Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
File: 0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft (raw, json)
Hash identifier: MbPEvABUHSgpwJX/K3BeOz//qWRez2gchoK55YWNCEg=
Subject key identifier: B1:5D:01:66:07:AB:9E:8F:90:88:5D:67:D6:0F:A4:AC:30:72:56:D1
Authority key identifier: D2:DD:4D:DD:53:6F:18:A8:72:CB:AC:15:E5:89:54:2A:ED:CD:07:37
Certificate issuer: /CN=d2dd4ddd536f18a872cbac15e589542aedcd0737
Certificate serial: 01A08C7B81AC189E66A80814860BB54A1BB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
Manifest number: 0C32
Signing time: Thu 10 Sep 2026 18:01:39 +0000
Manifest this update: Thu 10 Sep 2026 18:01:39 +0000
Manifest next update: Fri 11 Sep 2026 18:01:39 +0000
Files and hashes: 1: 0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl (hash: YvpIucGbJJ4Mgtr6wDB+NHJ6qak3QjvD3Xfwmf2L3lE=)
2: X_8Np37khTcPCEtRXHbNQfqvQNE.roa (hash: XNLBBBK7IAMNXci8RcPDaNEkuHX48HSzOY+bMxN50u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:81:ac:18:9e:66:a8:08:14:86:0b:b5:4a:1b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2dd4ddd536f18a872cbac15e589542aedcd0737
Validity
Not Before: Sep 10 18:01:39 2026 GMT
Not After : Sep 11 18:01:39 2026 GMT
Subject: CN=b15d016607ab9e8f90885d67d60fa4ac307256d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:22:4e:c9:75:ba:07:d0:23:aa:32:b1:6f:9b:
ba:f9:e9:b5:0c:67:cd:8e:30:91:58:8a:67:04:8f:
57:20:02:c2:0e:4f:60:8d:cc:00:96:99:ad:bf:97:
00:ef:1c:b4:0c:06:fd:39:dd:e9:bd:c0:7d:10:15:
14:f6:ed:f0:08:a6:30:4f:88:b2:50:b7:aa:d1:94:
2c:a6:cf:44:70:90:01:0b:37:0e:41:0e:d3:60:82:
49:98:20:6f:1e:b3:4e:e6:bc:c8:f6:77:39:32:55:
dc:ba:ee:48:1f:4e:0f:ad:1d:0d:7a:a5:f4:8b:b0:
c2:a1:4f:a6:68:13:92:0d:c9:29:70:b6:27:9d:c0:
2a:79:3d:ae:11:98:40:e7:c0:7a:fe:15:2c:29:be:
ab:ab:9c:ed:f4:af:ae:b8:28:96:8d:22:b5:5e:ab:
70:ee:b7:3d:21:21:e9:83:3d:d4:cd:38:ef:09:3b:
26:ef:ea:06:65:4d:de:16:8c:b4:fb:50:6b:f7:c7:
ed:35:62:22:f6:dc:e5:48:94:bf:3e:a8:ef:13:83:
33:a6:a9:d0:07:85:1e:24:88:61:68:dc:28:da:8a:
af:fb:b7:8e:81:6d:ab:3a:c9:e0:36:a0:44:9f:71:
37:e8:20:e8:59:21:15:f8:d3:e4:da:28:24:f3:64:
18:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5D:01:66:07:AB:9E:8F:90:88:5D:67:D6:0F:A4:AC:30:72:56:D1
X509v3 Authority Key Identifier:
keyid:D2:DD:4D:DD:53:6F:18:A8:72:CB:AC:15:E5:89:54:2A:ED:CD:07:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:fe:1a:5c:55:d5:27:f0:07:26:52:2b:a5:9e:11:40:50:ba:
bd:89:ad:25:46:6e:08:26:54:b9:da:e0:94:2a:f5:4a:8a:f7:
3a:66:91:77:48:34:db:0f:b3:33:23:4e:eb:ed:39:b9:48:6a:
ad:80:bc:05:b2:b5:a1:44:e6:ce:4b:e7:fa:81:a2:ae:0a:52:
96:30:55:cc:10:87:a6:c8:9c:63:19:1a:a2:46:1f:00:8f:11:
02:e8:12:18:4c:8c:6c:81:45:e1:16:be:f6:55:ea:77:74:69:
57:3a:9f:47:91:e2:b9:99:5b:a1:ec:73:7f:24:6c:4d:19:23:
04:a5:97:e2:f4:f9:fb:b2:9d:9a:d4:7a:f5:35:c6:fd:02:40:
e3:ee:f9:0e:1d:93:a5:2b:45:5f:b2:43:89:35:84:20:7e:bc:
59:eb:c8:31:db:b8:5d:27:2f:7b:c7:59:c7:64:11:1d:8c:7c:
a7:d7:84:a4:0a:15:9a:3a:12:5b:e8:95:53:01:0b:65:6d:12:
e6:ce:f7:d0:33:50:2c:27:fc:4b:f3:69:eb:16:bb:01:45:ef:
15:25:40:ed:d4:97:11:e2:b7:f8:a0:84:40:f7:f1:f3:34:0b:
fb:a3:2b:bd:67:47:36:87:73:8e:ca:b2:cc:21:37:22:ac:53:
b8:a6:b8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:26:26 2026 by rpki-client