Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.mft
File: 0d2oMnacMWgfglaFFHNorzoR9vg.mft (raw, json)
Hash identifier: 9sdeoR6boZYRLo7A4ErBjnztN+ooHw2ytoWYltDw03g=
Subject key identifier: D9:5A:6A:C8:BA:78:D4:B0:18:89:FE:E0:46:25:AE:EC:67:C9:0D:C5
Authority key identifier: D1:DD:A8:32:76:9C:31:68:1F:82:56:85:14:73:68:AF:3A:11:F6:F8
Certificate issuer: /CN=d1dda832769c31681f825685147368af3a11f6f8
Certificate serial: 01A0D426016EE29EBB44BCD02A4F55807B1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d2oMnacMWgfglaFFHNorzoR9vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 16:00:55 +0000
Manifest this update: Thu 24 Sep 2026 16:00:55 +0000
Manifest next update: Fri 25 Sep 2026 16:00:55 +0000
Files and hashes: 1: 0d2oMnacMWgfglaFFHNorzoR9vg.crl (hash: BP4mFGuFrUjSjOPB5D5kbflKP5qZG5q557fQttGv/h0=)
2: EHzjD2BaSdt6dlWwGmMzrIvaNCg.roa (hash: S94ye2gvt+ykcb3AuWBczPrNA3UQ52LMfEF8Lq+CnR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0d2oMnacMWgfglaFFHNorzoR9vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 16:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:01:6e:e2:9e:bb:44:bc:d0:2a:4f:55:80:7b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1dda832769c31681f825685147368af3a11f6f8
Validity
Not Before: Sep 24 16:00:55 2026 GMT
Not After : Sep 25 16:00:55 2026 GMT
Subject: CN=d95a6ac8ba78d4b01889fee04625aeec67c90dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c8:57:d2:c8:7c:cb:77:70:9a:04:5c:4e:66:
e5:0e:af:67:d8:8a:fb:87:43:5e:b6:fd:3c:a0:cd:
4b:c5:7f:cb:24:8a:ef:59:e1:b9:ae:c3:32:42:5c:
e7:cf:f4:aa:39:d2:96:e2:2c:26:e9:cb:da:69:e8:
73:43:36:a4:d9:e9:4e:e9:8b:33:c3:3e:8e:fc:60:
dd:aa:7a:05:d7:01:4a:c5:1c:0a:9c:71:1b:d3:a6:
b0:2d:1e:a8:f6:e5:9d:50:17:af:84:96:fd:7d:86:
e4:a6:7c:ef:7c:dd:16:06:92:ec:ba:c1:6c:54:4e:
c8:1d:07:47:d7:0b:0f:38:a9:e3:f8:72:d9:2c:53:
b2:29:be:42:07:4d:f3:00:4a:59:15:5c:3b:0d:42:
9e:8d:fd:32:97:f0:20:9f:d7:b5:99:1c:4e:17:7a:
73:e9:9f:c7:92:e5:be:a7:bf:4e:82:50:91:ae:5d:
8f:b6:fe:ac:87:04:31:99:cf:ea:ff:56:0f:5f:ae:
d5:9a:1d:af:e4:a5:c9:5c:bb:7e:94:11:1a:69:51:
b4:62:d5:cb:e2:6a:5a:62:fb:83:9e:f5:64:3c:1f:
a9:08:60:72:32:71:4b:6e:1b:0d:c3:84:ba:35:9d:
bc:4b:14:72:d3:b3:1d:b5:b5:1b:00:b8:94:36:dc:
61:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5A:6A:C8:BA:78:D4:B0:18:89:FE:E0:46:25:AE:EC:67:C9:0D:C5
X509v3 Authority Key Identifier:
keyid:D1:DD:A8:32:76:9C:31:68:1F:82:56:85:14:73:68:AF:3A:11:F6:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d2oMnacMWgfglaFFHNorzoR9vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:09:1a:34:e5:18:65:9b:af:13:f7:e9:4a:fb:41:21:12:0a:
14:fe:17:08:2a:2b:76:13:50:16:f0:c8:44:c5:69:42:2a:87:
10:94:85:a1:29:cb:db:88:e1:57:e8:a8:5f:86:db:43:fd:fb:
67:38:69:b8:ce:91:f0:ce:03:69:7c:13:c5:12:c8:48:ee:2e:
a8:88:40:d6:18:98:ad:c5:92:0e:53:15:7f:51:e1:e9:1f:a9:
ff:13:10:b6:bd:84:72:ad:1d:e7:fb:f5:e3:60:01:1d:a3:85:
65:9e:69:1a:8c:52:b8:4c:98:ee:e5:87:4e:0d:b2:a2:e4:93:
d8:57:b3:7c:fd:02:7f:d0:2e:cc:93:f7:64:4d:02:97:b9:74:
95:c4:82:c3:7f:20:d2:23:9c:e1:24:1d:8b:1a:89:c0:f8:35:
65:c9:ab:6b:05:86:81:36:bc:13:b7:c6:db:5b:64:61:df:41:
e6:40:14:57:59:77:64:c0:c7:9b:d1:70:ad:cf:4d:a6:2c:76:
a6:ee:0e:61:db:1b:dc:0f:41:03:b2:84:d0:60:16:35:68:d3:
f5:9a:d0:8e:b0:66:09:1d:1e:5f:05:48:10:7c:b9:88:b8:f2:
ec:0a:d7:45:72:fe:a8:e9:dd:17:aa:0d:63:eb:d4:dd:1f:cf:
9b:14:71:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:55:59 2026 by rpki-client