Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
File: 0HJnvyOylxpHlag--EeKghuvsds.mft (raw, json)
Hash identifier: ULCVI0yo2bZrHJ7DtQE2ArIMkC5G8n9QO5/x6jJI4rg=
Subject key identifier: 05:DD:67:4D:20:4B:80:84:53:02:CD:9B:72:F0:E6:8B:3F:61:0B:AD
Authority key identifier: D0:72:67:BF:23:B2:97:1A:47:95:A8:3E:F8:47:8A:82:1B:AF:B1:DB
Certificate issuer: /CN=d07267bf23b2971a4795a83ef8478a821bafb1db
Certificate serial: 01A0DF85DC72880FC887A4E3348A98EF9F0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
Manifest number: 1A7D
Signing time: Sat 26 Sep 2026 21:01:26 +0000
Manifest this update: Sat 26 Sep 2026 21:01:26 +0000
Manifest next update: Sun 27 Sep 2026 21:01:26 +0000
Files and hashes: 1: 0HJnvyOylxpHlag--EeKghuvsds.crl (hash: 0gxj8JUvr+wxPSNnE0/ksBnpGFwGY76lTz24j86D6y0=)
2: fBAOzxis5zFocT70Z97qbse-bDQ.roa (hash: VdDmUIYDxdhSfqEfsTGgmGBNLV3h2tDEtcnlVnKzLfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:85:dc:72:88:0f:c8:87:a4:e3:34:8a:98:ef:9f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07267bf23b2971a4795a83ef8478a821bafb1db
Validity
Not Before: Sep 26 21:01:26 2026 GMT
Not After : Sep 27 21:01:26 2026 GMT
Subject: CN=05dd674d204b80845302cd9b72f0e68b3f610bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:61:7b:5d:1a:f2:31:55:17:2a:6d:7a:9a:e1:
30:9d:52:fe:99:bf:46:c7:67:fd:5c:bf:96:63:d5:
44:b7:35:f7:d4:93:4f:ba:c2:7e:c4:7b:c9:b4:29:
f3:c5:4f:41:fb:17:e9:dd:7d:d6:d4:d3:63:25:ae:
59:84:a8:2c:78:4c:f2:0b:a0:49:c9:aa:ae:d8:da:
9a:a1:49:f3:45:0c:25:56:17:22:81:f4:fe:32:94:
94:e9:39:06:ad:c2:5f:4a:84:e3:9d:28:d8:3e:78:
6e:7a:47:e3:36:0a:70:1b:ff:b8:63:dd:34:b7:29:
b0:d5:d6:8c:25:34:b9:6a:07:37:57:78:45:6b:8b:
27:de:ed:56:f3:eb:bb:93:39:2d:cd:00:9d:af:92:
e5:c5:c8:79:f9:45:7a:a5:9d:07:b3:ea:db:ef:2f:
95:d3:92:ae:f6:31:c5:32:98:59:ec:33:12:f1:a6:
fa:35:f9:b1:21:e9:91:27:92:e6:ff:20:44:1e:cd:
aa:93:fa:f7:4f:f8:cb:d2:03:94:6e:a3:31:97:10:
74:88:b3:f6:b1:df:d3:88:d6:5a:a8:4f:06:21:27:
c7:ec:a2:7e:cc:37:d0:5d:ce:80:66:18:14:03:71:
35:b8:5c:36:73:1b:f2:03:5d:1c:df:a6:a1:86:15:
99:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:DD:67:4D:20:4B:80:84:53:02:CD:9B:72:F0:E6:8B:3F:61:0B:AD
X509v3 Authority Key Identifier:
keyid:D0:72:67:BF:23:B2:97:1A:47:95:A8:3E:F8:47:8A:82:1B:AF:B1:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b7:11:d1:64:90:a3:c4:76:e7:29:bf:54:b0:2b:f9:0e:eb:
a7:71:b5:af:60:d3:20:81:1d:cf:f2:41:2d:03:0a:79:27:ab:
12:cb:2a:0f:e2:55:a6:c1:3b:c5:97:9b:f0:40:7d:e1:06:4f:
5e:be:e5:c7:e5:88:9c:de:08:0a:b3:58:e0:8b:63:10:89:a9:
96:94:e7:8c:5b:68:4d:9c:05:c7:1d:08:51:cb:df:dd:4f:40:
3d:e2:89:07:35:0e:22:cc:a8:e9:6a:8f:46:02:37:74:57:59:
6f:e8:2e:4c:39:a1:2a:a4:a8:a2:87:2e:7f:e6:c7:27:85:73:
71:b7:1d:57:33:a0:6c:e3:5b:ed:73:e6:97:05:05:20:15:9d:
83:c9:f6:5c:61:81:c7:8d:63:f1:14:eb:a7:70:aa:00:73:ef:
57:c9:68:6b:af:2f:73:6f:f6:15:3c:94:61:2d:d2:61:f7:cd:
76:56:4e:55:08:76:d7:3b:a5:4a:5e:01:76:35:60:b7:d5:6c:
fb:6c:56:66:5d:53:14:56:19:c5:69:0e:36:39:3c:a0:b7:46:
d1:6b:b2:87:b7:44:24:3e:43:9d:6e:70:16:a5:c5:8b:2b:51:
ff:e9:08:b7:d7:9e:58:6e:48:d0:23:82:cb:93:39:de:86:f3:
2f:8c:fe:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:40:59 2026 by rpki-client