Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
File: 0gVCphNVJBQhlMqnCOfbLMprTmM.mft (raw, json)
Hash identifier: 7vEA2NcNahpsAjZy0PC48g5fr6B9q98CIIv+TOc7byU=
Subject key identifier: 33:B1:FB:EB:79:DC:D2:3B:D5:B4:C6:CA:D4:4F:54:A0:3E:19:9F:42
Authority key identifier: D2:05:42:A6:13:55:24:14:21:94:CA:A7:08:E7:DB:2C:CA:6B:4E:63
Certificate issuer: /CN=d20542a6135524142194caa708e7db2cca6b4e63
Certificate serial: 01A00213C63EC4FEF720484B3D1C407C2CD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
Manifest number: 12D9
Signing time: Fri 14 Aug 2026 21:00:45 +0000
Manifest this update: Fri 14 Aug 2026 21:00:45 +0000
Manifest next update: Sat 15 Aug 2026 21:00:45 +0000
Files and hashes: 1: 0gVCphNVJBQhlMqnCOfbLMprTmM.crl (hash: WMlzNI1/EYtos5Z8ZwCPOvqmAf41u9CQYT6zZRcLofg=)
2: W-WGisgg-jdHv8TOeMHyK0ABKKM.roa (hash: AOrzg/e6GHv0wl5jj9rXhlmu6Xrpu+wHeWmnEnYMw/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:13:c6:3e:c4:fe:f7:20:48:4b:3d:1c:40:7c:2c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d20542a6135524142194caa708e7db2cca6b4e63
Validity
Not Before: Aug 14 21:00:45 2026 GMT
Not After : Aug 15 21:00:45 2026 GMT
Subject: CN=33b1fbeb79dcd23bd5b4c6cad44f54a03e199f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0e:23:ca:93:31:2f:42:45:f5:46:59:f5:71:
f8:9b:30:91:a2:62:b1:c7:5b:5c:bc:e6:7f:22:5d:
ff:c7:38:dd:b7:72:a1:9a:d7:80:c3:db:7f:22:97:
85:1c:30:61:c8:02:11:32:fe:0c:fd:af:91:0b:18:
ea:03:76:20:78:9f:35:e7:ec:df:9a:5c:47:7a:99:
fa:cb:4a:97:c8:5d:42:3e:ca:35:03:1a:a0:6d:60:
60:14:77:79:1f:c7:18:c5:38:1a:57:61:62:c7:17:
46:6e:c1:b8:94:1e:ab:5c:3a:b0:1c:d6:74:75:26:
8e:3d:38:d9:70:32:6d:95:11:c6:b1:06:47:6e:4a:
70:9a:7a:b1:6a:a1:57:4a:db:bd:bd:df:8f:d4:ee:
06:bf:5b:a3:cc:0a:77:23:f2:b4:02:13:e3:8c:71:
8c:d4:01:c2:16:b8:c3:63:d1:66:0c:0b:76:54:8e:
c6:cd:7b:e1:12:dc:fd:3f:25:3b:c3:41:0b:74:76:
a7:e2:af:d7:cd:ae:80:fe:4c:aa:3e:ea:33:e9:83:
e2:46:4f:7f:82:2b:f4:ff:69:2e:5f:70:c9:bf:3f:
0a:1f:58:60:7f:16:44:33:40:a1:e7:81:d3:1f:6f:
0a:c3:4f:7a:76:41:1b:48:47:94:f0:5e:cb:5c:47:
6b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B1:FB:EB:79:DC:D2:3B:D5:B4:C6:CA:D4:4F:54:A0:3E:19:9F:42
X509v3 Authority Key Identifier:
keyid:D2:05:42:A6:13:55:24:14:21:94:CA:A7:08:E7:DB:2C:CA:6B:4E:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:e6:e4:ab:38:5a:3a:6e:8a:6f:71:ea:63:1a:a6:38:59:c3:
80:90:cf:32:dc:ae:5a:9f:f1:9f:bf:6e:58:b1:66:42:db:8d:
42:e4:2f:c5:0e:94:7c:ca:74:67:d4:94:1f:e7:ce:3a:d7:fd:
3f:2d:9f:62:c7:a9:f2:e4:03:94:56:82:06:14:50:89:7c:5b:
f0:09:34:96:d6:9b:fa:61:26:b3:65:6c:b9:ba:2f:70:ac:bc:
c1:18:a2:7c:92:34:16:45:e5:ce:fa:37:31:13:33:06:12:e9:
42:ae:a8:59:fe:e5:c1:e4:eb:d2:06:d2:38:5c:8d:84:ae:ec:
24:26:cd:1e:75:93:b5:61:f6:84:a4:16:cd:74:4e:e6:49:76:
3e:da:9e:ec:a4:84:de:2a:fd:0b:b3:4c:cb:d9:f7:46:1a:86:
a0:b9:42:93:71:0b:f4:95:4b:e8:ad:29:81:17:7e:15:a7:fa:
c8:3e:63:db:6b:05:c1:4c:26:f1:94:6b:86:b0:41:1e:f7:49:
7b:6d:96:1c:47:2a:97:17:e7:b1:69:6a:54:55:f7:57:94:19:
05:c1:39:35:d1:ef:f1:ac:76:e9:95:02:93:0e:17:9d:f1:15:
c2:3a:a5:fe:ae:2f:36:16:2b:32:34:44:fb:66:2f:6a:57:7a:
b5:40:b4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:13:56 2026 by rpki-client