Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
File: 0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft (raw, json)
Hash identifier: bZNWNsEMQiwnPv7a7i6zrGsYBhzQT6L7NLWLGgP2HfM=
Subject key identifier: C4:6A:9C:7B:37:BD:72:78:40:54:F3:ED:38:AD:E9:34:22:28:18:0B
Authority key identifier: D2:76:C4:1A:21:76:25:4F:23:6D:23:D3:91:FD:56:09:06:19:67:0D
Certificate issuer: /CN=d276c41a2176254f236d23d391fd56090619670d
Certificate serial: 01A0024AF4AF40D134619B5AD8AB62EB7C14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
Manifest number: 04FF
Signing time: Fri 14 Aug 2026 22:01:01 +0000
Manifest this update: Fri 14 Aug 2026 22:01:01 +0000
Manifest next update: Sat 15 Aug 2026 22:01:01 +0000
Files and hashes: 1: 0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl (hash: OyozITHnHgjMF16um5zrYRA8UWv4LcNSuOBzxSciTiI=)
2: W4cImxro0S1Oqpe5aOmc9Zk1to0.roa (hash: 2C5FiGId1eEcbsSAENT53ABjs4YVPjHtZepjzsteNl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 22:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:f4:af:40:d1:34:61:9b:5a:d8:ab:62:eb:7c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d276c41a2176254f236d23d391fd56090619670d
Validity
Not Before: Aug 14 22:01:01 2026 GMT
Not After : Aug 15 22:01:01 2026 GMT
Subject: CN=c46a9c7b37bd72784054f3ed38ade9342228180b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:93:0e:a5:52:4e:9a:fc:ba:1c:87:a5:61:f8:
e2:76:8f:53:8a:c3:6f:7e:f2:dc:c4:1d:e7:d0:da:
a4:e6:93:d4:7f:f2:1c:e3:7f:e4:24:bc:46:49:35:
2a:4e:9e:20:3b:fe:ab:d4:80:a8:3f:24:6c:7a:22:
6c:55:9f:6b:dc:71:b9:fe:13:8e:0b:9c:47:dd:1d:
e6:9b:c6:cc:02:f0:a0:0c:e9:16:c0:6f:32:04:8f:
6d:db:87:ce:6a:39:95:8b:ac:26:58:88:68:4e:61:
4f:9c:13:cc:87:6c:df:d9:77:eb:5a:05:4d:84:fe:
38:e0:08:d2:9b:34:81:e9:dc:0e:0f:3a:b7:7d:e1:
a3:f6:73:13:71:ab:74:04:6b:bd:d1:8d:03:2c:dc:
3a:8c:1c:a2:21:74:fe:82:1e:d7:c4:fd:c8:03:2d:
24:cc:4a:23:56:8c:b8:ad:42:d0:cc:2e:11:bb:20:
7f:1a:1e:68:6c:ba:8e:b0:0d:c0:ee:4a:84:0f:bc:
d3:a7:45:a3:40:2c:70:70:ba:2e:bd:7f:81:8d:2b:
b2:6a:c3:0d:87:67:5d:3c:bf:02:ab:44:1b:18:dd:
08:b4:2a:ef:56:ce:5c:8e:5f:e8:70:45:04:e9:b1:
76:cd:d1:aa:4b:31:56:3e:43:7e:94:b7:54:8a:3e:
30:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6A:9C:7B:37:BD:72:78:40:54:F3:ED:38:AD:E9:34:22:28:18:0B
X509v3 Authority Key Identifier:
keyid:D2:76:C4:1A:21:76:25:4F:23:6D:23:D3:91:FD:56:09:06:19:67:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b2:5f:7e:0a:87:e4:b7:a4:bf:22:5d:13:22:d3:6a:51:94:
b3:a3:f9:5b:e5:67:2e:80:6a:8d:8d:b5:1a:f6:b1:52:05:bd:
c0:07:a4:ea:73:27:55:39:4b:33:f8:e0:08:83:c1:dc:52:55:
fc:70:89:b7:15:2c:c7:9f:bf:a2:a3:d4:82:41:9f:d0:d8:5b:
70:61:e5:55:71:0a:d0:df:5b:d3:74:fd:bd:7f:fc:a0:b5:a0:
f4:c6:27:33:b7:96:46:7b:db:04:d1:7d:d4:5c:6e:f4:4f:97:
4d:51:16:bc:9f:e4:38:d7:ec:93:6e:78:60:29:7a:b9:30:0f:
70:9b:02:69:7f:1b:8c:b4:56:a9:8a:2d:ed:5d:7e:16:45:3f:
7a:63:68:80:81:20:05:b1:20:d2:9a:01:b4:d1:7f:a1:1d:80:
da:20:a3:d7:f2:f1:84:b8:ce:b2:81:a9:b4:e5:73:68:a9:19:
1b:eb:d2:77:3b:69:a4:32:98:c4:95:a1:a3:19:11:c4:d9:d8:
2b:a7:36:f5:a4:9f:5e:9b:de:e8:77:dd:f9:70:e3:e8:a8:35:
e3:0c:1e:73:fc:45:15:18:57:46:a8:fd:fc:30:41:a8:8d:bc:
12:4f:4f:b3:ee:63:13:65:f9:d0:61:1b:b6:82:bd:5d:da:d9:
c6:c5:66:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:44:51 2026 by rpki-client