Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
File: 0-2n3wX226CeOefUvex7rg7_urA.mft (raw, json)
Hash identifier: ITG3NDeRL5jd1s7fJlucorLm952+4et+KHPvczf0MDY=
Subject key identifier: 48:8E:4B:30:B9:32:7D:B0:30:36:9F:B1:29:98:2B:56:82:3D:E1:F9
Authority key identifier: D3:ED:A7:DF:05:F6:DB:A0:9E:39:E7:D4:BD:EC:7B:AE:0E:FF:BA:B0
Certificate issuer: /CN=d3eda7df05f6dba09e39e7d4bdec7bae0effbab0
Certificate serial: 01A0CA1032D6D51593CC7F5454A218E662CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
Manifest number: 0771
Signing time: Tue 22 Sep 2026 17:00:54 +0000
Manifest this update: Tue 22 Sep 2026 17:00:54 +0000
Manifest next update: Wed 23 Sep 2026 17:00:54 +0000
Files and hashes: 1: 0-2n3wX226CeOefUvex7rg7_urA.crl (hash: QjxeEwFw9GW7c0bykrcXfuW+VfkucxSdArQbc5KaG5k=)
2: qTWraqPBRkXUgfYW4gfB3AS-jm0.roa (hash: Rbt0ZTsq9hRwXO+cnDLn20WShDhAg5xFObZyVKiajFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:10:32:d6:d5:15:93:cc:7f:54:54:a2:18:e6:62:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3eda7df05f6dba09e39e7d4bdec7bae0effbab0
Validity
Not Before: Sep 22 17:00:54 2026 GMT
Not After : Sep 23 17:00:54 2026 GMT
Subject: CN=488e4b30b9327db030369fb129982b56823de1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ee:a0:62:2e:e1:f8:4d:1c:0c:4a:34:59:18:
60:6d:cb:93:fa:63:78:ad:0a:91:32:0f:3a:ab:83:
e7:68:f3:57:14:ef:e2:d1:f8:9f:9b:23:8f:8f:3a:
00:72:ee:94:51:9b:bf:54:3d:3d:bd:77:b8:d4:08:
53:48:a6:8d:1b:d1:1d:4a:2d:c2:dd:12:2a:e5:6a:
22:8a:c2:dd:d3:8d:97:46:8a:9d:87:bd:d1:16:64:
f8:55:1c:c7:45:5f:47:21:20:77:04:97:a4:fa:b5:
6f:0f:c1:38:f4:dc:ce:26:c4:bc:03:83:28:1e:54:
d9:82:60:61:4f:6a:45:f4:50:8d:d3:a1:0d:e4:e8:
22:60:1c:90:79:b4:13:cc:54:6f:de:bd:f1:73:e8:
30:da:7e:36:6b:8d:77:f7:35:7c:60:4c:49:06:b9:
2d:45:8b:c3:a0:0a:f2:a3:8f:9e:02:79:9d:95:cc:
b1:c8:7a:24:1f:4a:fb:5d:61:0a:ed:b9:cb:57:3d:
da:05:5d:2f:ce:24:33:d0:14:e3:18:17:50:37:37:
f5:7f:99:df:8d:75:6d:a6:b1:e6:db:e1:24:6c:1b:
96:fd:9e:a7:04:7c:ec:cd:34:9d:ff:84:de:03:86:
2d:82:58:b6:53:3a:72:60:c7:21:ce:14:4a:1c:5d:
0c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8E:4B:30:B9:32:7D:B0:30:36:9F:B1:29:98:2B:56:82:3D:E1:F9
X509v3 Authority Key Identifier:
keyid:D3:ED:A7:DF:05:F6:DB:A0:9E:39:E7:D4:BD:EC:7B:AE:0E:FF:BA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:6e:37:d2:d2:64:26:6c:60:dd:e6:d5:45:29:8e:45:4f:1b:
50:ee:cd:0c:a3:f5:ad:13:46:59:90:b8:45:90:ab:2f:aa:02:
dc:a7:e2:24:0b:c7:40:53:42:84:28:d4:1a:2e:32:42:c0:67:
d1:03:5a:16:81:a5:d2:d0:14:fc:64:eb:c3:4d:9e:8d:d2:c0:
36:b3:ed:99:33:97:9d:65:66:7a:f3:95:ad:76:3c:8b:ed:b2:
a4:c7:b6:fb:a8:1b:5d:f7:f7:7f:f0:f2:cd:80:ed:43:c5:4c:
7d:9f:b7:bc:8c:42:24:6d:4b:35:09:9c:19:9f:24:b2:27:49:
77:15:79:4d:1a:83:4a:ae:95:3f:71:e8:08:59:ce:92:a5:d7:
ea:1d:dd:1a:96:7e:4e:b2:28:a9:71:29:67:60:ac:26:20:ea:
dc:5e:f1:18:2b:5e:af:8e:3b:bb:d2:d9:6d:25:d0:af:84:49:
59:4e:dc:b0:1f:31:14:9b:09:8d:54:17:a4:a0:67:6b:8c:6d:
a2:4d:8d:00:03:a9:16:e5:dd:d3:6c:81:8b:ac:35:ba:bf:dd:
22:f6:d7:7e:3b:1e:af:ed:f4:fd:e4:e1:41:b3:e4:40:a9:78:
25:0f:9c:fe:37:3d:47:c2:74:df:01:86:c0:4f:18:83:5b:5a:
0a:2d:04:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:26:13 2026 by rpki-client