Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
File: 0SFb_EiHbDZRg1bv1uKAJVod7jw.mft (raw, json)
Hash identifier: AfnueJ/D11bA4yKm2NCAc8ITz2sRnEATstd1DUf9jE8=
Subject key identifier: 8A:13:94:0A:2B:90:54:F7:2E:F4:D6:FC:FF:F9:D4:0E:0B:9E:4E:25
Authority key identifier: D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
Certificate issuer: /CN=d1215bfc48876c36518356efd6e280255a1dee3c
Certificate serial: 01A1141800E394092162E5ABE6582B3AAD5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
Manifest number: 120A
Signing time: Wed 07 Oct 2026 02:01:19 +0000
Manifest this update: Wed 07 Oct 2026 02:01:19 +0000
Manifest next update: Thu 08 Oct 2026 02:01:19 +0000
Files and hashes: 1: 0SFb_EiHbDZRg1bv1uKAJVod7jw.crl (hash: mPa4KlyI7bVxw48dbTveaziQYKMF/6sRjC9M68VHL58=)
2: V85y9LeDqS5T_7Jp3kZ3KBVJA_Q.roa (hash: dqwbGll0ZQp3qCkA8FJVoE9Przjq1Z276l8w8WiwoPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:14:18:00:e3:94:09:21:62:e5:ab:e6:58:2b:3a:ad:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1215bfc48876c36518356efd6e280255a1dee3c
Validity
Not Before: Oct 7 02:01:19 2026 GMT
Not After : Oct 8 02:01:19 2026 GMT
Subject: CN=8a13940a2b9054f72ef4d6fcfff9d40e0b9e4e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e1:94:67:bf:28:48:e2:0b:cc:54:4d:ad:7a:
8a:50:48:0c:a3:46:69:3e:52:b1:94:54:6c:e0:32:
f3:7b:14:c4:af:24:af:a6:9c:3a:b0:8a:bc:a8:f8:
cc:ce:32:56:e1:02:e2:76:6b:68:20:27:1b:7e:45:
c4:4a:60:64:83:1e:70:9b:bc:e0:04:23:3f:3e:ef:
b6:2c:64:eb:a3:89:0e:df:9c:06:b8:cf:0e:d9:c4:
3a:ea:77:da:a5:02:57:56:78:f1:e0:41:38:c6:fb:
1e:ce:43:83:2f:8f:0e:ab:92:37:56:20:6b:2d:6c:
a2:3a:04:3c:0e:4b:24:9e:fc:b9:59:c7:d4:49:2c:
e1:a1:32:75:7d:bf:29:af:f4:5b:e6:57:f2:a9:1a:
77:6a:52:8a:57:81:7f:db:88:79:8a:7a:8b:9c:9e:
ab:ca:d2:5b:0b:35:34:2b:aa:0f:1b:f1:46:1f:08:
08:3c:4f:f3:a2:72:65:e9:10:49:48:05:b1:34:66:
47:95:31:9b:73:6d:a3:14:c6:18:6b:22:40:c2:09:
38:3c:79:6e:47:f1:1d:fd:fd:4d:fe:b4:8d:16:3e:
b8:9c:0a:7a:d1:e2:e3:cf:2f:7c:0a:d2:6b:52:72:
f3:b1:d7:a7:15:ba:fc:52:7a:56:90:6f:9c:97:69:
92:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:13:94:0A:2B:90:54:F7:2E:F4:D6:FC:FF:F9:D4:0E:0B:9E:4E:25
X509v3 Authority Key Identifier:
keyid:D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:3f:17:ce:e8:00:32:18:51:17:60:b6:74:90:0a:10:2f:38:
fb:2a:a3:15:3a:1e:e2:51:9b:7e:d2:58:61:7d:81:f3:c1:a6:
8c:ac:20:92:1a:28:e8:d5:85:a7:21:58:fb:e7:13:ff:58:00:
9f:ab:80:85:0e:d6:a4:a2:36:e5:3a:6d:95:08:8c:1c:1d:0f:
fe:46:bd:d6:26:f8:f8:80:84:e5:a2:4a:a4:8d:5b:ec:a6:76:
e2:0e:d8:1e:05:9e:38:f1:60:99:00:b5:f4:54:df:40:95:22:
f8:ca:d8:4c:2a:6e:bd:70:7c:4f:fc:04:fa:20:f4:33:e7:fc:
c8:3c:93:84:02:70:a1:30:ad:23:c3:96:23:2c:71:11:4d:1e:
3e:46:15:08:4a:87:3c:7d:67:a3:de:23:4f:93:37:78:c3:3b:
05:fd:34:69:c8:4d:d9:df:71:b9:85:4e:72:c3:c3:46:8a:cc:
0d:68:c0:9c:0a:e0:a2:cf:90:06:8c:0b:48:86:51:fa:61:46:
a9:29:89:7a:74:bf:0b:58:c6:78:9a:bf:4e:06:99:50:50:a8:
37:6f:c0:22:3b:27:30:80:82:20:ca:a7:1d:ef:f0:38:ba:0a:
96:03:bd:9f:96:93:04:97:0d:8f:23:b0:2e:ce:b0:aa:1e:14:
02:03:5a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:56:49 2026 by rpki-client