Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.mft
File: 01VdufbNy92wUqRTSO8Nam1bwcE.mft (raw, json)
Hash identifier: /FOX65ccZpTtxlC30kZt6wtCwkqmBCYj5qamcdbdj3Q=
Subject key identifier: E3:70:BA:9C:E0:C9:97:9B:F6:76:11:CD:51:5B:B6:A8:A5:86:7A:3B
Authority key identifier: D3:55:5D:B9:F6:CD:CB:DD:B0:52:A4:53:48:EF:0D:6A:6D:5B:C1:C1
Certificate issuer: /CN=d3555db9f6cdcbddb052a45348ef0d6a6d5bc1c1
Certificate serial: 01A0CE23FE9BFB4ACBC9C49175E88228E9F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01VdufbNy92wUqRTSO8Nam1bwcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.mft
Manifest number: 01C2
Signing time: Wed 23 Sep 2026 12:01:00 +0000
Manifest this update: Wed 23 Sep 2026 12:01:00 +0000
Manifest next update: Thu 24 Sep 2026 12:01:00 +0000
Files and hashes: 1: 01VdufbNy92wUqRTSO8Nam1bwcE.crl (hash: m2BWxZqBbinkOsuuT6n1LH46VhwN2bh9D3BPZnIcVCk=)
2: szLd58h9ss7j2xagBuMXF5WP0yk.roa (hash: 8ob8pb7Gxq2C51p/RiIuL1KyizGRkOlyyDDvo7AtTm0=)
3: uXRaOLAunE2UdEOM1lTRedX_8jQ.asa (hash: 5LEXYsw/l0m4ESugD1zDY5cY+ORuB71qGoxgj35oZFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/01VdufbNy92wUqRTSO8Nam1bwcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:fe:9b:fb:4a:cb:c9:c4:91:75:e8:82:28:e9:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3555db9f6cdcbddb052a45348ef0d6a6d5bc1c1
Validity
Not Before: Sep 23 12:01:00 2026 GMT
Not After : Sep 24 12:01:00 2026 GMT
Subject: CN=e370ba9ce0c9979bf67611cd515bb6a8a5867a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c6:61:94:b1:e6:21:a6:d1:97:2b:0f:e8:14:
cd:99:d8:a0:75:6d:14:55:f7:98:af:bc:41:b5:43:
ec:3c:87:53:dc:77:93:9a:08:1d:b0:94:d0:8e:25:
8e:3a:1e:45:c7:31:6e:c7:65:db:b5:79:a8:22:6d:
2c:36:58:da:28:66:c8:5b:3b:4a:be:d5:e0:a4:3a:
f4:90:32:fa:bf:cf:f5:cb:85:a0:b4:84:59:81:7a:
ac:dc:69:a3:fe:33:f2:6a:7c:67:db:6a:2d:7e:c8:
55:99:6d:8f:e1:30:1e:c2:ce:23:cf:30:23:08:35:
10:fa:04:25:c5:1c:9d:5f:24:8b:3d:1f:6a:0d:f5:
7f:22:7a:76:a1:c4:1b:f3:f0:94:2b:fa:11:d1:0d:
6c:aa:3f:7c:78:94:ab:8f:da:b4:4b:9e:0f:01:65:
da:09:f2:ca:8b:d2:bd:b7:f9:bc:2b:44:59:b7:23:
72:f0:94:91:e0:da:05:ae:ea:f3:1d:e1:78:3b:33:
de:17:73:c8:7c:14:1d:27:f0:4d:83:9b:1c:1a:88:
5f:11:54:cc:c2:ad:c9:98:46:cb:2e:62:18:f4:d9:
7e:eb:e8:18:fc:b3:62:7b:c7:23:f1:df:64:b5:5b:
a3:69:25:d3:4e:5f:b8:56:36:d5:af:4e:7c:dc:53:
f9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:70:BA:9C:E0:C9:97:9B:F6:76:11:CD:51:5B:B6:A8:A5:86:7A:3B
X509v3 Authority Key Identifier:
keyid:D3:55:5D:B9:F6:CD:CB:DD:B0:52:A4:53:48:EF:0D:6A:6D:5B:C1:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01VdufbNy92wUqRTSO8Nam1bwcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:3e:31:a9:15:9b:4d:8b:5a:25:ea:62:d3:cc:38:35:0b:cb:
26:7b:27:6e:53:d7:52:8c:cd:f5:7c:bb:7e:c7:b5:ae:60:a8:
12:d5:0a:70:b1:cf:f1:62:08:e6:72:90:91:73:59:15:8e:5a:
98:a1:07:8c:51:a5:57:d3:31:d3:e8:84:dc:8e:ad:54:f3:af:
ce:30:dd:2a:62:e4:32:c0:da:a2:28:7b:a6:8a:27:19:1c:04:
e4:0b:eb:df:9b:0a:1e:07:58:3a:01:25:b8:df:bd:b4:c0:d7:
04:e4:5b:09:44:9b:c9:e1:e5:08:dc:ff:74:e5:ef:3f:d8:73:
aa:0f:49:a7:33:13:5e:98:03:8b:2b:93:62:a2:f7:9b:28:81:
85:60:b6:76:7f:54:99:04:17:0f:9a:06:82:9f:7a:d2:9b:8a:
b0:ed:e9:77:a4:4b:ad:48:1a:23:b6:93:b0:0a:82:d8:6a:75:
d4:0d:16:59:62:5e:98:c0:ea:78:e0:ff:89:85:00:20:bc:49:
7b:13:ea:f2:bc:21:23:1c:18:e2:a1:99:97:00:00:01:f7:8a:
d6:b1:a7:ac:d3:67:17:2b:df:ff:93:db:91:b4:ff:fe:9b:c0:
fa:54:75:df:44:16:59:19:53:28:4c:9d:19:cf:39:42:ae:a9:
9c:47:3a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:33:20 2026 by rpki-client