Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft
File: 0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft (raw, json)
Hash identifier: s/BsDueAbEmLLQjiyLKFtMKw7jNB2cHOVEuVrH9EVMQ=
Subject key identifier: F5:80:13:F3:34:00:B0:1E:8B:51:82:06:28:0E:41:96:31:84:EE:FE
Authority key identifier: D2:B3:6A:D2:8E:52:1E:DA:B4:B4:DE:A3:49:A2:77:72:D4:B2:A7:BE
Certificate issuer: /CN=d2b36ad28e521edab4b4dea349a27772d4b2a7be
Certificate serial: 01A0DD97880E3F78118C4B9800151C957C4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rNq0o5SHtq0tN6jSaJ3ctSyp74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft
Manifest number: 17B7
Signing time: Sat 26 Sep 2026 12:01:30 +0000
Manifest this update: Sat 26 Sep 2026 12:01:30 +0000
Manifest next update: Sun 27 Sep 2026 12:01:30 +0000
Files and hashes: 1: 0rNq0o5SHtq0tN6jSaJ3ctSyp74.crl (hash: y8RNYw2deSKVl4gvQLPDMtjTHT5dYSihG32UBORUdqA=)
2: t0X5t_3y1eMrgSVfnROrir2IJb4.roa (hash: BPcyM2IeAIooAh+FVKFVf4qaLxjgFOkdsiFt2kQ2Eag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rNq0o5SHtq0tN6jSaJ3ctSyp74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:88:0e:3f:78:11:8c:4b:98:00:15:1c:95:7c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2b36ad28e521edab4b4dea349a27772d4b2a7be
Validity
Not Before: Sep 26 12:01:30 2026 GMT
Not After : Sep 27 12:01:30 2026 GMT
Subject: CN=f58013f33400b01e8b518206280e41963184eefe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:23:8a:68:e6:c9:97:cd:a8:89:47:b7:ff:39:
66:46:b7:5f:8d:5d:a2:47:79:3e:01:6f:89:28:99:
f1:40:0e:3f:4f:32:e9:47:5b:de:db:c8:6a:a0:25:
d5:19:68:aa:a3:a0:5a:9b:03:a0:e5:71:f4:30:5c:
df:14:2d:2b:e3:f3:1e:2b:3d:91:35:25:17:cb:34:
fd:86:5f:e1:74:7b:0c:1d:63:72:fc:63:90:de:3c:
ab:f2:ae:01:53:b4:74:ac:a2:cb:33:59:17:b6:d8:
c0:76:c0:2f:77:b5:d2:bd:89:bd:35:79:c1:7c:0b:
32:a3:36:53:e2:43:18:fe:ae:00:cf:1e:04:30:16:
fd:f9:f7:10:d2:da:bb:7a:f7:c2:95:4d:86:f0:70:
71:52:04:48:2b:84:4c:d1:97:f7:f7:67:60:cf:96:
69:e9:45:64:34:8d:dc:52:14:c3:54:d7:0e:23:e5:
5d:a1:97:9e:83:99:a0:b7:81:b5:5b:35:c0:7d:d4:
5c:d3:ad:76:6c:ba:e0:d7:6f:c6:b3:0b:c4:d4:52:
e8:2f:17:b5:9e:5e:18:4d:71:23:b4:c4:1e:65:3c:
9b:14:31:ee:4c:05:4a:da:ad:c7:e5:9a:0b:75:f9:
5e:a3:18:2a:56:44:47:b7:10:0b:d9:79:85:c1:98:
34:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:80:13:F3:34:00:B0:1E:8B:51:82:06:28:0E:41:96:31:84:EE:FE
X509v3 Authority Key Identifier:
keyid:D2:B3:6A:D2:8E:52:1E:DA:B4:B4:DE:A3:49:A2:77:72:D4:B2:A7:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rNq0o5SHtq0tN6jSaJ3ctSyp74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b2:f3:92:4b:37:be:59:4e:9a:96:4e:d6:2e:a0:cf:8b:82:
a4:72:9b:d3:8e:c0:25:dd:27:4e:96:22:bb:0f:d3:c5:24:3f:
a3:66:c7:03:5b:c0:d7:ee:04:66:26:48:37:07:ea:8e:f4:37:
37:90:46:cc:3c:8e:0e:17:7d:e7:90:52:d4:a9:75:6b:58:2b:
11:e9:10:50:5f:3a:7d:50:e3:86:91:74:84:9d:3c:16:0e:30:
70:a4:9d:d2:83:0c:d4:15:f5:36:87:bf:2f:3b:60:d1:db:7c:
9c:3f:70:e9:78:4b:25:29:ce:02:ff:44:50:83:33:82:00:b3:
18:8a:48:ec:12:d7:db:ee:30:6a:1e:f2:67:7a:1c:29:04:53:
d5:ed:b3:16:2d:3d:fb:2d:21:61:ec:1e:b4:eb:93:7c:e1:0f:
ce:cb:29:d3:19:e5:78:25:a3:f7:8b:88:7d:f7:aa:55:ff:68:
91:e0:1e:9f:d4:72:31:e8:bd:70:a5:a4:b8:94:f9:cc:e1:73:
a8:54:9f:e9:83:42:c5:f3:8e:89:72:20:87:54:bf:4c:10:8d:
2b:dd:e8:17:cb:42:ee:c7:fa:25:5b:fe:22:34:0b:63:43:1a:
11:52:06:19:49:28:4f:3f:48:a0:ba:dd:fd:2b:bf:93:b8:41:
c9:09:81:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 19:03:32 2026 by rpki-client