Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
File: 0u0bbMpTCR9vkNGllQzrbVOwOq0.mft (raw, json)
Hash identifier: +UPp3uEsZc2xCDWxWkG5A6X+uFqjSws0gEVOOlZTKAQ=
Subject key identifier: B9:CB:E4:97:9D:3F:91:46:CA:FC:BE:AE:BC:9D:2D:BB:CF:0F:5D:4D
Authority key identifier: D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD
Certificate issuer: /CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
Certificate serial: 01A0D3833881BF73D8D9C2277B4A08596FDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
Manifest number: 0E79
Signing time: Thu 24 Sep 2026 13:03:07 +0000
Manifest this update: Thu 24 Sep 2026 13:03:07 +0000
Manifest next update: Fri 25 Sep 2026 13:03:07 +0000
Files and hashes: 1: 0u0bbMpTCR9vkNGllQzrbVOwOq0.crl (hash: IBKP4XEcdn/UNa8Ouc+emm7eEJRkJKesNrj//E4RfpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:83:38:81:bf:73:d8:d9:c2:27:7b:4a:08:59:6f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
Validity
Not Before: Sep 24 13:03:07 2026 GMT
Not After : Sep 25 13:03:07 2026 GMT
Subject: CN=b9cbe4979d3f9146cafcbeaebc9d2dbbcf0f5d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:20:28:6c:85:e3:d5:4e:65:fc:d0:2b:a8:70:
55:a7:72:75:df:04:e2:8d:4c:b0:3c:33:c2:65:f6:
6c:60:b7:e2:7d:ec:6d:2b:1c:23:b6:54:4d:e5:1d:
81:8f:8a:74:e7:22:be:b7:75:d5:a4:95:19:4c:9f:
78:17:a9:7f:77:38:bc:71:cf:c0:75:22:5d:08:3c:
1b:7a:c9:76:79:8f:84:3f:89:39:68:fb:0a:4d:38:
c1:54:42:f7:0e:cf:9e:fa:dd:e6:c3:7b:70:bc:b2:
94:b8:97:bd:09:c8:49:aa:3b:a4:04:0e:bc:ae:77:
90:58:6c:f9:91:0d:a3:57:07:77:e7:80:bc:70:c1:
e9:b1:d5:b4:0a:e0:f2:0b:9b:08:66:dd:52:69:14:
19:55:01:a2:8f:7f:b2:e7:66:9c:b6:1b:ee:38:1e:
44:df:d9:b9:dc:56:ce:6f:c6:ee:c3:3e:1e:4b:7a:
ab:55:f0:94:85:87:60:22:e3:4b:5d:74:98:56:3d:
d6:7c:69:c7:d5:fd:13:89:bb:cb:05:dc:0e:cd:e8:
78:4f:15:88:75:0a:ba:35:b8:a5:2b:97:87:14:6e:
e1:68:70:85:73:18:76:b2:7a:28:42:bb:d7:ca:d6:
b7:94:4b:3c:e4:31:4f:a5:af:4d:c9:0d:ac:50:aa:
e9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CB:E4:97:9D:3F:91:46:CA:FC:BE:AE:BC:9D:2D:BB:CF:0F:5D:4D
X509v3 Authority Key Identifier:
keyid:D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:58:17:a2:32:d1:5c:6c:88:cd:b1:d4:d3:4d:79:85:05:03:
a3:d3:ea:1d:c6:e4:67:c4:f3:be:3e:a9:67:41:dc:93:7a:39:
ee:4d:1f:ad:3c:8b:01:b6:3a:8d:16:39:4e:d7:7d:99:ad:ad:
2c:0f:3b:55:16:d7:e3:4c:f5:e8:ab:c2:d2:95:60:51:f5:95:
3c:cf:b4:d7:8d:1d:0d:d1:26:cd:b8:e1:d5:d1:2e:e0:b2:af:
8d:8c:2e:f7:6c:49:e9:9a:1e:56:24:96:c7:ff:23:b7:cb:99:
2f:95:08:35:d9:9c:04:53:c9:e1:94:20:59:29:7d:8a:8b:56:
81:55:8f:93:e0:7c:d5:c1:4b:19:a9:a8:ca:92:ab:8b:2b:f2:
57:5a:20:a9:b2:e2:ae:04:34:c1:f5:45:41:9f:55:df:ef:6e:
c6:56:a5:a0:f4:d1:9d:ea:cc:42:ad:cc:e7:08:e8:bc:5c:ca:
11:7f:1d:1c:27:bc:e6:a0:0d:62:27:f6:b1:75:c2:b9:29:cf:
97:6b:47:9b:03:8b:3e:15:09:cf:9e:37:48:0d:32:3a:55:47:
bf:23:ef:9c:50:12:87:32:25:b3:55:5b:1c:19:46:21:25:37:
91:2c:6b:7c:5c:4b:db:54:2f:8d:e4:3b:45:d8:85:f8:09:4e:
a2:5a:12:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:39:33 2026 by rpki-client