Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
File: 0gVCphNVJBQhlMqnCOfbLMprTmM.mft (raw, json)
Hash identifier: 1iDipZ8jzGPT+5LOhs4DQpiPWvaLxvSmOsNYVU7enVY=
Subject key identifier: 80:32:A7:8C:42:1C:D8:DA:E4:23:E4:DF:26:17:D5:2C:21:E3:AF:D0
Authority key identifier: D2:05:42:A6:13:55:24:14:21:94:CA:A7:08:E7:DB:2C:CA:6B:4E:63
Certificate issuer: /CN=d20542a6135524142194caa708e7db2cca6b4e63
Certificate serial: 01A13CDCA2B5EA2258D498C1B3081A504FFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
Manifest number: 137C
Signing time: Thu 15 Oct 2026 00:00:54 +0000
Manifest this update: Thu 15 Oct 2026 00:00:54 +0000
Manifest next update: Fri 16 Oct 2026 00:00:54 +0000
Files and hashes: 1: 0gVCphNVJBQhlMqnCOfbLMprTmM.crl (hash: Vs/0OUhMg23lBYbxImLAEAlFc1IX/zhDzPxIGE04jAU=)
2: W-WGisgg-jdHv8TOeMHyK0ABKKM.roa (hash: AOrzg/e6GHv0wl5jj9rXhlmu6Xrpu+wHeWmnEnYMw/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 00:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:dc:a2:b5:ea:22:58:d4:98:c1:b3:08:1a:50:4f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d20542a6135524142194caa708e7db2cca6b4e63
Validity
Not Before: Oct 15 00:00:54 2026 GMT
Not After : Oct 16 00:00:54 2026 GMT
Subject: CN=8032a78c421cd8dae423e4df2617d52c21e3afd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0e:75:eb:9e:0b:04:0d:54:92:bc:0f:4d:d3:
52:df:55:ab:c2:b3:52:70:28:cf:63:7f:9c:ba:46:
b2:be:a9:7d:bf:69:02:95:9d:84:1b:8e:95:87:96:
af:64:98:0d:bb:40:07:cd:32:9f:f2:c3:d4:43:ff:
a4:aa:c0:6d:c0:9c:47:64:68:be:5b:e3:7d:c5:4d:
1a:0c:79:b0:bd:ed:6f:5f:a0:07:1b:eb:16:a6:de:
37:a1:fe:9c:e3:9b:2f:6f:ed:9c:db:b9:97:d0:34:
3a:96:ea:33:9e:60:70:9b:35:fa:f9:2b:00:ca:19:
cd:e2:93:79:b1:e0:90:e1:8a:6f:c5:51:19:fb:23:
da:92:e0:97:9c:78:98:49:4d:4a:65:79:e2:6e:80:
12:42:34:66:c6:26:2d:35:3c:d8:99:86:20:6e:71:
35:46:d1:a5:ad:00:37:c6:04:a5:28:0a:c6:0e:db:
32:10:72:f8:1c:c1:f8:8b:be:15:1d:9d:df:45:76:
76:4b:2e:2f:b2:43:d4:a6:af:ae:0d:4c:73:a3:4f:
52:57:b4:d1:46:a1:9c:3d:00:d1:21:1f:7f:d6:9c:
6a:6d:7c:c9:f0:6c:fa:bf:50:1f:5c:1b:dd:05:26:
05:04:15:03:1c:ca:69:ef:48:ff:57:75:46:49:bc:
b4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:32:A7:8C:42:1C:D8:DA:E4:23:E4:DF:26:17:D5:2C:21:E3:AF:D0
X509v3 Authority Key Identifier:
keyid:D2:05:42:A6:13:55:24:14:21:94:CA:A7:08:E7:DB:2C:CA:6B:4E:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:69:bd:ac:ef:27:c8:74:b7:67:b3:8f:92:dc:81:bc:46:21:
27:73:15:ea:54:e1:58:21:13:29:b2:bc:4b:20:0d:ef:1c:e7:
ee:d4:3e:94:80:d3:63:84:53:dd:6c:4a:cd:6c:e3:aa:ea:6c:
14:4a:b0:52:b9:d6:54:12:91:d7:b1:59:b1:0a:c9:de:e3:b4:
67:f4:d3:c1:df:14:2e:60:cf:9f:1b:43:ba:4e:d8:52:dc:7f:
6c:e1:37:66:00:5d:9d:91:0a:89:32:c9:da:66:9b:f7:e0:e1:
b6:e4:cd:a3:e9:b4:f9:23:08:68:8a:c7:bc:f6:78:c4:5a:9d:
fd:db:ff:de:91:b8:d2:60:a4:bf:44:7d:0c:bc:f1:6a:37:a4:
6d:51:e3:ee:b4:21:bc:fc:9c:71:4b:ba:36:02:7f:9e:78:fd:
1b:fa:9c:47:79:2e:33:21:25:37:74:9b:2b:0e:ec:d8:38:24:
03:29:35:e9:49:33:5f:ef:32:a3:8f:7d:31:9d:66:6f:fd:ea:
3f:a5:8e:f5:6c:c6:c0:82:31:04:a8:3b:4c:45:ce:17:fc:64:
ca:73:c4:6e:f5:a8:3c:9f:52:88:29:38:8b:c8:50:de:5c:3f:
78:c7:70:82:23:fe:f8:e8:be:27:c4:f8:a0:f0:2c:e6:9f:b5:
51:e6:40:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:18:52 2026 by rpki-client