Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/901957-4e71-4cf3-acb8-fb2c8a814347/1/D0IHzoCFWlzJfAukc7lYcsfBk8Q.mft
File: D0IHzoCFWlzJfAukc7lYcsfBk8Q.mft (raw, json)
Hash identifier: 4/uXlhCk3KhklroJu/NZ/impp75lhal5uISbZqgUouc=
Subject key identifier: 88:9D:DD:E6:69:F0:A0:C4:91:74:DB:BA:5F:DC:80:E6:91:61:F4:7F
Authority key identifier: 0F:42:07:CE:80:85:5A:5C:C9:7C:0B:A4:73:B9:58:72:C7:C1:93:C4
Certificate issuer: /CN=0f4207ce80855a5cc97c0ba473b95872c7c193c4
Certificate serial: 01A0CB90F434DEAF412A655F760247B91B89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0IHzoCFWlzJfAukc7lYcsfBk8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/901957-4e71-4cf3-acb8-fb2c8a814347/1/D0IHzoCFWlzJfAukc7lYcsfBk8Q.mft
Manifest number: 0325
Signing time: Wed 23 Sep 2026 00:01:09 +0000
Manifest this update: Wed 23 Sep 2026 00:01:09 +0000
Manifest next update: Thu 24 Sep 2026 00:01:09 +0000
Files and hashes: 1: D0IHzoCFWlzJfAukc7lYcsfBk8Q.crl (hash: eff4fLbJiX7bPbBLQ8VmYNujh3tpLAO305jJmY3HL2E=)
2: JE0qSqnrDvpmqnPdeXtfY3ANrng.roa (hash: X1IyMy+PkbmsuUsMO+dutHfTqsCVh+3kH50SqPaLXA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/901957-4e71-4cf3-acb8-fb2c8a814347/1/D0IHzoCFWlzJfAukc7lYcsfBk8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/901957-4e71-4cf3-acb8-fb2c8a814347/1/D0IHzoCFWlzJfAukc7lYcsfBk8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/D0IHzoCFWlzJfAukc7lYcsfBk8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:90:f4:34:de:af:41:2a:65:5f:76:02:47:b9:1b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f4207ce80855a5cc97c0ba473b95872c7c193c4
Validity
Not Before: Sep 23 00:01:09 2026 GMT
Not After : Sep 24 00:01:09 2026 GMT
Subject: CN=889ddde669f0a0c49174dbba5fdc80e69161f47f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:24:a2:9e:ed:57:c5:98:1b:a1:7b:fa:d6:df:
96:5e:7f:96:1c:f9:63:31:ee:9a:8a:49:53:6b:fa:
85:f9:46:ab:1b:c3:56:b9:8d:cf:fd:25:15:0e:96:
4e:da:6f:1f:8b:54:b1:59:97:b1:7e:1d:22:03:0f:
67:9c:e5:8e:7c:2b:11:b2:3a:e0:d3:9d:ae:12:c1:
1b:35:ae:41:19:ab:fe:dd:34:22:81:96:6e:db:f5:
64:8f:78:c1:8d:8c:fa:a7:81:61:5f:0f:23:43:8c:
7d:cc:e3:1b:b7:e8:66:73:7f:ce:96:f4:5f:65:19:
cf:df:36:90:5b:21:33:a1:d4:52:7c:12:c7:b8:5a:
18:77:38:09:74:63:68:92:f8:44:7e:ba:7d:f5:47:
60:52:55:97:59:53:f6:c9:62:3c:d5:a2:88:dd:c9:
56:0e:16:52:59:e5:03:1a:fd:03:da:96:9d:0b:b3:
27:65:fe:4c:5f:a6:03:2b:bb:ca:23:44:be:a8:67:
2b:7a:5c:b9:cf:06:fd:db:56:e3:a7:b7:6e:49:f5:
ad:3b:f9:b8:1a:7c:2d:59:c6:f2:27:d0:f6:0f:84:
a2:81:8b:3e:31:ec:4a:4b:89:c1:bc:30:d6:bd:53:
8e:ae:7a:88:f6:e8:9d:3d:13:f9:55:6e:36:1d:92:
11:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:9D:DD:E6:69:F0:A0:C4:91:74:DB:BA:5F:DC:80:E6:91:61:F4:7F
X509v3 Authority Key Identifier:
keyid:0F:42:07:CE:80:85:5A:5C:C9:7C:0B:A4:73:B9:58:72:C7:C1:93:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0IHzoCFWlzJfAukc7lYcsfBk8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/901957-4e71-4cf3-acb8-fb2c8a814347/1/D0IHzoCFWlzJfAukc7lYcsfBk8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/901957-4e71-4cf3-acb8-fb2c8a814347/1/D0IHzoCFWlzJfAukc7lYcsfBk8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:65:e6:68:ad:05:4e:68:f0:2a:b1:42:86:c0:ce:34:97:60:
e6:a7:fa:77:37:99:8d:00:cd:86:e1:bf:98:ea:15:96:44:51:
64:f2:e8:ea:a6:98:ca:69:f7:a4:9e:3a:95:55:da:b6:5f:ac:
bf:c7:93:81:31:b6:5e:b2:91:ea:21:a4:ff:d0:10:3f:da:05:
64:c5:d5:f7:5d:ee:a5:7a:10:04:54:03:df:03:bd:f4:e0:4f:
9a:0e:a9:be:f4:1f:9f:7f:d3:8a:91:25:a9:b1:ad:02:ce:df:
b6:28:9f:0a:d4:42:1e:12:36:a7:0e:2a:70:e3:40:30:a2:a3:
56:c9:48:8a:6a:a8:b6:d5:33:d4:3d:18:6a:d4:e9:5c:82:bf:
4c:43:d0:69:e4:d9:e8:51:b5:b2:41:79:ab:fb:61:f7:9f:c9:
3a:b7:f9:be:9c:08:0e:f8:1c:b7:e4:29:9a:83:58:4a:ac:65:
36:0e:4e:4c:97:a9:84:74:c5:7d:4c:1e:8d:a0:68:d5:b0:83:
19:e8:31:7a:77:fc:88:2b:67:07:bf:fd:d5:72:08:ac:ec:0a:
e8:19:74:46:31:2d:67:09:3f:7c:e2:c4:77:b3:3d:9a:3c:35:
43:ba:ce:8e:fd:c6:9f:8f:a3:c7:be:49:02:27:51:a2:ac:b2:
d3:76:a1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:42:37 2026 by rpki-client