Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
File: 0TAReuHNwt8cWIFuAOVFH4fvs3A.mft (raw, json)
Hash identifier: Ix1WOTg0P9GQW5kAhtB9/68LAaIjMZfdPyiqKtONkKA=
Subject key identifier: 72:54:FF:71:D5:65:29:7C:F2:A8:96:3B:DB:57:CA:19:B2:B4:66:4A
Authority key identifier: D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70
Certificate issuer: /CN=d130117ae1cdc2df1c58816e00e5451f87efb370
Certificate serial: 01A0D83C24356E577B39918DD347636BD3BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
Manifest number: 0B00
Signing time: Fri 25 Sep 2026 11:03:35 +0000
Manifest this update: Fri 25 Sep 2026 11:03:35 +0000
Manifest next update: Sat 26 Sep 2026 11:03:35 +0000
Files and hashes: 1: 0TAReuHNwt8cWIFuAOVFH4fvs3A.crl (hash: qdXiMaZteV814f6mpORkQX2AmrQ6kbX4UiQVNjuWaP4=)
2: J7yrSEXrlTnnMeUC2XbdaK7bWCA.roa (hash: FD+omFDlJTffjuxE+36nNYtgIdoELzjHmLWeidAPLSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 11:03:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3c:24:35:6e:57:7b:39:91:8d:d3:47:63:6b:d3:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d130117ae1cdc2df1c58816e00e5451f87efb370
Validity
Not Before: Sep 25 11:03:35 2026 GMT
Not After : Sep 26 11:03:35 2026 GMT
Subject: CN=7254ff71d565297cf2a8963bdb57ca19b2b4664a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:23:26:de:4d:34:4e:36:f7:82:58:d9:2d:0b:
f9:39:f0:6b:c0:ec:93:50:9c:a0:e0:c7:56:86:0a:
3e:2c:7e:ec:4b:29:87:53:b6:54:ab:fd:6a:c7:f8:
68:ca:7d:6d:40:f4:cd:c7:d9:d6:36:5d:e2:e4:e8:
1b:7f:c5:44:fc:8a:9f:32:a9:ea:7f:01:16:ec:85:
aa:a2:e0:6d:96:f1:05:cd:dc:c7:35:0a:82:de:d8:
c8:b4:fb:d1:80:8a:8c:11:f0:c2:50:e4:a2:27:89:
3d:1a:84:88:c7:96:1e:05:7c:ce:58:f8:f1:1e:09:
84:8d:2e:8e:f1:d6:9c:2d:3d:65:7a:1c:28:62:56:
15:7c:7c:14:35:02:b0:9a:9e:47:5c:f4:48:d7:93:
45:46:93:33:d7:d2:09:49:33:c4:ea:75:2e:84:93:
b8:c6:9f:a9:bd:f8:97:6c:a9:80:fc:dd:a1:d1:87:
28:c1:e8:7d:ef:74:4f:ea:c8:22:e3:9b:85:cb:5d:
46:d9:f4:e9:66:26:8c:76:f0:56:7a:b3:b8:0c:61:
03:53:db:af:0b:21:54:73:62:72:c1:1e:c8:0a:0c:
fb:b8:1d:4f:e4:91:e5:92:a2:f7:1f:88:5d:8c:9b:
9e:f0:5f:53:a9:09:85:79:34:53:31:22:18:cd:3f:
40:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:54:FF:71:D5:65:29:7C:F2:A8:96:3B:DB:57:CA:19:B2:B4:66:4A
X509v3 Authority Key Identifier:
keyid:D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:2f:11:05:24:cd:63:c4:4c:7d:af:67:07:da:b8:e6:7d:3b:
9f:ff:86:ab:62:c2:cf:f5:aa:25:54:85:a1:83:dd:0c:83:36:
da:0c:c9:c5:8d:d1:0c:7d:f1:ba:d8:86:d9:ad:e5:15:0b:91:
4b:f1:ba:b9:3e:b8:95:97:1e:b2:dd:97:8a:74:c3:05:86:fb:
82:76:f7:3a:37:54:ce:2a:d1:75:9f:c7:ce:3c:62:4e:90:29:
1b:cd:02:53:42:ea:4f:19:e5:91:b0:76:5b:01:a5:4c:39:81:
6d:05:f7:26:fc:0d:ab:2a:62:d7:f4:eb:4a:b4:75:e2:22:d5:
b9:d2:01:3f:80:54:45:59:17:f3:c0:e7:15:27:42:80:ec:f9:
bd:33:25:9b:56:ea:dc:96:04:30:74:81:35:5d:6f:d9:86:6b:
71:c6:02:a1:e8:7d:74:fa:d6:cb:bf:b8:e6:5d:71:68:ff:e2:
f8:fd:06:6e:1c:ee:87:28:9e:c2:05:df:2f:76:bc:5c:8f:6f:
e2:7c:06:50:25:57:54:ee:cc:db:57:fb:ce:ce:95:a7:3d:be:
c9:04:d3:6f:c9:4e:34:6d:50:9d:35:22:00:b4:3f:a8:42:15:
e4:fc:2f:c8:5d:79:23:24:a8:12:1e:f5:76:84:61:e5:4d:c1:
3a:df:cb:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:41:21 2026 by rpki-client