Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
File: 0TAReuHNwt8cWIFuAOVFH4fvs3A.mft (raw, json)
Hash identifier: Jvk+v1uEuLcu3+Qqa6NMzIkWFmGqYRPifY2RzKrY4ds=
Subject key identifier: F7:55:A2:BC:53:CC:E9:ED:01:04:9C:EE:58:B5:7A:F7:02:67:43:95
Authority key identifier: D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70
Certificate issuer: /CN=d130117ae1cdc2df1c58816e00e5451f87efb370
Certificate serial: 019E1CB566626D9483ECF2C9A4E76078BF8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
Manifest number: 0994
Signing time: Tue 12 May 2026 15:01:50 +0000
Manifest this update: Tue 12 May 2026 15:01:50 +0000
Manifest next update: Wed 13 May 2026 15:01:50 +0000
Files and hashes: 1: 0TAReuHNwt8cWIFuAOVFH4fvs3A.crl (hash: ATHOcLE0pf8auydhZyWFKZ+fcmgB8l56XUgCOEoFAPs=)
2: p9tR_YPIsnjcSaCfQzqt0nEYrrM.roa (hash: ELI33Gpd5gDnI+1hXpA3k3XALmGCvJJlHqj3mPxtk9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:66:62:6d:94:83:ec:f2:c9:a4:e7:60:78:bf:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d130117ae1cdc2df1c58816e00e5451f87efb370
Validity
Not Before: May 12 15:01:50 2026 GMT
Not After : May 13 15:01:50 2026 GMT
Subject: CN=f755a2bc53cce9ed01049cee58b57af702674395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e2:e3:53:11:b2:6d:a6:7f:e8:ab:35:7d:d4:
78:a4:26:db:00:cc:de:ef:4a:02:94:95:b6:99:a8:
fb:c9:a4:fd:f0:9d:c8:be:80:53:73:09:ec:c5:b7:
05:2d:27:a7:ea:5d:01:90:44:64:9d:54:f8:48:93:
e7:1e:cd:8a:52:16:bd:d6:04:42:90:7e:b0:62:0e:
36:0c:8f:5e:8b:22:2b:7e:d7:3d:d5:4e:cd:53:29:
65:79:96:bc:9c:7c:a3:47:6d:28:c3:e7:f2:98:20:
59:29:f8:e4:00:4f:f2:a8:a9:71:8a:90:5d:72:05:
0f:88:63:fc:ab:cc:92:b6:65:4e:3e:e7:72:d6:45:
a1:eb:76:52:b6:e5:2f:61:2e:49:89:ca:4f:78:ff:
46:fc:39:41:11:a0:88:b1:2c:31:68:24:2c:3c:7b:
8e:04:8e:50:f3:8e:10:40:49:07:30:1c:a0:c1:f6:
2a:a6:82:c3:1d:15:80:20:c8:eb:cf:4c:19:a6:4d:
5a:df:e8:14:69:97:37:e0:a3:26:24:6f:5f:51:1b:
9e:a7:68:d5:c9:a9:64:3f:7a:8f:38:f5:c4:62:1a:
91:34:25:1d:61:77:a8:95:a1:7f:44:8e:cd:ff:7c:
f0:e1:84:e2:43:11:87:9a:73:4c:36:40:77:7b:3b:
e8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:55:A2:BC:53:CC:E9:ED:01:04:9C:EE:58:B5:7A:F7:02:67:43:95
X509v3 Authority Key Identifier:
keyid:D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:86:06:49:fd:dc:3d:ca:3e:80:a7:d0:fb:c5:f5:6c:0d:af:
a5:ab:fa:10:59:a3:95:de:a4:d7:37:50:b3:c8:d9:3c:45:ad:
e2:70:2c:0c:55:76:61:a2:79:60:77:c5:d0:e2:79:30:ab:ed:
f6:ac:a6:2e:32:f1:e3:52:01:55:51:49:e2:c1:f4:5f:1b:a2:
4f:17:a9:ab:7e:33:dc:6f:0b:cf:38:ab:d2:68:a6:3b:2d:34:
f5:a5:87:af:44:87:bd:f3:20:5a:0d:0f:27:bb:fa:49:d9:8a:
16:b6:12:9d:70:10:07:c5:97:f2:98:eb:c5:5b:83:da:9a:bd:
aa:65:56:a1:3c:9f:e8:7b:52:af:13:84:6e:02:0c:ed:a0:05:
9c:8f:c0:d6:35:41:a1:5c:60:e0:8b:17:83:b1:51:52:6a:7e:
2d:75:c4:48:67:04:22:50:ab:f1:78:f1:36:70:9d:79:e8:5f:
32:77:cf:d1:f1:c7:d4:7d:cb:31:c8:1e:eb:da:50:8e:f1:88:
d0:20:4a:ec:7a:9f:16:5f:48:a7:1f:ac:fa:dc:28:2c:97:7c:
79:ee:11:40:8b:b2:fb:9c:8a:20:8b:f8:87:6e:d2:b3:0d:00:
0c:09:c1:bd:ba:aa:fd:8b:0f:60:59:d4:b9:2b:b6:9a:fc:f7:
f3:3a:c5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:52:09 2026 by rpki-client