Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
File: 0DjDOLEo-Drewvadk8MsU1PKA5g.mft (raw, json)
Hash identifier: hNVMmgXV06bvhsh1lWwd+Y4VDZthXlETFJDicRaGggo=
Subject key identifier: CA:E5:79:AB:26:86:C9:8D:09:A0:52:92:57:BB:CF:FF:77:0C:20:18
Authority key identifier: D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
Certificate issuer: /CN=d038c338b128f83adec2f69d93c32c5353ca0398
Certificate serial: 01A0D19257174E1A4E2AA92454CA3E9BED0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
Manifest number: 170A
Signing time: Thu 24 Sep 2026 04:00:23 +0000
Manifest this update: Thu 24 Sep 2026 04:00:23 +0000
Manifest next update: Fri 25 Sep 2026 04:00:23 +0000
Files and hashes: 1: 0DjDOLEo-Drewvadk8MsU1PKA5g.crl (hash: DcjuHfwp/WE2o/+B48b4prs7mRYXDcTFUf3QfeRwn1Q=)
2: iYtloRWl9kFypd8JJUfmPgfj4cA.roa (hash: S73CmXUZ6HVY4mwA83JVTETkq549rHQpfRMzqNjQiJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:57:17:4e:1a:4e:2a:a9:24:54:ca:3e:9b:ed:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d038c338b128f83adec2f69d93c32c5353ca0398
Validity
Not Before: Sep 24 04:00:23 2026 GMT
Not After : Sep 25 04:00:23 2026 GMT
Subject: CN=cae579ab2686c98d09a0529257bbcfff770c2018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e3:44:85:0c:bc:54:a7:42:75:da:61:3f:f4:
ba:a4:29:45:41:62:79:e4:90:ef:92:0f:08:f9:3d:
5e:d7:1a:52:bb:fc:8c:28:c9:97:4e:d5:f7:61:d6:
a6:e3:ea:3c:12:c7:16:ea:e9:d1:2f:f6:06:70:a2:
18:21:07:05:63:7d:8f:79:fa:3b:4c:8f:23:06:b2:
14:da:67:b8:87:a2:25:83:13:30:cf:b0:2c:fb:b4:
5c:a4:ff:73:b7:81:cd:30:30:c1:f3:d5:b7:d8:91:
28:7e:fb:f9:d2:7a:0d:cb:61:a4:16:2d:0d:f3:c6:
77:74:72:db:51:bb:43:5f:b8:c3:ec:24:ca:d4:b1:
cf:40:d5:b6:34:20:16:7b:bf:c0:11:29:cd:a0:30:
55:b0:86:8f:45:4b:5f:00:90:3d:f8:d6:36:62:59:
4e:b2:89:44:2c:60:79:cc:65:c0:bd:7e:64:ca:50:
96:3f:f5:e1:48:d4:7e:22:24:cd:db:22:4a:df:22:
a2:9b:ee:30:d0:3f:da:0c:ef:0a:2a:4a:f8:0a:5f:
18:cf:bf:ed:8c:ff:a5:03:b7:67:61:a0:a8:a0:f2:
6d:ee:99:9a:95:f8:e0:dc:07:7f:df:fe:f2:1f:17:
fb:e7:c8:a0:51:1f:68:13:90:aa:9d:4a:f8:71:fa:
80:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E5:79:AB:26:86:C9:8D:09:A0:52:92:57:BB:CF:FF:77:0C:20:18
X509v3 Authority Key Identifier:
keyid:D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:dd:55:61:d6:53:58:a8:a5:3d:bc:e6:db:6b:65:c6:e0:54:
ab:65:a8:43:7a:ba:bb:30:ea:c1:5a:96:80:f0:df:74:61:35:
59:bd:1b:77:98:be:cb:22:1d:0f:86:2f:53:2c:67:1f:6d:aa:
a9:5c:56:96:4d:0e:87:8f:14:f0:e4:2e:0d:fa:e6:72:a9:9b:
5f:e7:89:35:e3:5e:d5:39:71:71:da:be:64:68:90:65:22:2e:
34:00:a3:6c:36:bc:56:b2:08:1c:64:5b:1a:17:78:0d:1d:94:
e6:39:ba:5b:07:17:ea:02:29:05:2b:5a:6d:e3:ab:66:53:a6:
6d:07:e1:f2:8a:89:fc:f6:83:88:47:b6:46:3a:a0:ae:d9:db:
ac:02:50:12:ba:5f:c8:be:85:cf:c7:cc:10:ce:76:73:a5:a1:
3f:da:8e:a2:d1:6d:72:57:82:ec:1b:a0:ee:07:61:2b:fb:42:
f6:6a:6b:b7:63:b5:c5:36:31:09:1c:58:91:a9:7f:65:a2:23:
8b:fe:57:23:fb:0c:9f:d1:12:42:51:a4:31:48:33:98:8b:fc:
97:2b:d0:43:1b:ac:a3:8d:22:b1:26:35:42:1c:7c:df:cb:0d:
63:ad:cc:46:1e:17:74:ea:5b:3b:ff:73:bd:9a:34:fd:61:17:
da:e7:28:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRklcXThpOKqkkVMo+m+0NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMzhjMzM4YjEyOGY4M2FkZWMyZjY5ZDkzYzMyYzUzNTNj
YTAzOTgwHhcNMjYwOTI0MDQwMDIzWhcNMjYwOTI1MDQwMDIzWjAzMTEwLwYDVQQD
EyhjYWU1NzlhYjI2ODZjOThkMDlhMDUyOTI1N2JiY2ZmZjc3MGMyMDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtONEhQy8VKdCddphP/S6pClFQWJ5
5JDvkg8I+T1e1xpSu/yMKMmXTtX3Ydam4+o8EscW6unRL/YGcKIYIQcFY32Pefo7
TI8jBrIU2me4h6IlgxMwz7As+7RcpP9zt4HNMDDB89W32JEofvv50noNy2GkFi0N
88Z3dHLbUbtDX7jD7CTK1LHPQNW2NCAWe7/AESnNoDBVsIaPRUtfAJA9+NY2YllO
solELGB5zGXAvX5kylCWP/XhSNR+IiTN2yJK3yKim+4w0D/aDO8KKkr4Cl8Yz7/t
jP+lA7dnYaCooPJt7pmalfjg3Ad/3/7yHxf758igUR9oE5CqnUr4cfqANwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMrleasmhsmNCaBSkle7z/93DCAYMB8GA1UdIwQY
MBaAFNA4wzixKPg63sL2nZPDLFNTygOYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMERqRE9MRW8tRHJld3ZhZGs4TXNVMVBLQTVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS85MjVmOTEtMzBjNS00YTZiLWExNDkt
OWJmOGIxZWYyZTk2LzEvMERqRE9MRW8tRHJld3ZhZGs4TXNVMVBLQTVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS85MjVmOTEtMzBjNS00YTZiLWExNDktOWJmOGIxZWYyZTk2
LzEvMERqRE9MRW8tRHJld3ZhZGs4TXNVMVBLQTVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtt1VYdZT
WKilPbzm22tlxuBUq2WoQ3q6uzDqwVqWgPDfdGE1Wb0bd5i+yyIdD4YvUyxnH22q
qVxWlk0Oh48U8OQuDfrmcqmbX+eJNeNe1Tlxcdq+ZGiQZSIuNACjbDa8VrIIHGRb
Ghd4DR2U5jm6WwcX6gIpBStabeOrZlOmbQfh8oqJ/PaDiEe2RjqgrtnbrAJQErpf
yL6Fz8fMEM52c6WhP9qOotFtcleC7Bug7gdhK/tC9mprt2O1xTYxCRxYkal/ZaIj
i/5XI/sMn9ESQlGkMUgzmIv8lyvQQxuso40isSY1Qhx838sNY63MRh4XdOpbO/9z
vZo0/WEX2ucobg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:15:33 2026 by rpki-client