Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
File: 0u0bbMpTCR9vkNGllQzrbVOwOq0.mft (raw, json)
Hash identifier: PZnq7IFe2kp+IkpYf8kMm7Z/6vu3KSnsGEjjjhuEXwM=
Subject key identifier: 2D:93:3D:1E:A0:78:B2:D3:CC:67:A6:23:C9:47:A3:CC:B3:4E:DB:7B
Authority key identifier: D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD
Certificate issuer: /CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
Certificate serial: 01A1DA25858800AEDA2BFAA8E6DE7405D7BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
Manifest number: 0F01
Signing time: Sat 14 Nov 2026 13:00:54 +0000
Manifest this update: Sat 14 Nov 2026 13:00:54 +0000
Manifest next update: Sun 15 Nov 2026 13:00:54 +0000
Files and hashes: 1: 0u0bbMpTCR9vkNGllQzrbVOwOq0.crl (hash: OjUP+GpT1yFgeWNDsHxFFnoJCEcIUYgMiC3ikoys4N4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:25:85:88:00:ae:da:2b:fa:a8:e6:de:74:05:d7:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
Validity
Not Before: Nov 14 13:00:54 2026 GMT
Not After : Nov 15 13:00:54 2026 GMT
Subject: CN=2d933d1ea078b2d3cc67a623c947a3ccb34edb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7b:03:da:94:fb:52:6d:41:4e:8e:e4:a7:5e:
b4:aa:f9:5a:80:3e:85:52:81:ca:8e:93:4d:77:ac:
09:b8:78:a4:36:60:c9:23:ea:a0:73:5c:c5:3e:86:
f7:8c:14:f5:b3:86:b7:ef:9d:73:89:59:ba:a1:50:
ef:01:32:a2:23:1b:6d:bd:1b:3f:e9:07:4d:15:c3:
53:7c:e2:5b:da:22:37:f4:19:5d:33:88:b0:9a:df:
e7:bc:69:b7:19:e0:64:e0:50:dd:7d:05:ef:80:b2:
d6:a3:ff:0e:c1:74:42:33:db:34:cc:35:cf:0e:1e:
7f:c0:fb:f8:82:21:96:61:1b:89:92:6a:88:db:ae:
33:bb:3b:57:f7:5a:ba:e5:86:83:f6:58:92:be:1a:
71:1a:76:01:58:37:6e:7b:01:a6:69:8a:7a:2f:7b:
e8:c5:b9:1f:41:36:c2:ed:e0:17:da:6b:48:99:29:
a1:0a:c3:64:ee:ff:68:7f:43:47:b4:60:4c:90:0c:
a2:e2:ca:e4:2e:b2:fb:a1:20:cb:00:55:10:0c:b3:
09:62:4d:e1:9f:95:48:70:f9:c7:c7:df:b6:ae:2e:
36:2b:71:ae:0f:e0:6f:20:77:0b:93:6d:33:7f:97:
c2:a1:56:28:a6:cb:17:3e:15:46:ff:b2:45:1b:4e:
5b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:93:3D:1E:A0:78:B2:D3:CC:67:A6:23:C9:47:A3:CC:B3:4E:DB:7B
X509v3 Authority Key Identifier:
keyid:D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f6:54:3b:b3:01:e2:9b:91:08:bd:b0:a0:f6:b1:4f:19:d8:
44:e0:40:19:ff:1a:04:dd:a9:41:aa:44:b3:b4:c5:9f:42:6b:
9d:29:be:b1:dc:37:4b:14:92:bd:63:83:e1:ef:57:f9:15:5b:
5c:ea:e6:4c:3c:6c:b0:52:14:10:1a:84:11:a0:02:ca:c9:74:
80:53:e3:8d:0f:b1:75:0e:2b:d0:af:c2:91:b9:e8:94:1b:b9:
85:88:f1:93:73:8d:e4:51:8e:79:09:66:85:57:78:48:bf:ce:
1c:73:2e:2b:3d:1e:5d:0b:e6:cd:d0:83:ca:5e:0e:b2:3e:8f:
c0:f3:7c:38:18:74:7e:50:92:0a:93:3c:5d:6f:4d:6d:56:52:
75:13:c1:a9:93:9c:ea:9b:80:ce:99:cc:c7:4d:25:17:48:5e:
e1:12:12:0f:6d:08:f3:1e:4e:4b:16:36:ac:ba:b4:6a:e0:58:
3f:b0:b0:6e:48:52:7d:e2:92:a9:4a:f3:7c:07:52:12:76:a6:
bd:ad:83:92:24:f6:87:db:b6:b0:ef:20:e0:79:02:e9:da:1e:
e0:0d:d9:e0:99:2f:1f:b0:5d:24:94:bd:b0:f1:af:22:ff:2e:
10:ad:2e:c2:d6:93:63:0b:22:e1:be:6c:53:87:d9:d1:f6:7a:
1d:ee:b2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:44:35 2026 by rpki-client