Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft
File: 0c9dkt13uO9-1s1XyqoQr9mOnlo.mft (raw, json)
Hash identifier: 1K6r5wZDc0yqHvO8wPAUXin7B+BybgjbULC75smNeMU=
Subject key identifier: 4F:EE:B3:92:43:30:9C:B2:47:3A:0F:44:0A:FF:88:50:C9:F9:9F:1D
Authority key identifier: D1:CF:5D:92:DD:77:B8:EF:7E:D6:CD:57:CA:AA:10:AF:D9:8E:9E:5A
Certificate issuer: /CN=d1cf5d92dd77b8ef7ed6cd57caaa10afd98e9e5a
Certificate serial: 01A1784C40B377261BB09505F18A0CCA1FC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0c9dkt13uO9-1s1XyqoQr9mOnlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft
Manifest number: 0348
Signing time: Mon 26 Oct 2026 13:00:25 +0000
Manifest this update: Mon 26 Oct 2026 13:00:25 +0000
Manifest next update: Tue 27 Oct 2026 13:00:25 +0000
Files and hashes: 1: 0c9dkt13uO9-1s1XyqoQr9mOnlo.crl (hash: 8RGeuw2GIRCf7c3MSSG4hfcjU2cwJdKgiKvRBVPqmQ0=)
2: aRPei__YV55E5LayLWDZlLmCI2M.roa (hash: Cq96j35j1pjMRWQ8I4PQ7Ruzt7oVF+lvmFKi5QfS62o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0c9dkt13uO9-1s1XyqoQr9mOnlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:4c:40:b3:77:26:1b:b0:95:05:f1:8a:0c:ca:1f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1cf5d92dd77b8ef7ed6cd57caaa10afd98e9e5a
Validity
Not Before: Oct 26 13:00:25 2026 GMT
Not After : Oct 27 13:00:25 2026 GMT
Subject: CN=4feeb39243309cb2473a0f440aff8850c9f99f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e8:d1:ed:9a:da:a1:e6:48:0f:35:8f:b8:0e:
3c:66:35:a5:b8:9b:f1:df:ee:32:31:4d:c9:57:d8:
58:87:88:61:41:74:e7:3a:05:c6:51:f1:a9:d3:4f:
dc:84:b5:f7:30:a0:3a:3b:a6:5a:e7:dd:07:ad:fd:
49:ca:b2:16:24:e3:15:a6:d9:bd:3a:00:75:9c:97:
16:08:fb:26:50:37:fb:13:cc:f3:1f:cc:9d:ea:89:
81:d2:ae:fd:7c:4c:a3:58:8a:00:ac:6c:b0:4c:6d:
09:51:ec:32:08:d8:e2:3e:27:45:03:f5:31:44:91:
3d:de:7d:0f:d4:9f:c5:c8:75:81:28:bc:2c:a6:04:
e3:70:ca:34:32:74:d2:78:86:40:1e:03:ab:fc:94:
df:2d:10:b6:41:a8:43:65:ad:cc:bb:49:28:60:66:
ff:6d:c8:32:56:4a:0f:3a:07:85:75:38:92:82:79:
1d:6f:36:b2:a8:76:3e:6c:fb:41:bc:89:3f:be:1d:
36:3b:bb:46:f1:de:60:17:60:d4:a1:26:61:7e:5a:
a8:db:c9:3b:9b:60:a9:11:49:af:8a:cb:3c:d5:4c:
71:23:f6:d5:10:f6:b5:07:dc:b0:80:dd:96:88:50:
44:07:ea:56:4b:72:e9:cf:4c:98:ba:80:37:a7:fe:
1b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:EE:B3:92:43:30:9C:B2:47:3A:0F:44:0A:FF:88:50:C9:F9:9F:1D
X509v3 Authority Key Identifier:
keyid:D1:CF:5D:92:DD:77:B8:EF:7E:D6:CD:57:CA:AA:10:AF:D9:8E:9E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c9dkt13uO9-1s1XyqoQr9mOnlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:7e:67:b5:32:e4:29:e0:3f:ec:50:fe:3f:00:f3:c6:dd:d0:
74:2a:77:4c:bd:cc:6e:25:b0:a0:42:5b:55:66:2d:79:0d:bc:
5c:c5:cd:e1:e5:4c:6e:76:4e:0d:7d:a9:aa:54:6e:a4:41:51:
d2:d3:ad:66:f2:5f:9f:90:e0:16:3d:95:22:72:6f:3d:26:d1:
a9:6d:99:c0:74:03:95:f3:46:19:ba:3e:35:37:9c:5f:96:23:
ce:57:4a:44:ae:6b:17:f6:ca:fc:d2:7b:d3:70:4f:21:e0:25:
22:b3:81:4a:54:4b:33:c5:b4:e5:6a:89:1c:12:fe:97:88:f1:
7e:21:ae:e5:e9:ab:0d:80:82:3d:23:17:71:54:4c:73:6a:f4:
85:00:70:3a:ce:84:9a:04:24:ec:f1:63:6e:6f:e9:f4:3d:14:
d4:54:92:0b:8c:26:bb:fa:8d:ee:47:81:24:4b:89:d9:f0:5e:
d5:3a:a1:19:86:7b:0b:b2:f7:26:93:4d:e6:6b:41:af:1b:fe:
61:2e:d1:bc:05:89:da:63:bd:f6:58:57:7d:81:f2:31:98:af:
89:e9:d2:2d:a4:5f:fe:3f:14:21:68:35:ba:80:58:93:72:48:
84:19:7a:b5:9f:43:31:9f:8b:09:c5:09:fb:7f:f1:ea:f5:e3:
43:aa:3e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:27:24 2026 by rpki-client