Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
File: 0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft (raw, json)
Hash identifier: 4XOZj/uxy9yMUE6mEHwn0gknYXkOYw7XzcAw5f1FY4g=
Subject key identifier: F8:39:1A:8A:85:0C:88:C1:17:71:BC:A5:3A:B9:4B:50:4A:B5:F0:42
Authority key identifier: D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06
Certificate issuer: /CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06
Certificate serial: 01A0D012D0B98C308C540BCF5702F16CFCE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 21:01:29 +0000
Manifest this update: Wed 23 Sep 2026 21:01:29 +0000
Manifest next update: Thu 24 Sep 2026 21:01:29 +0000
Files and hashes: 1: 0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl (hash: rfn/ZCSNf9R9kIRuK7s2bEH5kJKAD6GlcmQsn1uV0/4=)
2: lNZ8b2GqipxFmFvx0Lw_q8EwfSo.roa (hash: qDLpSNqlibtH6zRBXzlD7tUyev4dQUA/1eIb4IG63oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:d0:b9:8c:30:8c:54:0b:cf:57:02:f1:6c:fc:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06
Validity
Not Before: Sep 23 21:01:29 2026 GMT
Not After : Sep 24 21:01:29 2026 GMT
Subject: CN=f8391a8a850c88c11771bca53ab94b504ab5f042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:53:6f:ef:66:05:cc:47:71:5e:17:81:7c:2e:
4e:57:6a:fb:6f:86:a5:8d:29:60:57:1e:78:6d:bb:
43:80:7c:c4:d9:ce:37:d0:8a:c4:24:3e:d0:a0:ca:
c6:a9:6c:06:a7:c7:8e:23:39:f5:c0:38:51:c0:19:
7c:89:7c:a6:cc:ac:f0:55:35:62:b8:3e:49:03:10:
49:2a:5d:0c:83:a9:1d:d3:b7:1b:a7:b5:b3:31:59:
6c:74:36:e9:2f:68:4f:cd:7e:83:79:a2:a8:6d:91:
5d:85:5d:3e:47:41:db:42:ad:9e:c8:65:08:0b:e0:
4c:58:9e:95:b8:a3:5f:8a:f6:6c:59:8a:63:96:38:
83:24:6a:9e:a6:a6:d7:82:43:72:1c:f0:c9:c0:5d:
14:79:f2:a8:d7:3e:fa:92:d5:d1:ef:94:ec:ac:b2:
9d:75:57:d4:a4:ca:23:db:3f:2a:69:a2:00:a2:d5:
0a:e9:c0:b2:27:aa:0e:44:a2:35:1b:9f:f9:dc:ad:
65:6f:c4:d5:fa:4b:72:89:b1:28:ba:45:5c:e6:2b:
bf:d7:16:46:b4:86:29:ce:2c:87:ba:e1:da:0a:46:
11:72:aa:4c:54:5e:ba:c4:3c:8c:1e:03:8c:7b:0d:
b6:07:89:27:ee:7e:e1:2e:28:53:b9:b3:ae:d8:4a:
e4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:39:1A:8A:85:0C:88:C1:17:71:BC:A5:3A:B9:4B:50:4A:B5:F0:42
X509v3 Authority Key Identifier:
keyid:D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ca:ac:70:10:d3:b2:b1:3e:2e:92:14:07:c1:23:57:cc:0a:
3c:32:1a:f6:58:2e:16:03:c3:50:a8:27:c7:e7:1b:d9:6b:99:
e6:34:98:1d:31:4f:1d:ee:cc:af:86:0b:22:9c:c0:a4:27:97:
3a:14:a0:ef:54:df:0b:c0:69:73:40:24:96:68:f6:af:c4:da:
9a:5d:26:ef:b2:36:bb:02:98:7b:d1:ea:ba:88:24:8a:fd:b3:
48:8a:57:ac:11:cb:6c:5f:9d:94:bd:66:65:f6:ac:e5:cf:11:
42:c3:1d:a7:eb:87:ca:99:e5:04:b3:68:89:02:6e:7f:cd:9f:
d2:dc:35:d1:9c:3f:2b:f2:ff:66:73:df:02:64:28:90:1c:a5:
e8:f1:f8:a0:5a:b0:bf:e0:b9:f9:dd:fd:58:32:a4:7e:20:2c:
1e:f1:59:71:a7:2e:da:b4:8c:9b:83:cd:af:47:22:10:3f:cd:
a7:69:de:94:bd:ba:84:4f:79:b2:a8:42:c2:6e:59:89:60:21:
a8:a9:93:d1:67:ad:e7:95:ff:28:50:36:97:d9:cf:c1:c2:4d:
bf:0a:25:81:fa:05:e7:50:35:22:e1:75:e2:5f:1b:be:8c:f6:
2f:8d:02:bf:b8:ce:5a:43:57:88:31:29:e5:8d:a2:3c:49:4e:
07:b1:ee:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:36:53 2026 by rpki-client