Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.mft
File: 0CIVj9T34wlqA33Dz6vY807qq9E.mft (raw, json)
Hash identifier: I/JhcXwUjWX4Hi5nyWl2ayBSu3whsYC1zxDDW5qr20A=
Subject key identifier: 4B:EC:02:69:0D:DC:E7:35:8C:D7:1D:29:FF:C3:57:D0:53:85:BF:D5
Authority key identifier: D0:22:15:8F:D4:F7:E3:09:6A:03:7D:C3:CF:AB:D8:F3:4E:EA:AB:D1
Certificate issuer: /CN=d022158fd4f7e3096a037dc3cfabd8f34eeaabd1
Certificate serial: 01A181BDE809BD717307E38C11BC53B9974D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CIVj9T34wlqA33Dz6vY807qq9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.mft
Manifest number: 0141
Signing time: Wed 28 Oct 2026 09:01:08 +0000
Manifest this update: Wed 28 Oct 2026 09:01:08 +0000
Manifest next update: Thu 29 Oct 2026 09:01:08 +0000
Files and hashes: 1: 0CIVj9T34wlqA33Dz6vY807qq9E.crl (hash: lRtPvaR/VBKGT4UVvv5+PM/mRlkgjtx1ZBZz1yhtdkw=)
2: Bz5NRIKEHWfWVwIKVd1EZ3eOmwc.roa (hash: xvKgGhY+ZlcBTXkjAQHJhU0l6IZYcdXuey6wO6lkMfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CIVj9T34wlqA33Dz6vY807qq9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:bd:e8:09:bd:71:73:07:e3:8c:11:bc:53:b9:97:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d022158fd4f7e3096a037dc3cfabd8f34eeaabd1
Validity
Not Before: Oct 28 09:01:08 2026 GMT
Not After : Oct 29 09:01:08 2026 GMT
Subject: CN=4bec02690ddce7358cd71d29ffc357d05385bfd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1c:a4:43:72:ab:ad:53:75:f3:b2:27:e7:64:
6e:b1:bd:36:8b:08:e8:3a:69:85:f2:80:c0:ed:87:
22:a0:62:60:d2:45:d1:e6:45:09:ae:e3:ef:ce:a2:
e8:0d:e3:90:3c:61:1a:54:5b:9d:b6:17:ec:ad:6d:
cc:4c:66:96:c6:77:72:f0:f6:b3:03:5f:b9:78:f7:
03:93:bd:54:1f:67:6d:ed:5d:d1:2d:11:ae:ac:ab:
82:8e:b7:5b:94:e2:d0:3a:7a:5d:ff:d7:ce:ae:62:
34:a8:4a:12:70:37:85:4a:01:ca:b6:ae:5a:77:ba:
82:cc:9a:44:46:0d:b3:dd:73:27:cd:22:57:95:47:
b8:6e:d1:f2:1b:b9:ef:51:f9:43:62:ca:55:3d:29:
5d:13:4e:fc:91:ff:97:35:3b:9f:51:56:94:0e:cc:
65:ed:01:c7:08:75:74:66:e3:14:dd:ec:ba:7a:6d:
57:df:64:36:7e:40:e6:cd:94:56:06:f1:9b:5c:26:
e5:15:92:6e:17:13:41:0e:57:f3:20:01:92:06:df:
91:43:a0:b5:b3:0d:0d:9e:d4:7b:0a:01:b1:cb:99:
e6:b2:ed:3d:ed:a2:93:fe:3f:ef:94:c5:5b:e7:c2:
08:8d:29:f0:48:3b:ef:47:49:23:75:29:3d:b3:52:
cf:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:EC:02:69:0D:DC:E7:35:8C:D7:1D:29:FF:C3:57:D0:53:85:BF:D5
X509v3 Authority Key Identifier:
keyid:D0:22:15:8F:D4:F7:E3:09:6A:03:7D:C3:CF:AB:D8:F3:4E:EA:AB:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CIVj9T34wlqA33Dz6vY807qq9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:7f:b2:7a:98:36:15:3f:e4:69:04:48:ac:8d:ac:50:80:92:
9d:ff:c5:06:df:db:ae:6c:f3:8e:bc:ab:2e:85:43:3b:82:1a:
93:89:f9:d9:5f:cc:13:34:88:a2:41:de:c7:69:d5:e8:18:e3:
bd:7d:d7:51:b4:01:64:dd:e8:ca:f7:c0:34:20:bc:8b:d6:71:
49:d2:89:4d:19:3a:b9:81:74:61:c5:ed:99:75:e0:c7:75:61:
fc:e1:54:e6:79:59:fb:87:33:45:9b:59:50:80:5c:f9:55:24:
f4:27:ba:b3:43:af:6a:48:34:ce:10:db:4d:1b:86:6d:f2:9f:
3b:6c:7b:83:88:cb:d2:b2:5c:74:79:8e:70:95:63:d6:4f:22:
aa:2d:b4:b3:86:04:02:73:76:51:5a:40:0b:f8:f4:16:3a:c0:
4f:6a:e3:be:62:af:d2:1b:e1:f3:b4:4a:67:81:b9:70:47:06:
5d:29:23:de:75:68:f6:c5:32:d2:e7:d2:4b:3a:1b:b2:74:79:
d7:22:38:9c:04:cd:ec:42:f4:1e:f4:36:dc:c9:56:e2:23:5b:
2f:59:21:bd:be:03:e1:46:ce:cc:50:81:25:02:db:ba:60:10:
2b:af:f8:62:d0:ac:6e:05:eb:01:67:a4:a7:fb:27:e0:13:2d:
26:6a:40:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:06:49 2026 by rpki-client