Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/0tMrwiV6rw7QfQB1wbXq1ebOVVQ.mft
File: 0tMrwiV6rw7QfQB1wbXq1ebOVVQ.mft (raw, json)
Hash identifier: 5RlFLEQdVrkosgp6HKfKEXYfj8J4x0XGhXW1dZz3AWU=
Subject key identifier: C7:99:94:B6:F9:7D:0B:B8:B5:4F:05:7F:46:AA:EF:A7:79:5C:34:A9
Authority key identifier: D2:D3:2B:C2:25:7A:AF:0E:D0:7D:00:75:C1:B5:EA:D5:E6:CE:55:54
Certificate issuer: /CN=d2d32bc2257aaf0ed07d0075c1b5ead5e6ce5554
Certificate serial: 01A03F3B528FFD5921B4112FCAF2802D7E36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0tMrwiV6rw7QfQB1wbXq1ebOVVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/0tMrwiV6rw7QfQB1wbXq1ebOVVQ.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 18:00:47 +0000
Manifest this update: Wed 26 Aug 2026 18:00:47 +0000
Manifest next update: Thu 27 Aug 2026 18:00:47 +0000
Files and hashes: 1: 0tMrwiV6rw7QfQB1wbXq1ebOVVQ.crl (hash: lZP0/FBSRpjSpDlci0a9r105ekr1LLiVOXq6tIVbyKw=)
2: ZBd-GAKowL0zojpkwKhaKC0AJLs.roa (hash: 4hNkeQn4ketgwaQRZcw8b08WLgmlbMExEizGIfxY14s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/0tMrwiV6rw7QfQB1wbXq1ebOVVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/0tMrwiV6rw7QfQB1wbXq1ebOVVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0tMrwiV6rw7QfQB1wbXq1ebOVVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 18:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:3b:52:8f:fd:59:21:b4:11:2f:ca:f2:80:2d:7e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2d32bc2257aaf0ed07d0075c1b5ead5e6ce5554
Validity
Not Before: Aug 26 18:00:47 2026 GMT
Not After : Aug 27 18:00:47 2026 GMT
Subject: CN=c79994b6f97d0bb8b54f057f46aaefa7795c34a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c3:52:3f:74:8d:78:c9:a7:6a:10:f6:58:cf:
b1:fa:aa:92:34:69:54:71:89:8b:c5:44:44:49:81:
d1:90:6c:2d:31:5a:71:28:f3:84:a9:b0:e6:12:59:
c9:c9:2c:f0:68:ef:51:fc:aa:3a:ae:80:55:ad:1c:
49:4d:12:87:46:57:16:34:23:28:61:85:d7:3a:c3:
1d:67:1b:21:af:7f:9f:89:75:8e:01:d2:48:cc:11:
f1:9f:97:f2:b0:ce:d6:12:5f:c1:5c:ea:f9:a9:46:
7f:c1:b2:13:10:8e:2a:cf:03:5e:fc:98:5d:a5:6c:
b1:83:6f:37:b8:72:bb:87:0b:f0:e9:05:a6:91:66:
71:33:02:e5:14:b1:34:57:83:c1:d5:00:47:2d:0a:
23:56:0a:36:31:e2:d2:95:14:c7:ef:e5:e8:48:ea:
f9:ee:ce:76:89:cf:b3:83:08:a5:b7:80:5c:64:d4:
4b:1d:4c:6c:cf:dc:92:fe:9d:6e:6c:74:21:f9:5f:
f4:85:a9:32:ca:a1:26:96:f8:92:fd:03:40:4d:72:
c3:65:aa:04:21:a4:a0:a9:6d:e4:74:9f:ef:04:45:
eb:1b:45:42:39:d9:d4:5d:68:01:a6:60:28:92:17:
41:9c:23:08:d0:a6:fe:6a:8c:3f:58:aa:3a:40:7a:
22:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:99:94:B6:F9:7D:0B:B8:B5:4F:05:7F:46:AA:EF:A7:79:5C:34:A9
X509v3 Authority Key Identifier:
keyid:D2:D3:2B:C2:25:7A:AF:0E:D0:7D:00:75:C1:B5:EA:D5:E6:CE:55:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tMrwiV6rw7QfQB1wbXq1ebOVVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/0tMrwiV6rw7QfQB1wbXq1ebOVVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/0tMrwiV6rw7QfQB1wbXq1ebOVVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:05:c9:34:08:1f:c2:70:bc:95:ed:61:c3:da:de:6a:6f:39:
51:5e:40:8c:c2:1a:f1:06:8c:2c:64:dd:78:41:65:65:29:27:
bb:c1:f1:b6:1c:19:81:ac:b5:6b:79:ae:45:f0:19:ee:b9:0e:
f8:ed:16:75:94:09:33:98:c7:81:7f:81:72:79:d2:de:24:b8:
a9:1b:8b:fd:95:f4:95:6f:29:33:fe:20:a9:52:f4:6f:3e:6d:
93:f4:a0:44:10:ca:50:41:fa:a0:d2:34:50:07:f8:4a:ca:f1:
70:cf:06:a7:dd:23:40:74:42:0f:06:e8:b6:15:bd:ea:27:75:
ea:4f:3f:93:cf:da:0e:65:ad:b9:fb:e4:44:74:4e:65:b2:f6:
de:5c:4f:11:5f:de:d3:c7:96:c7:c8:0b:bf:8c:99:9f:70:67:
42:c0:df:0b:6c:2f:a9:88:00:5e:ac:81:39:3a:8b:60:3a:72:
03:76:70:53:18:ec:df:bd:13:c1:29:39:2f:4d:3f:1d:e3:94:
9b:e8:c3:8d:5c:2d:e1:c3:fe:50:bf:35:79:ad:3e:9f:6b:62:
34:9f:b5:81:cd:b8:56:e3:c1:db:83:e9:9d:bc:88:4d:6e:79:
8d:fb:bf:ee:63:c3:88:cb:0a:35:a8:b5:2e:fb:d4:db:e9:8f:
9a:ac:33:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:50:19 2026 by rpki-client