:87:0b:77:
5b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6A:01:CD:11:6A:BE:96:1B:C6:93:DA:78:02:32:4C:0E:AF:CF:6D
X509v3 Authority Key Identifier:
keyid:D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a1:42:ec:cd:e5:44:37:e8:e8:a6:ab:5e:25:e2:b3:34:00:
4f:4c:3b:cc:e2:f1:4f:e4:6f:e0:d6:38:a5:be:76:39:ff:56:
f0:17:ab:73:fc:46:de:dc:b0:53:7d:6a:71:6d:2a:e3:67:4c:
4c:b4:8e:38:34:5e:12:e4:78:79:69:da:b2:2a:72:3e:fc:ed:
f8:46:a1:9b:a4:8f:8d:41:33:84:1f:20:d7:6b:d7:96:52:ee:
ea:eb:f5:2a:d5:42:51:2c:21:e8:a8:57:e5:a4:7c:d9:a5:c0:
c1:9f:e1:85:f0:a4:0f:e7:ef:19:c2:6e:ab:82:95:97:c3:f4:
b9:ce:0b:d0:d6:26:77:cf:00:31:8f:86:cb:67:52:04:ec:24:
91:fc:0e:29:fb:ec:5d:24:d2:98:b0:bf:21:92:a8:12:ee:29:
c5:f0:a9:95:76:55:fb:6d:64:81:7b:fd:54:5d:dd:5a:67:c0:
83:f3:4f:06:0a:07:13:6d:28:4a:10:21:aa:f0:96:59:4c:2c:
3c:b1:ab:9e:ea:02:64:5f:3b:88:ae:b4:86:8f:d1:25:d5:cb:
92:d6:94:41:20:21:3a:08:73:bf:2a:d9:4f:8c:04:2f:01:17:
a9:b4:23:a1:78:c7:ce:4e:80:61:b3:ce:3f:90:23:98:26:76:
70:53:c8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:33:42 2026 by rpki-client