Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
File: 0Xrp3J9DomnrCszzSI6GH0_w6J4.mft (raw, json)
Hash identifier: JkfuHvJDR/X4vKnrvAq+iKsnvhIKSPvMz7QdT8ojiPg=
Subject key identifier: ED:0E:D7:02:F7:F3:B1:4E:59:6E:F3:E6:20:2C:AD:3E:EE:DA:F5:40
Authority key identifier: D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E
Certificate issuer: /CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e
Certificate serial: 01A1DCF02A732560E06437E6B1C2717F691A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
Manifest number: 0A7C
Signing time: Sun 15 Nov 2026 02:01:29 +0000
Manifest this update: Sun 15 Nov 2026 02:01:29 +0000
Manifest next update: Mon 16 Nov 2026 02:01:29 +0000
Files and hashes: 1: 0HODiJ6zETUxB5V-7gVm2tivJwY.roa (hash: qGeG3nhf+YLEqzJKX+7cT8wuG9iiTSfd9cCIvKbcpI4=)
2: 0Xrp3J9DomnrCszzSI6GH0_w6J4.crl (hash: uwrJJXXKNW2ND/IGcnVz2K1mzYhE68uXpZws4RnAoeA=)
3: UwYA2ZqOaaqxV-SbROLNU0LYhKs.roa (hash: yo5jrp46t5eed1f0aD/LDv5fDkeM+5705upQY6SakhI=)
4: VVzdT8i8Ic0mJD0Mcn7QSzTVqqg.roa (hash: 2cduIqBhGdf+BQ9zIXwABKUp5BhlSqCikGKIR7rcdp8=)
5: jguZW_JXxXZXEs7UeDtL_uxFA7E.roa (hash: Di5fz7I66QZtyKR+rBwTjQSM3JlDgDmbsZZusapxtVw=)
6: s3WGIAUoxaXezGvnamEPgxxSe6s.roa (hash: m+UVZt/8nZjpbFNEjpwY5nsDKhbrb260ASrF4yP760c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:f0:2a:73:25:60:e0:64:37:e6:b1:c2:71:7f:69:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e
Validity
Not Before: Nov 15 02:01:29 2026 GMT
Not After : Nov 16 02:01:29 2026 GMT
Subject: CN=ed0ed702f7f3b14e596ef3e6202cad3eeedaf540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1f:7b:f4:32:6a:89:a0:34:50:33:76:b8:f5:
b1:b0:ad:86:8a:dd:db:6f:ca:2d:fa:65:da:3d:0f:
7c:0d:7e:f2:f9:5b:e5:e8:6a:06:dd:a9:7b:4c:1b:
9a:29:d3:e0:8c:94:f8:f4:8b:9a:d5:74:5c:29:86:
19:ca:e4:32:e2:f4:8a:0c:8e:d5:2a:78:c4:2f:d4:
d5:fc:3d:92:a2:7e:75:c4:62:7f:6e:b5:d1:ac:e4:
c9:d0:83:77:3a:ab:87:0a:e4:9e:6b:20:f7:d1:4b:
46:3d:d1:59:b7:ef:d8:3e:1a:10:5b:24:7c:08:d3:
00:ac:f1:2a:ae:a8:ec:51:6c:bd:ac:56:7c:13:88:
24:76:24:d4:82:09:52:09:55:5a:ad:22:fd:d0:3b:
ae:46:68:25:ae:25:d3:4f:9d:de:c7:32:84:5b:c9:
c2:3a:6b:61:e5:1b:a0:a8:ea:03:d3:30:2b:f5:63:
23:4f:84:74:4d:68:ad:1c:85:6d:41:d8:78:89:b2:
be:ed:81:0f:47:6d:c0:a1:a1:6e:5b:c9:ea:14:b8:
cf:33:94:ac:16:f8:ad:2d:0e:86:34:28:bc:a0:c1:
cc:e8:da:82:3f:de:e1:58:7b:16:54:45:6c:4b:4c:
21:70:9b:cb:a6:2c:c0:e7:60:f4:de:19:75:87:87:
7f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0E:D7:02:F7:F3:B1:4E:59:6E:F3:E6:20:2C:AD:3E:EE:DA:F5:40
X509v3 Authority Key Identifier:
keyid:D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:87:ef:8e:e7:e6:37:ac:89:09:a8:a2:b5:f8:53:cd:ac:d5:
6c:3b:47:c5:e5:81:c8:53:9a:12:49:83:0e:eb:07:25:22:fc:
a8:ba:b4:57:74:47:51:92:1e:6e:f8:3f:5a:62:95:df:b0:88:
bf:a6:d7:b0:2d:52:59:cf:44:57:23:19:2c:47:f2:47:c1:7f:
64:75:1e:f1:15:7c:c7:a9:4a:57:2f:f9:5d:41:bb:e8:9d:35:
1d:e2:a4:d0:fb:4a:c3:d1:37:3f:f8:f0:b3:a2:7b:35:45:11:
6b:68:f3:cc:87:96:39:6b:c7:e5:dc:b2:61:5b:a9:43:fa:b8:
20:56:59:5b:2f:03:37:57:15:24:f4:9d:3b:19:1a:12:3d:73:
aa:d8:72:9e:ff:c0:61:f2:36:e9:15:69:d4:2c:58:da:1f:d6:
ea:4a:d3:da:26:54:b5:6a:25:e5:ac:f5:7d:9b:94:cc:b8:9c:
54:02:32:f8:b9:77:cf:e1:2d:3c:3a:15:4a:58:ba:00:64:77:
c5:69:10:e5:36:68:71:f8:cd:01:00:27:a2:6f:d9:77:de:dd:
a0:57:53:36:cf:3c:d6:b8:e4:99:11:8d:19:e3:63:97:84:10:
fd:a0:59:48:d2:92:72:4b:d2:b6:f6:f8:3b:2d:2a:2c:68:5d:
8c:bf:3e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:45:10 2026 by rpki-client