Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/7fd85d-0152-4ef2-9ebf-1e240b97d2c4/1/0tiRsOMo58hWrUt6B2TYLYVgltY.mft
File: 0tiRsOMo58hWrUt6B2TYLYVgltY.mft (raw, json)
Hash identifier: hqKiHa7bSEficEImI0lfHSWU7ji2maaYwWFL/keAps0=
Subject key identifier: 51:62:60:EA:29:36:91:E6:A4:F8:76:1F:3F:99:7F:CB:26:7E:D3:BF
Authority key identifier: D2:D8:91:B0:E3:28:E7:C8:56:AD:4B:7A:07:64:D8:2D:85:60:96:D6
Certificate issuer: /CN=d2d891b0e328e7c856ad4b7a0764d82d856096d6
Certificate serial: 01A0D8A88D91A04204C87C0321277D62B1A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0tiRsOMo58hWrUt6B2TYLYVgltY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7fd85d-0152-4ef2-9ebf-1e240b97d2c4/1/0tiRsOMo58hWrUt6B2TYLYVgltY.mft
Manifest number: 06C3
Signing time: Fri 25 Sep 2026 13:02:00 +0000
Manifest this update: Fri 25 Sep 2026 13:02:00 +0000
Manifest next update: Sat 26 Sep 2026 13:02:00 +0000
Files and hashes: 1: 0tiRsOMo58hWrUt6B2TYLYVgltY.crl (hash: Lj/KmdN1Yygv+NH4tQ7D7FK9y/WZt/5jtiPRXT3MXKg=)
2: UCdWTcnF4ZVDrSnBvN43rU1Zk3A.roa (hash: Qw45xlTVvhAH55/GToKQCdfRTF8PLXCZ9h0uBYEUVtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7fd85d-0152-4ef2-9ebf-1e240b97d2c4/1/0tiRsOMo58hWrUt6B2TYLYVgltY.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7fd85d-0152-4ef2-9ebf-1e240b97d2c4/1/0tiRsOMo58hWrUt6B2TYLYVgltY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0tiRsOMo58hWrUt6B2TYLYVgltY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 13:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:8d:91:a0:42:04:c8:7c:03:21:27:7d:62:b1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2d891b0e328e7c856ad4b7a0764d82d856096d6
Validity
Not Before: Sep 25 13:02:00 2026 GMT
Not After : Sep 26 13:02:00 2026 GMT
Subject: CN=516260ea293691e6a4f8761f3f997fcb267ed3bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:72:f7:a4:de:ed:e0:bd:ec:25:57:79:30:73:
5a:b1:64:d1:f6:a4:5d:89:b0:18:62:b4:42:45:8b:
03:d2:3d:7a:70:0a:00:de:40:bf:72:ec:12:46:84:
3f:0e:d6:fe:55:ca:d1:36:43:46:fa:c3:56:f1:f7:
88:9b:e2:b2:a4:b2:cf:07:9c:ba:ed:07:6f:c9:bf:
e4:fa:64:2b:44:01:b0:15:1b:c5:6d:d5:da:d7:fb:
b8:42:17:c9:5a:17:a8:13:98:bb:46:98:26:9d:1b:
ad:70:49:6d:66:64:db:47:23:25:22:b7:03:75:85:
10:1e:f9:de:b3:f3:26:cc:7e:b0:4c:56:ee:ea:c3:
43:92:f4:95:0d:4c:d5:37:b5:4b:10:98:24:99:f7:
56:3d:f0:1c:4c:d2:2d:cb:5d:62:c0:31:17:91:0a:
d0:65:d0:2f:8f:5e:98:1f:90:5b:61:88:0c:fa:a5:
ea:6f:a8:0e:89:cf:36:f6:2d:15:ce:d8:6b:ad:12:
44:79:b5:38:51:e1:03:3b:46:1a:ea:99:92:f6:1c:
a5:11:3f:9d:b7:54:ef:f1:2a:4b:9b:42:4b:38:85:
fe:12:d1:b1:9d:76:ab:cc:b7:e6:55:81:b1:a1:bc:
57:0b:ec:c4:2a:4c:f2:d8:39:64:fa:d5:2b:58:4d:
31:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:62:60:EA:29:36:91:E6:A4:F8:76:1F:3F:99:7F:CB:26:7E:D3:BF
X509v3 Authority Key Identifier:
keyid:D2:D8:91:B0:E3:28:E7:C8:56:AD:4B:7A:07:64:D8:2D:85:60:96:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tiRsOMo58hWrUt6B2TYLYVgltY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7fd85d-0152-4ef2-9ebf-1e240b97d2c4/1/0tiRsOMo58hWrUt6B2TYLYVgltY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7fd85d-0152-4ef2-9ebf-1e240b97d2c4/1/0tiRsOMo58hWrUt6B2TYLYVgltY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ae:09:f7:fd:5a:60:45:4b:ad:93:96:b8:04:e1:61:5a:a2:
84:b4:b7:ff:26:76:04:1c:03:a0:ec:2f:39:0c:c6:a7:04:a0:
3c:b1:f6:f0:88:69:a4:a0:da:c7:3e:94:0b:cf:f4:78:eb:a4:
83:84:d9:79:6f:09:c4:92:20:c9:7e:01:eb:a9:5a:c2:65:f9:
b4:c8:8c:35:f3:12:98:1e:3b:43:f0:de:2d:a1:b3:b3:4a:7c:
bb:57:df:53:24:7c:a6:e4:75:0b:7f:8b:bc:27:c7:79:ee:ae:
14:ce:a2:25:47:02:0d:ae:e5:16:7c:35:17:79:76:00:e9:7c:
c9:07:01:8d:ac:fd:fe:aa:59:9e:e0:37:02:da:2f:8e:7d:03:
50:d1:00:d5:86:4e:2a:71:a0:b3:27:97:52:8e:a5:32:be:7a:
8a:ba:bc:f8:27:7f:df:df:1b:4d:94:32:63:71:d5:1f:67:4e:
fc:a3:c0:db:98:b2:1a:1c:aa:29:cd:83:e9:0e:cf:ae:b8:41:
f1:a0:91:00:79:ec:77:2d:27:09:37:cb:b9:26:ad:9b:38:ad:
52:c1:54:6f:9b:f9:bf:15:c6:7c:17:bc:d3:fb:a7:f4:12:c4:
0e:79:ef:ce:be:7a:a5:97:12:c9:90:1d:43:d5:c5:fd:c4:cb:
ef:22:2f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:08:45 2026 by rpki-client