Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
File: 0vHIhC58-JGyNNOh4OLg73PoQqo.mft (raw, json)
Hash identifier: N0D4hZfR4LCPqzJ0Lk54pPdeJZWOkJdufY7FDPmTr44=
Subject key identifier: A7:D8:01:13:F2:5B:6A:09:85:3F:94:DA:E7:E5:9A:B2:49:93:65:23
Authority key identifier: D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
Certificate issuer: /CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Certificate serial: 01A0D9F1BCFF96B203941909B45D66FBB0CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
Manifest number: 1A73
Signing time: Fri 25 Sep 2026 19:01:33 +0000
Manifest this update: Fri 25 Sep 2026 19:01:33 +0000
Manifest next update: Sat 26 Sep 2026 19:01:33 +0000
Files and hashes: 1: 0vHIhC58-JGyNNOh4OLg73PoQqo.crl (hash: Q2IIN5r0p3R36mxE6bOdo84JZ/A6Y4BTNdU+Jfzq/To=)
2: l9fT_tPQilc8kDDpXdmC63EbBTU.roa (hash: e0hhcAS9+zmOEL/7aF5yJ1rOw5m87GlUo2fUEzHI/tc=)
3: zZqdbpX91TjBbrVKBU--OsfsNgs.roa (hash: 5bqwY0fuE7qADoXdmI9CeMVMqqLQteAK+rBOtRg2eMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f1:bc:ff:96:b2:03:94:19:09:b4:5d:66:fb:b0:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Validity
Not Before: Sep 25 19:01:33 2026 GMT
Not After : Sep 26 19:01:33 2026 GMT
Subject: CN=a7d80113f25b6a09853f94dae7e59ab249936523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:62:9f:0e:f5:f9:30:f4:f7:05:d1:1d:ba:6a:
88:a8:64:c9:d0:16:62:24:51:a4:14:af:35:5e:a3:
fa:b8:75:31:de:3f:ae:3d:4c:f2:52:d0:68:15:b7:
da:25:5d:b5:ad:df:4c:61:3a:b2:55:ca:3f:05:0e:
7d:53:a6:83:0d:e9:d3:f2:62:d6:15:96:85:67:d3:
a4:ee:1b:31:6c:2e:cf:73:b5:fa:60:6a:a7:53:5c:
06:71:76:0f:6f:d1:51:47:42:cc:63:8a:12:bd:ec:
d0:da:7b:dc:48:3e:96:17:3d:e6:70:ce:52:0d:ef:
10:2f:ee:7e:01:06:c4:66:d4:98:20:f7:5e:b9:6c:
94:0f:63:e1:82:48:95:cf:79:e1:31:e8:6e:46:5d:
50:64:16:f7:fc:9e:a1:68:c2:97:f6:ec:b1:93:aa:
79:c0:45:6e:db:03:54:90:4b:98:b6:da:c1:4c:36:
a7:eb:ee:ed:d6:4d:f3:8d:97:b6:d0:22:0d:49:1d:
0d:31:ec:19:e5:7e:e8:cf:35:17:32:cc:a4:dc:c4:
18:72:70:f3:e7:28:e5:76:99:b5:4e:1e:98:1b:a5:
f5:78:73:0f:a0:dc:ef:51:ab:d0:a6:30:56:88:66:
13:3a:7d:4b:71:97:9d:b9:4f:10:55:87:11:a0:eb:
13:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D8:01:13:F2:5B:6A:09:85:3F:94:DA:E7:E5:9A:B2:49:93:65:23
X509v3 Authority Key Identifier:
keyid:D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d7:40:3d:54:ae:04:c1:ef:85:45:81:f6:5c:26:1a:e0:6f:
f1:8d:80:e5:1f:c5:17:87:6a:d5:e8:67:49:70:5a:fb:01:6c:
aa:68:7d:85:ce:ec:f1:6d:f4:b3:43:de:ff:f5:c2:48:e3:a6:
43:b2:e9:d7:57:e4:2f:cc:ef:5b:b0:eb:64:59:35:95:52:d8:
23:e2:68:d2:81:ac:79:d9:7f:33:b8:a0:ab:f6:03:25:07:51:
51:64:db:ce:a0:93:11:75:af:ab:85:b3:b7:1e:5a:75:75:7c:
09:dc:66:f7:2e:a3:e5:61:9c:72:fa:ce:43:fa:38:32:50:02:
cf:b9:9f:3d:98:21:54:18:91:76:7b:e2:1f:08:88:5e:20:58:
21:a2:d4:d7:92:c8:3e:c2:f0:95:0d:9e:0b:33:d9:03:95:f7:
2c:07:b7:b6:b9:d1:cc:6d:40:b6:bd:b8:fc:d9:ce:d4:97:23:
cf:04:66:70:80:12:95:32:98:84:e2:99:c2:13:10:c4:44:26:
4f:d5:5f:df:1b:22:f1:42:61:48:63:01:61:c3:ed:d6:71:e7:
0f:08:2b:8e:27:60:94:ae:7b:46:e9:2b:5e:57:5d:fe:ad:52:
68:a8:13:f2:c9:b8:2a:e8:06:4e:fd:ad:64:05:4a:94:e6:15:
a1:86:ac:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:56:19 2026 by rpki-client