Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
File: 0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft (raw, json)
Hash identifier: DovFAZf+uIoVSWYZgsOIwoFNEvaHUGw8lgto7SQE0Vg=
Subject key identifier: 43:9A:9C:E0:52:F6:71:49:9A:4B:32:E4:B5:C9:4E:50:9E:23:A3:05
Authority key identifier: D2:DD:4D:DD:53:6F:18:A8:72:CB:AC:15:E5:89:54:2A:ED:CD:07:37
Certificate issuer: /CN=d2dd4ddd536f18a872cbac15e589542aedcd0737
Certificate serial: 01A1897783C8DB19C35F0F5E9116985D1B5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
Manifest number: 0CB5
Signing time: Thu 29 Oct 2026 21:01:13 +0000
Manifest this update: Thu 29 Oct 2026 21:01:13 +0000
Manifest next update: Fri 30 Oct 2026 21:01:13 +0000
Files and hashes: 1: 0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl (hash: elijx5JaSwmsBNvujWwoDpQpOzOqBWPAfxVuJSl2fQM=)
2: X_8Np37khTcPCEtRXHbNQfqvQNE.roa (hash: XNLBBBK7IAMNXci8RcPDaNEkuHX48HSzOY+bMxN50u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:77:83:c8:db:19:c3:5f:0f:5e:91:16:98:5d:1b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2dd4ddd536f18a872cbac15e589542aedcd0737
Validity
Not Before: Oct 29 21:01:13 2026 GMT
Not After : Oct 30 21:01:13 2026 GMT
Subject: CN=439a9ce052f671499a4b32e4b5c94e509e23a305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:e0:e0:75:a7:6a:b9:ed:28:f3:4f:1a:cc:2c:
7b:00:a9:6b:7c:ea:f4:b7:4c:a6:a3:ae:dc:83:aa:
c1:99:ff:0c:ad:d1:f8:8d:fb:6c:ff:be:e8:ce:f6:
c0:c6:c3:1b:e4:00:60:91:b0:4f:f6:39:e4:45:a4:
a9:5b:a6:da:cc:ae:35:3f:1e:f9:2e:09:24:56:53:
ee:47:e9:e9:51:e4:5f:f1:e2:cc:ad:45:fa:b1:2e:
85:9a:74:1b:0a:b4:3f:0b:9b:d7:6f:2b:9e:7c:0d:
f6:d6:2a:00:9a:d8:42:6a:77:d2:d2:d7:3e:6d:79:
b6:a5:a0:bd:18:5b:eb:97:ed:8c:65:1a:81:88:22:
1c:6d:da:b2:83:eb:81:d5:a3:bf:9e:71:17:86:10:
44:14:21:61:55:ef:22:76:83:c9:3a:e5:80:ea:07:
9d:cf:3c:07:69:6b:1c:35:0c:27:20:06:0a:7f:a1:
22:16:e1:98:f3:ba:a1:52:fe:66:f4:88:fa:68:71:
da:76:52:a6:8b:65:f8:d5:ac:24:06:53:cd:75:b4:
0f:66:74:84:36:61:f6:5f:6a:d0:dd:72:ef:3c:3e:
5a:82:db:01:52:c0:cd:d1:af:24:b0:d7:06:6d:b5:
02:87:74:b5:d5:a7:44:e2:7b:4c:c8:97:b8:60:37:
3a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9A:9C:E0:52:F6:71:49:9A:4B:32:E4:B5:C9:4E:50:9E:23:A3:05
X509v3 Authority Key Identifier:
keyid:D2:DD:4D:DD:53:6F:18:A8:72:CB:AC:15:E5:89:54:2A:ED:CD:07:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ef:20:af:bb:dd:39:4f:aa:17:6b:6a:31:16:ba:e8:24:f4:
63:75:fa:5b:ba:2f:90:7a:90:18:10:eb:e1:be:40:14:cb:18:
90:e2:56:00:d8:e3:53:fc:d2:e0:2e:b5:9e:90:4e:22:d4:22:
47:7f:a6:1a:30:e9:15:e4:a6:a2:24:ba:1f:c9:4b:98:78:d3:
11:94:6b:ce:83:ac:1b:41:5a:23:f2:b0:9e:65:43:cf:c4:b7:
df:f8:c9:7b:94:8d:7a:26:74:a2:bc:99:1f:6c:67:1c:59:fc:
4d:d4:df:5a:d4:76:fb:74:45:f3:9b:5a:3c:9e:f9:e0:2a:92:
9f:0f:d1:de:3d:e0:d0:be:82:88:0b:f7:4c:cd:02:9b:00:13:
83:fc:1b:4a:60:b9:bf:fe:ea:b1:a8:6f:f4:81:3b:ec:5b:ef:
11:1c:bd:06:41:ed:2f:b9:f6:4f:3b:bd:f0:0c:17:57:95:54:
17:33:45:72:b9:a6:34:09:07:f8:17:b3:ba:d3:77:34:e8:bd:
ef:90:35:ae:56:5d:05:30:c4:da:31:86:75:7c:78:54:9e:d1:
60:04:e2:ac:d2:19:2f:db:d8:88:d3:be:84:47:71:34:a7:cc:
03:31:54:fd:b6:70:fe:17:30:bb:89:98:e1:9d:f0:2d:46:6d:
4f:b4:b8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 01:20:04 2026 by rpki-client