Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
File: do0jVpP2hnxbOBPaHzb-EHvR14I.mft (raw, json)
Hash identifier: D/ZvG2jJSXfBEnbwnNXgKeIBsPLFjcpO/bF1BewulEQ=
Subject key identifier: 35:13:E3:4B:1B:27:40:EA:0C:D6:07:0F:21:F6:D8:93:DD:A3:2B:D9
Authority key identifier: 76:8D:23:56:93:F6:86:7C:5B:38:13:DA:1F:36:FE:10:7B:D1:D7:82
Certificate issuer: /CN=768d235693f6867c5b3813da1f36fe107bd1d782
Certificate serial: 01A08AC336C22AD774C75AF1009DD209D3B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
Manifest number: 111F
Signing time: Thu 10 Sep 2026 10:00:44 +0000
Manifest this update: Thu 10 Sep 2026 10:00:44 +0000
Manifest next update: Fri 11 Sep 2026 10:00:44 +0000
Files and hashes: 1: KuefoOzdZ9vrXjVoaWqLBNOd8Fc.roa (hash: Tr2+OxM2L2vZYYtrtzp3JmsEgxHYlAlF0KBqV8P0L1o=)
2: do0jVpP2hnxbOBPaHzb-EHvR14I.crl (hash: 71xjQPun7AK3kBkUCzyWjHQf2NaF5gMr2UqM9+6gyDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:36:c2:2a:d7:74:c7:5a:f1:00:9d:d2:09:d3:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=768d235693f6867c5b3813da1f36fe107bd1d782
Validity
Not Before: Sep 10 10:00:44 2026 GMT
Not After : Sep 11 10:00:44 2026 GMT
Subject: CN=3513e34b1b2740ea0cd6070f21f6d893dda32bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d6:49:dd:09:e2:ca:1f:24:dc:ea:b0:9a:3c:
25:5c:c3:62:c8:2e:18:55:ee:ba:47:e3:6f:32:d9:
38:12:02:e8:92:d3:3e:b7:31:4d:2d:41:2d:18:9c:
20:ec:6c:22:7f:66:23:be:1a:a5:10:70:a8:d9:17:
49:1c:5b:23:c3:1a:b6:fa:66:98:56:11:71:ba:98:
dc:0a:62:65:fe:6c:1f:65:cc:eb:73:6a:cb:eb:aa:
f9:b7:96:c6:24:5f:08:82:d1:5d:eb:a7:62:75:f9:
19:9a:a5:6f:8e:90:02:95:e6:8d:9c:03:49:2e:b4:
57:d3:b3:0c:b9:2e:6e:d3:bf:67:57:4c:33:a3:ce:
08:c3:99:e7:f0:38:b6:68:31:5d:5d:bb:db:77:c9:
a0:5e:e2:b8:14:68:d2:ce:8d:91:27:97:66:c1:a2:
19:43:99:7e:89:f3:36:16:5b:14:c9:07:cc:4c:35:
df:5e:89:55:d2:d5:87:f1:fe:da:b3:d3:82:a0:7c:
46:d0:6d:54:c5:d8:83:25:07:dd:72:42:cd:7b:82:
84:b4:37:dc:fc:16:f8:a2:6b:2b:fa:01:7f:5b:89:
86:4a:fc:79:fd:a7:94:8f:c3:f5:ad:50:25:8e:9c:
46:81:fa:b5:23:bc:82:83:8f:70:09:97:d0:e8:05:
8f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:13:E3:4B:1B:27:40:EA:0C:D6:07:0F:21:F6:D8:93:DD:A3:2B:D9
X509v3 Authority Key Identifier:
keyid:76:8D:23:56:93:F6:86:7C:5B:38:13:DA:1F:36:FE:10:7B:D1:D7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:2f:01:84:e7:b3:60:6b:9b:76:31:c5:2a:ac:86:ac:e1:0a:
c7:50:1c:2a:50:e1:7a:06:a7:d6:5b:37:26:6e:ff:7d:e5:63:
b2:a1:23:3d:91:80:68:e4:8c:21:d6:2a:55:a9:98:ad:bc:de:
4b:05:3f:64:3c:37:3b:86:93:31:96:7b:e7:99:19:c5:4c:af:
95:2b:7e:0e:04:17:03:c2:61:2f:92:70:65:4a:30:94:2c:37:
b1:4c:6c:58:9b:b4:2e:a0:cf:42:29:9f:25:0e:5d:d0:4a:9d:
3c:bd:37:d2:01:34:02:dc:bc:07:0d:e1:2a:64:51:bf:a9:97:
d2:62:1d:20:9d:9c:ec:d0:70:91:79:3b:b1:86:41:df:e8:6e:
da:c7:ed:ed:92:83:b0:0e:4e:da:50:6b:9b:6d:60:6c:75:b6:
70:0d:b8:c7:ea:e1:4e:59:5a:07:87:0f:9c:78:80:11:aa:6b:
0d:d4:7a:33:2c:24:97:b3:be:32:f6:d5:57:04:39:64:0f:7e:
41:7f:49:ba:85:e8:b4:79:7a:de:1a:16:f8:e1:3b:8c:6d:44:
ca:94:68:d7:37:45:48:ae:ff:e5:5d:5d:f2:39:7e:55:96:42:
fb:28:df:b5:4f:10:f1:c1:15:32:e7:9a:82:65:af:86:32:18:
8b:86:f6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:48:43 2026 by rpki-client