Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
File: 0VK0wfXUhO78KxWX9FUAOrZUsFU.mft (raw, json)
Hash identifier: Wgm/XQcrTaxbTAJLPhrW4ztRI+h+fynlcDQtr2v8SAU=
Subject key identifier: 23:CF:2B:88:FE:35:C5:25:CC:77:36:87:EA:09:0E:6D:52:03:95:45
Authority key identifier: D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55
Certificate issuer: /CN=d152b4c1f5d484eefc2b1597f455003ab654b055
Certificate serial: 01A0DE05D6107F2622E13BE3AF4459B47117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
Manifest number: 1A73
Signing time: Sat 26 Sep 2026 14:01:59 +0000
Manifest this update: Sat 26 Sep 2026 14:01:59 +0000
Manifest next update: Sun 27 Sep 2026 14:01:59 +0000
Files and hashes: 1: 0VK0wfXUhO78KxWX9FUAOrZUsFU.crl (hash: 1B82VqIrd2db/uCZEbHMUdGlRmMbwpYmPMYuq/vjke8=)
2: NP9SfFGYsYXsch7Dr3qELq74PLU.roa (hash: fuLAQTL3YUInXQtx9TnphHOeZzSHEh2X+xButoDoLCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:05:d6:10:7f:26:22:e1:3b:e3:af:44:59:b4:71:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d152b4c1f5d484eefc2b1597f455003ab654b055
Validity
Not Before: Sep 26 14:01:59 2026 GMT
Not After : Sep 27 14:01:59 2026 GMT
Subject: CN=23cf2b88fe35c525cc773687ea090e6d52039545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f3:5d:a7:e7:7b:9e:40:bb:be:d2:88:5e:20:
d4:3e:3c:ea:9b:cf:95:b7:eb:47:a9:dc:90:5f:38:
31:8a:5b:05:4f:a4:9c:d0:ce:0d:b6:43:e5:84:35:
bd:9d:28:5a:ec:49:8a:5d:f4:f2:7e:45:c8:ce:29:
08:81:53:c1:18:24:49:5a:fe:fa:45:a8:5c:5b:69:
93:01:fe:3c:85:03:44:77:7c:03:4e:2f:2e:8a:34:
a9:1b:3e:8c:7c:6f:80:76:2c:cf:62:a8:e8:e9:31:
8c:a2:52:ae:44:40:07:24:e0:ce:60:55:ab:dc:19:
e7:fa:b3:ca:39:58:0d:5a:f0:f0:7b:7b:f7:c0:45:
32:03:00:59:5b:b5:74:c7:2a:4e:83:3c:9b:4c:25:
db:1e:f1:5d:25:cf:c3:5e:af:6c:54:5b:24:09:5e:
fb:99:9d:a0:cd:73:04:9b:ff:b5:9d:5e:80:76:e6:
3e:05:64:56:a9:6d:8d:e9:f5:bb:04:4f:7f:10:d5:
8d:27:25:16:e9:3f:a4:22:76:98:64:d3:53:fc:a7:
14:10:a2:d3:10:bc:6a:86:ce:c1:21:6e:5c:77:1e:
4b:79:5f:2d:03:0a:c7:e9:58:7e:51:d7:70:11:a6:
24:18:b1:35:c0:a1:9f:af:b7:a5:ca:14:fe:3e:a9:
06:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CF:2B:88:FE:35:C5:25:CC:77:36:87:EA:09:0E:6D:52:03:95:45
X509v3 Authority Key Identifier:
keyid:D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:fe:b9:24:ec:08:f7:4c:e6:da:0c:41:bf:9e:ab:db:18:59:
db:40:de:d2:8a:8a:59:e3:99:31:c1:e0:7a:c2:95:fc:cf:de:
bd:b0:41:db:52:22:c9:90:bb:1d:42:ef:47:7d:87:5b:73:1f:
89:2b:6b:5e:ae:23:54:02:a8:79:4e:96:e6:5c:e7:d9:99:0d:
f5:32:32:e5:15:1e:7d:1c:4c:11:74:9c:fe:d7:a0:d2:56:43:
ff:47:b1:a1:a7:b1:86:81:61:cf:b6:51:f2:aa:ad:08:27:c3:
22:78:8d:86:b8:d1:c5:e9:6d:b8:60:fa:c4:96:de:a3:33:38:
69:b8:d0:66:f7:ee:a9:d8:f8:43:83:5b:6d:21:ca:b7:1f:4f:
6a:56:32:b8:98:17:a8:e7:49:1d:02:f3:7a:ef:d7:09:39:76:
60:83:99:6a:0c:17:81:f1:87:82:0c:9f:95:70:07:33:fc:0f:
2e:32:fd:17:26:b0:63:4a:d5:70:2f:35:9a:c5:37:14:b0:86:
23:1a:90:81:a9:38:ff:fb:1f:a2:e8:d3:83:4a:ff:ed:58:85:
2a:22:c4:bd:21:49:1b:df:37:56:41:b2:54:ff:04:d4:25:5a:
66:7b:45:23:b0:71:3f:ad:f9:c7:10:6a:e9:e2:e5:56:7e:17:
9f:76:d5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:03:10 2026 by rpki-client