Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
File: 0d4HoaH2W9EW4R-fEQhgS26VzP0.mft (raw, json)
Hash identifier: HuhVsvMEpEDrT5YOeWLgj055Aqznlmn9fLYYsvn+7OI=
Subject key identifier: F5:EB:B0:53:C7:92:E0:9D:55:0A:B7:18:E0:E7:6D:9A:32:2E:CC:59
Authority key identifier: D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
Certificate issuer: /CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Certificate serial: 01A1777108F356566AAD3E41B1BC0E91F577
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
Manifest number: 1658
Signing time: Mon 26 Oct 2026 09:00:58 +0000
Manifest this update: Mon 26 Oct 2026 09:00:58 +0000
Manifest next update: Tue 27 Oct 2026 09:00:58 +0000
Files and hashes: 1: 0d4HoaH2W9EW4R-fEQhgS26VzP0.crl (hash: CcO1CxUQVJV38VZ64QQdDgwzke1C6BD8OOIaiPEfZ9U=)
2: 6AcW6a22cinoLIymW2byGAd7uWo.roa (hash: RoxEP6kBPzD8q8xHwCRknSTvIS7/SOyyVCFWMK8wKF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:71:08:f3:56:56:6a:ad:3e:41:b1:bc:0e:91:f5:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Validity
Not Before: Oct 26 09:00:58 2026 GMT
Not After : Oct 27 09:00:58 2026 GMT
Subject: CN=f5ebb053c792e09d550ab718e0e76d9a322ecc59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bb:7b:b0:5f:16:85:38:fa:99:f4:51:90:07:
89:3d:97:1a:f5:9a:93:ef:fb:2a:11:27:70:a6:04:
0e:f2:06:77:fd:d3:58:ac:6c:a0:4a:fd:ac:96:56:
d3:04:b9:e3:26:ba:c8:8b:d6:4b:5e:fe:f4:ee:a4:
86:e5:2c:8c:6e:02:0a:f8:8b:35:62:45:f3:9f:86:
5a:ea:45:3d:31:66:b7:cf:6b:b6:de:aa:01:a3:83:
96:1f:1f:36:bd:ca:1f:0b:6a:e7:9c:12:03:a4:5f:
bf:bd:98:25:29:14:c8:07:31:2a:4a:ba:52:51:57:
ff:7a:36:49:63:ed:ff:96:b7:82:f3:d8:6e:31:9f:
dd:3f:07:9f:cf:3f:cf:f8:38:0b:5c:95:a5:71:3f:
15:fc:44:fd:d4:bb:99:b8:be:02:b1:3f:f0:87:d9:
7c:76:09:1c:ed:09:38:0a:dd:4b:27:86:cc:b5:57:
b1:4d:96:41:c5:c3:04:66:30:6f:7a:f3:88:d3:93:
38:26:a6:fc:07:f3:c5:19:cb:d1:0b:ad:0a:1f:13:
30:e4:08:5a:15:8c:15:34:57:8e:c0:87:f8:97:26:
6d:92:46:59:38:d3:c5:0d:fc:67:b9:9b:cc:65:67:
00:20:5b:ab:68:f4:fb:2e:08:77:88:28:21:2e:5e:
52:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:EB:B0:53:C7:92:E0:9D:55:0A:B7:18:E0:E7:6D:9A:32:2E:CC:59
X509v3 Authority Key Identifier:
keyid:D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:c7:42:d4:4a:e1:32:2c:27:2c:f4:9c:4a:55:da:ba:8f:ba:
d4:23:79:0c:86:61:ed:d4:04:85:a6:b4:0a:2a:c6:6f:c4:31:
09:8f:cf:3e:f3:fd:2d:fa:9e:9c:6c:41:f8:f4:5f:62:4d:0c:
2f:29:db:6b:f9:f7:4c:1b:7d:44:06:80:1f:c0:14:83:7a:bb:
d1:58:ce:67:af:70:e1:e2:c5:9c:b4:b6:ab:3a:2c:75:79:26:
d5:d1:78:a4:1e:ba:a9:92:a4:3b:2c:8e:dc:6d:88:c0:79:04:
74:88:61:37:e2:d2:c3:fa:9a:3c:fe:fb:5f:32:e7:cb:a3:ca:
fd:ad:e8:fd:c8:2e:00:42:77:2a:9b:74:9c:15:10:b0:cf:ba:
b8:ef:33:b8:6b:0c:6b:e3:86:72:f9:1c:8f:34:db:1b:b7:02:
0f:c0:0d:6a:18:3a:ed:3b:68:93:3c:3e:09:df:49:12:6d:be:
b5:5a:f0:13:88:ae:e1:9b:48:cd:8d:35:6e:57:22:6b:fa:fd:
1d:ab:97:62:4b:71:92:2c:b9:66:03:21:11:4a:ed:7d:03:e1:
f7:28:30:47:cf:cb:f0:57:71:62:1b:2d:0b:fd:85:f5:61:f6:
70:48:9d:7e:3c:8a:a1:ac:4f:d2:44:00:4e:04:d2:a1:1f:b7:
70:61:77:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:05:58 2026 by rpki-client