Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
File: 0PbNMLTPoZPiJrupKC42aiKjEQ8.mft (raw, json)
Hash identifier: nEP2Q7aEvcDc9DefTPTwhf1LLKVAthNsPYyJJ9Dwhxs=
Subject key identifier: B7:5C:75:5D:AB:DB:28:D8:7C:B8:34:89:62:9F:AC:CB:B6:65:29:05
Authority key identifier: D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
Certificate issuer: /CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Certificate serial: 01A140F0F2F5C4D207103AF95C6814806A09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
Manifest number: 1AA8
Signing time: Thu 15 Oct 2026 19:01:34 +0000
Manifest this update: Thu 15 Oct 2026 19:01:34 +0000
Manifest next update: Fri 16 Oct 2026 19:01:34 +0000
Files and hashes: 1: 0PbNMLTPoZPiJrupKC42aiKjEQ8.crl (hash: ikmACZ7z6OrX3jS8joAHJ8SEjnKk3jtMqlzOBJIkVLM=)
2: 0g907WBXD4qZBS5Lv--lVG4AGmY.roa (hash: ADx0uWHqRsIMIEM4zrRsIaFkNMUykkO7aZ3mKfDHgOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:f0:f2:f5:c4:d2:07:10:3a:f9:5c:68:14:80:6a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Validity
Not Before: Oct 15 19:01:34 2026 GMT
Not After : Oct 16 19:01:34 2026 GMT
Subject: CN=b75c755dabdb28d87cb83489629faccbb6652905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:dd:9d:a5:d0:b8:5e:24:d9:e9:70:6c:ab:30:
61:91:2d:09:e8:06:7b:ff:7c:86:ba:cb:a7:ec:23:
4d:c6:00:ab:06:cb:9d:a2:aa:b2:bd:11:bd:d8:ac:
b8:fc:84:8b:82:c8:ee:92:3f:fc:01:3b:1d:a9:39:
75:f5:20:d9:01:49:5e:d8:42:2b:fb:55:c9:be:ca:
eb:5f:8e:05:7b:9e:5d:f5:33:32:49:cb:c0:b3:59:
94:9d:86:2d:18:79:2c:76:a1:37:b3:1c:58:2b:f8:
ee:56:9b:14:be:d7:10:c4:13:49:f3:99:eb:6f:67:
d4:52:83:55:da:a1:cf:d0:64:35:fb:87:85:01:46:
4b:64:6b:22:a9:94:e5:89:19:85:98:13:4c:70:b0:
65:37:b8:de:60:87:ba:b6:a1:80:55:09:f7:c4:6c:
3a:19:39:ec:47:11:fa:b0:0c:aa:15:ed:93:b4:e0:
20:49:02:2f:da:c0:88:26:49:ef:2f:33:ea:56:85:
2f:05:48:c3:fa:b6:1e:24:9e:74:ea:b2:93:98:79:
f4:3c:06:63:37:ef:aa:f3:0e:23:01:e4:e3:44:d3:
97:4b:fd:61:8e:45:11:7a:95:5d:29:96:09:f3:d1:
a4:82:51:ea:f2:f7:18:04:a5:79:db:ed:de:3c:12:
d1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5C:75:5D:AB:DB:28:D8:7C:B8:34:89:62:9F:AC:CB:B6:65:29:05
X509v3 Authority Key Identifier:
keyid:D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:95:da:ff:67:1a:65:35:72:32:52:f1:9d:bc:cc:08:0f:8c:
02:c5:c8:42:94:21:c3:37:f9:a4:76:59:2b:f0:4a:24:50:b1:
b4:13:1d:b8:4b:91:a2:89:87:4b:b7:f0:14:cd:8f:c1:ba:fa:
a3:82:01:c6:f7:6b:cf:47:a7:0e:b2:81:40:1d:e6:10:de:7b:
cd:fa:24:0d:6c:7e:33:4e:b4:d1:df:fe:1a:df:75:51:e0:25:
fe:fe:d7:e2:8e:f1:16:32:78:d3:31:c3:8d:4b:57:73:0c:f1:
fe:6d:35:6e:d0:a2:2d:f0:ab:6f:bb:fb:01:ac:e0:17:b1:23:
66:72:e9:92:f9:b7:7b:97:9c:53:57:2a:94:16:fa:d0:2f:8d:
ab:dd:28:7f:e0:75:cf:16:0c:54:84:4c:6a:b7:24:35:e5:23:
c6:d8:6a:51:be:40:3e:bb:e5:5d:a2:4e:a5:31:d1:a7:9a:04:
4b:56:7e:7d:51:d7:7f:bd:7c:8f:7e:b1:05:25:94:51:8e:aa:
5b:12:d7:eb:48:17:a7:66:25:d9:40:06:17:37:d1:ef:be:52:
47:2f:2f:ab:f4:aa:e3:05:78:10:6a:30:7c:58:24:92:3c:97:
4d:63:4b:8f:61:7d:b9:4e:09:9f:cc:8a:5e:67:1d:b8:b1:ac:
f9:f7:6c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:38:39 2026 by rpki-client