
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/9773dc-d8e8-480d-98f2-c00cbc1492bf/1/0phnd6RO0JQPKaeVx19Fpi9EuzM.mft
File: 0phnd6RO0JQPKaeVx19Fpi9EuzM.mft (raw, json)
Hash identifier: maDBoGxJO5PqtoLwD4tBfdAFNaPos5qgB7OdG8N1G1k=
Subject key identifier: 1C:40:14:65:1B:70:6C:C8:D8:FE:3C:3C:37:D9:25:C9:BF:2B:7F:8D
Authority key identifier: D2:98:67:77:A4:4E:D0:94:0F:29:A7:95:C7:5F:45:A6:2F:44:BB:33
Certificate issuer: /CN=d2986777a44ed0940f29a795c75f45a62f44bb33
Certificate serial: 01A13DB7F0E07A695A30ECE717FB8881B9C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0phnd6RO0JQPKaeVx19Fpi9EuzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9773dc-d8e8-480d-98f2-c00cbc1492bf/1/0phnd6RO0JQPKaeVx19Fpi9EuzM.mft
Manifest number: 0A8E
Signing time: Thu 15 Oct 2026 04:00:27 +0000
Manifest this update: Thu 15 Oct 2026 04:00:27 +0000
Manifest next update: Fri 16 Oct 2026 04:00:27 +0000
Files and hashes: 1: 0phnd6RO0JQPKaeVx19Fpi9EuzM.crl (hash: xsvTrsvRoGCPzy1bl30RopowyPeyHdUrDJeXvs1kSdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/9773dc-d8e8-480d-98f2-c00cbc1492bf/1/0phnd6RO0JQPKaeVx19Fpi9EuzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/9773dc-d8e8-480d-98f2-c00cbc1492bf/1/0phnd6RO0JQPKaeVx19Fpi9EuzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0phnd6RO0JQPKaeVx19Fpi9EuzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b7:f0:e0:7a:69:5a:30:ec:e7:17:fb:88:81:b9:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2986777a44ed0940f29a795c75f45a62f44bb33
Validity
Not Before: Oct 15 04:00:27 2026 GMT
Not After : Oct 16 04:00:27 2026 GMT
Subject: CN=1c4014651b706cc8d8fe3c3c37d925c9bf2b7f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:04:be:db:5e:44:50:5c:1a:26:64:77:bf:b6:
34:99:ad:ee:12:e2:94:a8:a2:73:8c:bf:53:61:1c:
68:4b:f2:19:69:46:3f:41:9e:26:87:74:1f:32:d5:
50:61:66:e7:ff:9b:0f:db:94:8d:af:9b:03:12:c7:
14:b4:65:93:d0:09:fe:1f:e6:b3:5a:00:87:36:fb:
fd:c9:34:58:de:38:54:ee:35:61:5f:73:72:57:45:
fe:ed:ac:77:c5:a0:31:a9:36:6d:de:e1:b9:1f:5a:
62:1a:59:6f:e1:a7:ec:30:19:72:af:d0:3d:de:89:
f9:f8:40:20:44:06:f4:ae:ad:41:40:e3:9a:f2:3a:
7e:7b:39:0f:71:0e:46:3b:58:5c:df:95:6a:8e:c6:
f9:ba:a3:24:1d:59:39:80:3b:9c:04:82:b6:fe:4e:
02:34:84:32:e8:8d:6f:06:bb:b4:fc:8f:13:2f:66:
7d:6a:99:e5:63:ed:40:a2:f3:66:7b:15:38:73:82:
79:93:a2:38:8c:2d:81:eb:9e:82:0f:90:50:b4:95:
ba:14:03:35:a3:2e:56:c0:78:11:e9:e7:c1:9e:90:
74:26:52:2d:34:c4:21:9c:5a:0a:6b:10:d9:c4:de:
5f:88:5b:cc:69:20:ae:a3:ee:54:91:e5:22:c9:13:
09:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:40:14:65:1B:70:6C:C8:D8:FE:3C:3C:37:D9:25:C9:BF:2B:7F:8D
X509v3 Authority Key Identifier:
keyid:D2:98:67:77:A4:4E:D0:94:0F:29:A7:95:C7:5F:45:A6:2F:44:BB:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0phnd6RO0JQPKaeVx19Fpi9EuzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9773dc-d8e8-480d-98f2-c00cbc1492bf/1/0phnd6RO0JQPKaeVx19Fpi9EuzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9773dc-d8e8-480d-98f2-c00cbc1492bf/1/0phnd6RO0JQPKaeVx19Fpi9EuzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:03:22:01:1e:74:19:61:19:20:da:5e:2d:d8:6b:f2:b2:98:
11:af:f2:93:6d:23:46:7a:cb:80:68:16:2c:e8:78:25:69:26:
bb:28:cb:52:d3:65:50:14:2c:82:6e:75:9b:ab:bc:c0:2e:59:
13:a8:52:2b:69:b4:fa:5f:79:89:9a:1b:26:e6:1b:4c:50:a6:
9f:fc:81:0d:c1:2f:fa:7f:ae:69:9b:5e:bd:53:8b:b7:62:33:
0d:11:bc:6c:c4:29:da:b9:1e:d2:7d:d9:dc:d5:30:b7:04:74:
a6:95:d8:49:7b:b5:83:96:86:ed:6a:67:7b:aa:bf:47:fe:e9:
89:bd:09:7c:a4:32:6f:87:9a:69:2c:b7:7c:bb:23:85:9d:bb:
aa:6b:d7:0a:1f:3a:74:96:de:d6:3a:10:ec:b3:a1:af:e9:c1:
c3:12:4b:3f:35:48:a2:27:fc:a5:1e:d2:c8:dc:a4:1b:23:bf:
2e:c9:97:3d:99:56:ff:31:a3:99:01:cf:43:73:91:06:4c:0d:
35:69:21:fa:8d:e2:04:c0:8f:fe:51:30:c6:1a:d6:96:8d:f0:
e6:90:cf:9e:41:0c:8e:1e:5a:25:05:a5:43:b1:2a:62:00:43:
b8:a0:3d:39:37:64:30:d1:16:fe:19:88:bd:c7:fe:07:48:92:
fb:c1:34:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:26:56 2026 by rpki-client