Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/a32b21-5987-4b83-8569-e7d1859d2478/1/0hbHHUvT0weLQFrXfclUvAnHgo0.mft
File: 0hbHHUvT0weLQFrXfclUvAnHgo0.mft (raw, json)
Hash identifier: CN0UkQiyOPOr7LM2oKLUbw6OnXL8KJtwXr7eyliNqXI=
Subject key identifier: CC:92:08:0C:C3:AD:D2:58:EB:81:27:8B:5D:6B:D6:03:A1:96:CE:97
Authority key identifier: D2:16:C7:1D:4B:D3:D3:07:8B:40:5A:D7:7D:C9:54:BC:09:C7:82:8D
Certificate issuer: /CN=d216c71d4bd3d3078b405ad77dc954bc09c7828d
Certificate serial: 01A0CB22DF9D102489E7AB00FA680CA2B381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0hbHHUvT0weLQFrXfclUvAnHgo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a32b21-5987-4b83-8569-e7d1859d2478/1/0hbHHUvT0weLQFrXfclUvAnHgo0.mft
Manifest number: E2
Signing time: Tue 22 Sep 2026 22:00:55 +0000
Manifest this update: Tue 22 Sep 2026 22:00:55 +0000
Manifest next update: Wed 23 Sep 2026 22:00:55 +0000
Files and hashes: 1: 0hbHHUvT0weLQFrXfclUvAnHgo0.crl (hash: W0oOOVee+EVZNd1iM+B5Fumcn3cChk/s3p+W61/2fnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a32b21-5987-4b83-8569-e7d1859d2478/1/0hbHHUvT0weLQFrXfclUvAnHgo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a32b21-5987-4b83-8569-e7d1859d2478/1/0hbHHUvT0weLQFrXfclUvAnHgo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0hbHHUvT0weLQFrXfclUvAnHgo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:df:9d:10:24:89:e7:ab:00:fa:68:0c:a2:b3:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d216c71d4bd3d3078b405ad77dc954bc09c7828d
Validity
Not Before: Sep 22 22:00:55 2026 GMT
Not After : Sep 23 22:00:55 2026 GMT
Subject: CN=cc92080cc3add258eb81278b5d6bd603a196ce97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:15:30:6c:55:a7:26:87:fa:bd:14:be:cc:bf:
12:9b:32:8b:6e:08:10:6a:6f:f6:98:98:92:24:0d:
43:8c:81:50:a8:b3:86:c8:6d:13:9c:21:15:66:65:
52:e8:88:48:87:a8:5b:91:88:dd:1b:5e:02:30:86:
8e:31:d3:a2:2a:94:d9:79:7d:be:80:ce:0a:08:f3:
a0:40:cf:70:d2:70:ce:30:0a:1a:3f:5c:a6:dc:7b:
ea:e8:d7:67:84:72:2e:de:4b:f3:46:67:aa:af:85:
84:2d:e5:85:aa:c2:5b:0a:30:16:0f:85:be:40:81:
a4:fe:49:cb:32:88:c2:92:99:56:c0:8e:82:9a:e9:
c2:82:96:a5:d8:d1:9d:46:61:aa:92:b4:fe:a7:32:
af:8e:bd:f9:95:59:71:75:fe:66:0c:83:fd:08:36:
65:c1:99:d3:2e:c2:81:ff:b2:26:b7:95:29:65:d6:
60:27:7b:e2:6a:6f:97:58:fa:14:34:90:f1:64:29:
94:c4:1f:85:1e:44:74:ce:a1:f1:fc:0a:62:33:5c:
68:b6:49:b2:b7:d3:f7:3d:95:61:3d:be:18:50:fb:
af:01:51:32:c8:14:e0:7e:21:98:f9:4b:e1:97:46:
8a:2b:72:13:d6:5d:26:1b:9c:c5:4c:74:7c:fd:4a:
26:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:92:08:0C:C3:AD:D2:58:EB:81:27:8B:5D:6B:D6:03:A1:96:CE:97
X509v3 Authority Key Identifier:
keyid:D2:16:C7:1D:4B:D3:D3:07:8B:40:5A:D7:7D:C9:54:BC:09:C7:82:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hbHHUvT0weLQFrXfclUvAnHgo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a32b21-5987-4b83-8569-e7d1859d2478/1/0hbHHUvT0weLQFrXfclUvAnHgo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a32b21-5987-4b83-8569-e7d1859d2478/1/0hbHHUvT0weLQFrXfclUvAnHgo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d5:23:04:08:e9:3f:44:8e:9e:8d:8a:a5:51:3f:7c:41:0f:
2f:69:1b:90:79:f8:cf:cf:5e:e6:8d:49:fe:84:82:78:b7:b0:
dd:03:bf:6d:4a:9f:de:bb:7c:26:c5:57:dd:b4:bb:3a:8b:56:
53:d7:37:ac:9f:0e:45:93:b6:22:f6:56:e9:58:f5:8f:65:63:
95:9a:21:96:00:d9:3c:c4:cf:36:a6:60:62:6e:9a:2a:99:45:
62:79:56:c2:cb:24:d9:08:37:8d:b2:d9:ae:d6:48:b7:70:23:
62:79:4f:33:25:4d:75:15:5d:13:b8:fe:cc:93:18:56:10:7b:
10:d3:3b:50:21:08:ca:76:bd:6c:c4:e6:ae:47:ef:96:4f:d6:
21:a7:c9:09:ae:ee:06:ca:79:bc:d9:24:f1:2d:7d:f9:c0:f9:
09:c1:e2:c8:10:2f:96:81:5f:f5:f9:05:ab:0b:a3:cc:fa:de:
0a:2d:75:9a:2e:42:c7:70:a6:b4:e4:1a:9b:30:65:82:ca:3b:
6c:ee:ef:81:f8:16:8a:62:5e:90:c1:f9:92:3a:f6:97:ec:0d:
43:06:71:50:37:22:92:8c:44:93:08:4a:6a:4c:32:84:67:a2:
24:ee:17:da:72:78:db:07:82:b4:20:b3:2d:3e:e5:80:70:bf:
d3:95:eb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:47:34 2026 by rpki-client