Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
File: 0rvJBVXW0NNDK6u5W2DN7upYD1g.mft (raw, json)
Hash identifier: kLjZXwfFtryOP5PLFaP6mgaQRemSoB+VZKmURWrHzjM=
Subject key identifier: 95:AF:3F:42:F8:CB:1B:A4:84:2F:C7:7F:61:A1:D9:E5:9D:2B:5D:E9
Authority key identifier: D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58
Certificate issuer: /CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58
Certificate serial: 01A0C96B47110F887145518CF925E34A63F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
Manifest number: 18FD
Signing time: Tue 22 Sep 2026 14:00:45 +0000
Manifest this update: Tue 22 Sep 2026 14:00:45 +0000
Manifest next update: Wed 23 Sep 2026 14:00:45 +0000
Files and hashes: 1: 0rvJBVXW0NNDK6u5W2DN7upYD1g.crl (hash: iGUPjOKqMxaH3ELqs5CF9P+lMLkIgXEg5wdjVyk8IGM=)
2: CuoNMY7Qq37VOjNaS3NSAgeASU8.roa (hash: oV7Za3ljWN5/ELZ5W0IrtTxHnlCCtRf76iTFx/48w6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:47:11:0f:88:71:45:51:8c:f9:25:e3:4a:63:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58
Validity
Not Before: Sep 22 14:00:45 2026 GMT
Not After : Sep 23 14:00:45 2026 GMT
Subject: CN=95af3f42f8cb1ba4842fc77f61a1d9e59d2b5de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cf:4e:71:08:fc:fd:2b:41:51:d6:81:70:34:
ad:e7:45:c2:96:6c:82:7e:12:ac:51:2f:f8:99:9e:
58:44:5b:84:7d:9f:0f:50:73:0a:2e:28:b0:45:c3:
89:25:f4:24:28:d2:a0:21:3a:ef:aa:6b:fb:ee:3e:
ae:44:59:8f:bf:13:03:7b:24:ee:0f:d2:2b:e4:40:
f2:12:0f:22:f1:6f:b6:40:fb:76:cb:0e:67:99:ca:
44:e1:8f:2c:b5:de:03:16:7b:4e:62:a1:66:01:2e:
f2:d8:83:d4:21:a5:bd:86:46:67:24:45:d5:d7:4e:
d7:db:45:02:fa:9d:79:71:b3:6a:6f:cf:f3:95:c7:
82:0a:f1:47:9d:bd:72:44:7d:02:05:2b:2a:52:ea:
94:bb:db:b4:35:da:85:16:1f:fb:8e:e5:26:fc:70:
34:c4:87:2c:c9:37:ff:23:5e:4d:30:e0:95:0f:3f:
86:12:89:27:fc:2b:3f:87:06:4d:a6:53:bc:23:08:
00:cb:f0:0e:cc:90:22:24:2f:70:aa:52:e5:4d:4c:
fb:3a:b6:e6:5c:45:ca:47:99:f3:88:9f:a9:b9:0b:
e6:0a:f9:f6:b6:2c:37:16:a3:6b:62:b0:2f:6c:9a:
7e:cd:c8:f2:c3:81:b0:e3:28:2d:8f:9e:e1:61:4b:
4a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AF:3F:42:F8:CB:1B:A4:84:2F:C7:7F:61:A1:D9:E5:9D:2B:5D:E9
X509v3 Authority Key Identifier:
keyid:D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:90:cc:91:c5:60:df:81:d1:da:50:a3:52:bb:f9:49:fd:47:
00:94:55:43:ff:60:97:68:e7:ee:12:6b:75:81:a4:6f:eb:76:
e9:6a:59:98:2d:b3:6b:99:7e:8a:b0:8a:b3:69:b0:1a:48:51:
62:0a:b8:2f:c6:be:5e:9d:73:7e:d0:da:5b:d4:18:32:f5:ac:
ca:1b:e8:c8:c0:74:c3:9d:1e:19:da:0a:cc:bb:c2:79:2b:22:
a9:65:ad:24:3b:16:f4:e9:29:3b:f5:c3:ea:00:80:69:18:42:
7c:6a:5f:7a:f0:a2:ba:cc:c1:5f:d8:73:76:de:a9:a1:f1:fc:
91:20:a0:6e:27:ce:b1:aa:8f:4a:6a:18:e5:ae:ad:9b:82:b2:
21:96:6b:5b:6f:bd:67:42:85:db:24:9e:da:a7:38:06:df:e1:
f8:20:cf:78:9d:35:c7:97:60:9a:b3:f6:4f:3f:fe:53:e9:12:
82:0b:27:84:12:78:4c:d6:fd:80:e5:89:35:d5:81:81:ac:da:
a1:7d:90:fc:af:8a:ce:af:e6:ac:8e:fc:85:97:f4:47:fc:74:
9b:46:46:1f:77:11:e4:df:e3:ef:bb:f7:63:d9:77:10:5b:82:
f6:30:ab:75:b2:b9:19:93:70:b1:76:9b:bf:74:39:6a:f3:82:
80:b4:8e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:15:00 2026 by rpki-client