Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
File: 0rtm-96q__Q7llCx9svk8p7a9Yw.mft (raw, json)
Hash identifier: MvfE2kGG32c9Lxf0Irkpb2ZAznZjYVms12aR9t7LuiQ=
Subject key identifier: 14:91:4B:95:3E:EB:20:15:8F:25:E4:D0:2D:92:A5:AA:6E:EE:29:D2
Authority key identifier: D2:BB:66:FB:DE:AA:FF:F4:3B:96:50:B1:F6:CB:E4:F2:9E:DA:F5:8C
Certificate issuer: /CN=d2bb66fbdeaafff43b9650b1f6cbe4f29edaf58c
Certificate serial: 01A07096657F9B502C55B039B33CCA0DC44A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
Manifest number: 1A3C
Signing time: Sat 05 Sep 2026 08:01:39 +0000
Manifest this update: Sat 05 Sep 2026 08:01:39 +0000
Manifest next update: Sun 06 Sep 2026 08:01:39 +0000
Files and hashes: 1: 0rtm-96q__Q7llCx9svk8p7a9Yw.crl (hash: knUlE3wUQ0oKaGyfAivdxGBeKXGJt4NgmQPXCF6v0Fo=)
2: eIIxqZskipAH_XpPhKjF9X-64rY.asa (hash: VTutP00cFHBg9CdpBAccd7neZzunWQqoCOHiZUhg2dY=)
3: eqRZK_JGFaT4pOqnhAyJvjkUCoA.roa (hash: jItvJdxi3E9SOd6i/gjBeEHoNNhvY/8u3V8hrLU5X7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:70:96:65:7f:9b:50:2c:55:b0:39:b3:3c:ca:0d:c4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2bb66fbdeaafff43b9650b1f6cbe4f29edaf58c
Validity
Not Before: Sep 5 08:01:39 2026 GMT
Not After : Sep 6 08:01:39 2026 GMT
Subject: CN=14914b953eeb20158f25e4d02d92a5aa6eee29d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:80:18:50:ac:98:59:35:39:29:58:55:c9:cc:
22:e1:ee:b0:19:48:fc:3e:66:2e:ed:03:5b:31:eb:
69:65:f7:82:75:70:a7:de:ec:6e:88:15:0e:ce:9b:
bc:c5:c6:7d:63:77:0b:aa:dc:37:63:69:7f:40:51:
6e:ab:e4:de:f5:30:d9:59:8b:c6:12:43:50:61:3d:
69:fe:d0:0c:9b:d1:30:84:56:5b:1d:18:60:d2:d5:
da:70:98:bb:82:92:ef:be:bc:67:94:5d:2c:1c:eb:
56:1d:10:03:68:e2:b3:f4:be:59:59:d0:73:e0:6e:
3b:38:99:af:1b:51:aa:06:ba:a1:2d:cb:e9:e8:c0:
60:9d:0f:3f:21:01:12:54:78:62:97:77:bc:b0:57:
bc:43:63:dd:37:04:36:8f:c7:f0:60:2e:3e:f7:b7:
fd:82:ae:06:98:09:2a:a3:b2:13:3b:59:5a:9b:1b:
41:87:36:ed:16:90:ff:91:69:31:a3:ea:bf:a2:0a:
15:53:04:a9:43:5a:06:bf:0e:bb:23:40:0c:a4:c3:
a0:95:0d:86:e3:12:d5:1d:76:30:c5:6c:4a:15:0f:
78:05:ca:cd:b6:57:50:5b:78:bc:b3:da:b4:72:a6:
d5:38:0c:5a:a0:08:0b:c5:09:68:67:d1:cd:dc:cb:
f4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:91:4B:95:3E:EB:20:15:8F:25:E4:D0:2D:92:A5:AA:6E:EE:29:D2
X509v3 Authority Key Identifier:
keyid:D2:BB:66:FB:DE:AA:FF:F4:3B:96:50:B1:F6:CB:E4:F2:9E:DA:F5:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:7a:ab:8a:e9:f5:e0:82:12:77:fc:ef:36:90:66:cc:10:12:
d1:14:ac:d6:d9:ad:2c:e1:15:34:12:91:5e:09:f6:09:53:70:
8f:36:72:7f:cf:ab:f7:b9:b8:7a:a8:4b:cc:28:be:6c:f3:fb:
f0:85:97:25:cb:a9:5c:fc:94:95:88:7b:ab:d0:09:94:2d:fc:
9b:8d:ee:29:dc:34:14:ef:61:8b:3d:18:c3:08:17:a9:bb:d4:
b4:d7:38:88:11:9c:c8:f8:b5:f8:e4:22:09:d8:fa:62:1e:44:
27:05:46:ef:c4:5f:61:58:0e:50:af:d3:bd:0f:9f:08:2a:4b:
e6:42:b7:a3:12:47:ef:90:51:df:1d:1d:2a:f0:3f:e3:a4:35:
dd:71:41:e8:8b:18:89:be:c8:ce:3c:e3:de:95:f2:f5:fe:99:
83:48:c7:70:98:fe:59:b9:58:49:3f:87:58:7a:8d:11:63:66:
bf:9d:37:49:b2:8f:e0:6b:13:ff:fc:1c:43:35:2e:6d:c6:46:
3e:c6:97:4e:7f:09:ec:4a:ee:e0:63:01:02:c2:06:b0:06:61:
e1:7c:77:c0:f3:58:32:d0:36:86:33:8e:56:f5:76:b3:85:fb:
76:6a:c7:50:c3:c0:23:34:9b:4f:76:a3:ef:e8:44:4e:1c:aa:
fa:fc:e6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 11:02:13 2026 by rpki-client