Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
File: 0mHPvAfsMGN33LFql6EWDHptgsw.mft (raw, json)
Hash identifier: 9yCBcbnJ3kJsHNZoeKRAK8aRvlMqYAoyA107UeJwOSA=
Subject key identifier: 7C:42:9E:83:55:6B:57:83:AE:62:3D:03:14:47:E0:B7:E7:76:49:A5
Authority key identifier: D2:61:CF:BC:07:EC:30:63:77:DC:B1:6A:97:A1:16:0C:7A:6D:82:CC
Certificate issuer: /CN=d261cfbc07ec306377dcb16a97a1160c7a6d82cc
Certificate serial: 01A11898E808DC46E271ACFA4C07EC2F6AB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
Manifest number: 06D3
Signing time: Wed 07 Oct 2026 23:00:36 +0000
Manifest this update: Wed 07 Oct 2026 23:00:36 +0000
Manifest next update: Thu 08 Oct 2026 23:00:36 +0000
Files and hashes: 1: 0mHPvAfsMGN33LFql6EWDHptgsw.crl (hash: CHbM3FDOI1XEI9qmPQxR/uTCC2sYUe15g48KQgpVCXM=)
2: WrFq8U6oGpZOyYQTgpsxtULaHpY.roa (hash: DaTkNKa/8bSzoEGirYCzYE6s6ctR7ykUWbX1j0yLFaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:98:e8:08:dc:46:e2:71:ac:fa:4c:07:ec:2f:6a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d261cfbc07ec306377dcb16a97a1160c7a6d82cc
Validity
Not Before: Oct 7 23:00:36 2026 GMT
Not After : Oct 8 23:00:36 2026 GMT
Subject: CN=7c429e83556b5783ae623d031447e0b7e77649a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:13:6a:17:19:81:cd:dd:fe:46:93:5b:7e:db:
9c:68:b7:08:6d:6f:a6:26:6c:41:ee:99:aa:8c:19:
96:9b:fb:ff:61:8f:d6:0f:f9:b1:f3:7a:22:d2:9a:
25:b3:18:13:6c:ee:51:cc:15:43:9a:06:6f:5c:b0:
ca:a0:ab:fa:40:82:5b:70:5b:fe:58:34:da:76:a5:
38:18:d7:4a:05:ab:68:85:00:c8:76:f7:d8:77:1a:
f8:ca:76:ab:c8:8d:a3:0c:d6:97:f2:7b:07:f3:37:
ee:44:71:5f:ac:7b:3f:d3:06:7f:cf:3e:9d:e1:38:
65:37:ed:b9:ac:31:a6:bc:ac:e4:1c:4b:c3:5e:87:
83:1a:f4:f4:e1:5b:3a:74:c9:9b:4e:df:82:39:f6:
e0:fe:bb:cf:d9:be:0e:e0:cf:7c:97:92:16:09:bd:
11:ed:44:d8:27:3f:a2:65:d5:37:ad:c3:42:68:82:
39:38:0c:29:f7:9a:98:d2:a9:38:0d:c9:a9:01:ee:
bb:92:51:5e:00:21:2a:e8:d3:7f:ba:92:cf:f5:dc:
13:d6:38:3f:43:80:ea:ae:20:f0:dc:76:aa:c3:37:
cf:e7:11:44:0b:dc:dc:e4:6e:5d:fc:40:40:73:72:
54:d5:f0:24:f2:ec:c4:0d:76:c5:cc:9c:82:87:6f:
78:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:42:9E:83:55:6B:57:83:AE:62:3D:03:14:47:E0:B7:E7:76:49:A5
X509v3 Authority Key Identifier:
keyid:D2:61:CF:BC:07:EC:30:63:77:DC:B1:6A:97:A1:16:0C:7A:6D:82:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:fa:18:67:f9:bd:c8:38:31:ac:e7:ef:92:6e:f4:5a:e2:3b:
5a:e6:c2:63:03:62:1b:9d:74:73:d3:b8:48:15:b9:12:57:26:
ef:4b:76:dd:f2:08:b1:56:b0:6b:ff:6a:6c:03:07:73:60:7a:
88:c5:a3:67:64:e0:c3:14:ae:1d:94:3f:89:2e:46:79:c4:d8:
2e:e9:5e:9a:e2:90:eb:a1:64:d5:4d:41:70:3c:ea:e2:a5:81:
1a:6f:a5:8c:53:01:fe:82:e7:72:07:49:2a:81:12:44:12:56:
df:7a:ca:3d:93:5c:4b:67:d8:c3:d5:79:83:43:f3:9f:34:94:
27:c0:7f:f2:6b:53:ad:d0:6d:fa:df:f1:64:4a:6f:ec:8e:f7:
9d:f9:22:7b:5b:f4:68:40:9c:3a:f7:c2:d4:07:90:2b:e5:c2:
4c:09:15:c9:14:e6:88:8c:85:f5:77:f6:e6:05:cc:e0:d6:37:
ec:73:88:27:c0:0e:a0:67:9d:40:bd:9c:0d:9d:10:d9:19:7e:
7d:6f:fb:4b:49:d1:35:03:14:ec:b2:06:b8:08:67:ce:ce:f4:
61:2e:bc:ef:73:f8:6c:3a:b3:07:b0:cf:7c:db:1d:f1:38:c4:
6d:ff:45:10:1d:4c:1a:a2:70:df:fe:3f:21:dc:e0:6a:7d:7b:
3d:f3:12:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:23:18 2026 by rpki-client