Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
File: 0bvzaAza5sJnqY0D0I9rI9DtHUY.mft (raw, json)
Hash identifier: Tludx0z+tqc00uYY/1nC2BiElMzHJGiY69PI0kfYPBc=
Subject key identifier: 30:19:9C:17:17:42:65:15:85:71:33:6C:7F:41:71:5A:90:B5:10:BA
Authority key identifier: D1:BB:F3:68:0C:DA:E6:C2:67:A9:8D:03:D0:8F:6B:23:D0:ED:1D:46
Certificate issuer: /CN=d1bbf3680cdae6c267a98d03d08f6b23d0ed1d46
Certificate serial: 01A1445F604B0A647F9D9303AF561FC9EEF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
Manifest number: 1AAA
Signing time: Fri 16 Oct 2026 11:01:03 +0000
Manifest this update: Fri 16 Oct 2026 11:01:03 +0000
Manifest next update: Sat 17 Oct 2026 11:01:03 +0000
Files and hashes: 1: 0bvzaAza5sJnqY0D0I9rI9DtHUY.crl (hash: ve7XyDepy07MSN56h5f8sWsRCXF4s/t53S385tJcg7s=)
2: 7Se3cx4TBdWjHAwq4txVyQrcrpQ.roa (hash: qn754SyayB45Cx33yiucDcB81nUdDdHn60qsbH3DxoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:5f:60:4b:0a:64:7f:9d:93:03:af:56:1f:c9:ee:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1bbf3680cdae6c267a98d03d08f6b23d0ed1d46
Validity
Not Before: Oct 16 11:01:03 2026 GMT
Not After : Oct 17 11:01:03 2026 GMT
Subject: CN=30199c17174265158571336c7f41715a90b510ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:59:4e:83:bb:b7:9a:87:e1:f6:5f:ed:40:fe:
ec:01:1e:a2:78:fe:90:78:02:4b:89:0b:5a:b1:b7:
a6:37:6f:a5:2f:ae:24:2f:cb:4d:bc:f3:72:8e:81:
c7:0b:49:67:06:d0:75:69:1e:25:6c:2a:13:1a:03:
ee:15:95:28:a4:7a:b7:5f:35:6b:69:99:7f:7f:f4:
6f:43:43:a7:60:3a:45:ac:d8:03:3f:f8:3b:b5:81:
7d:1b:5a:ea:fd:7c:31:6f:0f:85:35:35:f9:b7:64:
9f:7d:9e:06:45:80:b2:f7:6e:fb:a6:82:7a:db:2c:
4d:6b:67:19:a9:0d:4a:8f:aa:2f:b4:5b:d1:f3:b6:
0a:eb:d7:19:b1:26:8d:c6:7d:a0:25:58:1c:6e:fb:
c4:1b:d1:99:64:fa:ca:ef:ca:61:61:38:cd:2c:4d:
e3:0d:c4:87:8e:22:4a:45:ca:1e:f2:39:2b:47:88:
71:30:09:56:55:9e:29:73:99:ec:28:90:2a:6d:31:
80:dd:f3:b9:7a:64:39:dc:dc:9a:19:9b:58:89:b6:
2a:e0:cd:37:43:73:93:7b:6e:f1:0f:ae:70:03:c2:
3e:09:a0:8e:df:6d:d0:f7:cb:2f:28:5d:af:c4:02:
7e:33:73:8d:53:f7:34:5d:34:89:0f:be:22:c7:fa:
ce:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:19:9C:17:17:42:65:15:85:71:33:6C:7F:41:71:5A:90:B5:10:BA
X509v3 Authority Key Identifier:
keyid:D1:BB:F3:68:0C:DA:E6:C2:67:A9:8D:03:D0:8F:6B:23:D0:ED:1D:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:1f:23:2b:dd:c5:57:bf:c9:ba:55:af:0a:91:69:74:06:65:
91:55:90:2b:62:e1:de:ed:86:f6:82:6d:0f:48:00:49:54:69:
a4:9a:a6:a8:6d:ac:69:be:4e:cd:8e:93:96:08:27:a6:c2:f4:
e4:a1:b0:d4:ad:11:41:6c:2d:28:8d:c4:73:2f:d8:45:25:9e:
20:58:54:32:b7:64:d7:e2:94:3d:bb:eb:2b:5f:6f:1a:90:16:
bd:40:4c:72:c5:ca:b6:3d:80:47:16:af:a7:7a:ff:75:11:97:
63:b9:6e:7a:8b:7e:a5:ed:ba:df:8c:90:86:ab:b9:6d:2a:cb:
b1:0c:c9:44:db:0c:e7:4c:79:ca:2d:c4:d1:ce:c2:8a:63:67:
81:db:5e:aa:1e:f5:6f:16:de:5e:1e:3b:59:74:a3:a9:27:09:
28:ef:a8:88:d6:f5:96:c2:b0:d0:a1:16:cc:43:c6:3d:2d:4f:
af:d3:bf:d5:fd:81:6e:b2:a5:9d:f3:3b:0c:7a:3c:df:56:71:
1e:6c:11:8f:8f:77:12:d0:80:52:45:68:8c:db:c0:0b:d6:1d:
9e:0a:19:41:73:f1:cd:6e:44:3f:72:67:fe:74:64:77:cf:d6:
30:13:cf:74:c7:95:d8:e1:3a:44:0e:2d:1b:83:7d:b2:31:b1:
40:77:c7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 20:25:36 2026 by rpki-client