Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/964e06-e186-4cb5-aaab-af99cfadacb6/1/0Nela7eOsawUaqeHHn3JaNsczZI.mft
File: 0Nela7eOsawUaqeHHn3JaNsczZI.mft (raw, json)
Hash identifier: jP2tw3KWE2IWBCFeGvyyNBFvAi6OZ84cI6hSmyhjaJw=
Subject key identifier: E2:00:B5:AB:E1:64:68:0F:3B:1E:40:34:4C:30:F6:EF:13:17:BB:4D
Authority key identifier: D0:D7:A5:6B:B7:8E:B1:AC:14:6A:A7:87:1E:7D:C9:68:DB:1C:CD:92
Certificate issuer: /CN=d0d7a56bb78eb1ac146aa7871e7dc968db1ccd92
Certificate serial: 01A0C93438CAB6DF31DC3F0241DF972870C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Nela7eOsawUaqeHHn3JaNsczZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/964e06-e186-4cb5-aaab-af99cfadacb6/1/0Nela7eOsawUaqeHHn3JaNsczZI.mft
Manifest number: 3C
Signing time: Tue 22 Sep 2026 13:00:37 +0000
Manifest this update: Tue 22 Sep 2026 13:00:37 +0000
Manifest next update: Wed 23 Sep 2026 13:00:37 +0000
Files and hashes: 1: 0Nela7eOsawUaqeHHn3JaNsczZI.crl (hash: wbdHTdUxKEmoWi4OSF3NFbZ8OqKD6onIYvI9Fr56KNw=)
2: k0-sr1otnLush7BXbOQg3Kr4Zog.asa (hash: W4A6B38EMlC2Mw9enNNdoGrJvQBdROS5L+dxnC72N0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/964e06-e186-4cb5-aaab-af99cfadacb6/1/0Nela7eOsawUaqeHHn3JaNsczZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/964e06-e186-4cb5-aaab-af99cfadacb6/1/0Nela7eOsawUaqeHHn3JaNsczZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Nela7eOsawUaqeHHn3JaNsczZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:34:38:ca:b6:df:31:dc:3f:02:41:df:97:28:70:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0d7a56bb78eb1ac146aa7871e7dc968db1ccd92
Validity
Not Before: Sep 22 13:00:37 2026 GMT
Not After : Sep 23 13:00:37 2026 GMT
Subject: CN=e200b5abe164680f3b1e40344c30f6ef1317bb4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8a:ab:b9:c4:40:7d:8e:7d:69:9d:ca:e1:76:
06:ed:dc:bb:3d:32:03:57:ca:1a:20:c6:4f:3b:8e:
f9:6d:b3:96:18:37:5f:11:d4:68:d7:a4:b4:00:69:
8b:82:43:91:63:86:ee:bf:b1:29:38:22:a8:9b:26:
ba:d4:4a:f8:c1:5a:81:fc:7b:aa:b9:b4:3f:ee:43:
be:36:3b:35:a0:56:06:1b:cc:b0:14:4d:9a:c6:fc:
24:a3:ca:86:ea:d7:a9:37:41:9a:e2:ae:73:a2:6b:
b8:54:28:a8:c0:2d:06:8e:48:ca:0a:b3:f0:13:64:
76:b6:2e:82:c0:69:95:45:d6:b5:62:88:21:a0:66:
0d:7e:0e:da:ce:08:04:5f:87:ba:d4:22:ce:da:7a:
d3:28:5d:57:2e:50:52:5e:5d:e8:0e:70:f2:38:c1:
47:a2:1b:90:37:1b:7c:26:08:03:bd:4a:c5:c9:6b:
70:26:e7:54:cf:cd:ca:d6:53:ea:ae:ed:f1:5f:5f:
47:b1:9f:20:32:00:c1:bb:78:04:42:0f:73:03:a7:
d6:51:59:20:cc:cc:45:f7:70:ca:8f:7a:2e:bd:5a:
68:1c:52:1c:c6:8e:1e:f5:b3:19:a7:75:b3:4a:26:
3d:6c:55:8c:7e:ff:52:cb:8b:2d:da:8b:49:35:39:
39:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:00:B5:AB:E1:64:68:0F:3B:1E:40:34:4C:30:F6:EF:13:17:BB:4D
X509v3 Authority Key Identifier:
keyid:D0:D7:A5:6B:B7:8E:B1:AC:14:6A:A7:87:1E:7D:C9:68:DB:1C:CD:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Nela7eOsawUaqeHHn3JaNsczZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/964e06-e186-4cb5-aaab-af99cfadacb6/1/0Nela7eOsawUaqeHHn3JaNsczZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/964e06-e186-4cb5-aaab-af99cfadacb6/1/0Nela7eOsawUaqeHHn3JaNsczZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:65:81:5b:1a:16:5d:40:81:c4:83:99:68:6c:6e:6e:6c:80:
58:0c:ab:7b:2a:32:35:a9:4a:fc:43:57:4c:de:6d:b7:30:f8:
c7:b9:ff:ee:38:12:bb:e1:18:6a:fe:9a:ee:8a:d8:f6:f9:40:
6e:04:af:af:40:ce:a8:7c:cf:71:ef:40:c6:b6:92:5f:8c:da:
ef:86:10:83:7d:56:07:33:7c:0d:fd:1a:08:da:f9:d5:b6:e5:
a9:0a:9b:9e:67:f2:75:36:c1:11:9f:6a:67:14:dd:b9:45:05:
a6:2d:ad:ad:ef:d2:43:3e:fd:d0:52:49:e9:4b:28:16:4c:05:
33:61:e3:ca:b0:99:a5:35:21:92:77:b5:3c:ac:f1:94:17:a0:
8f:ce:fb:88:0e:5a:60:a7:7b:17:20:a7:ed:29:7c:26:ec:72:
57:c8:d2:7a:48:6e:c8:d9:17:15:4c:52:16:c8:84:8b:7b:b0:
4d:fb:99:e1:5b:96:11:6d:41:e2:11:74:8d:d8:c7:86:b7:40:
6c:21:d3:2e:a2:b2:e6:ec:1d:c2:56:0b:b3:ab:1c:9f:98:c1:
a6:b5:07:fb:e9:f9:7f:93:66:75:42:92:32:ab:76:1f:56:fa:
33:f3:82:2f:41:40:98:d5:24:7f:0e:52:86:95:f5:24:27:2f:
d5:e8:e5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:45:30 2026 by rpki-client