Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
File: 0hNMcoigwXozuLX-jFgGa0RC8YM.mft (raw, json)
Hash identifier: 1blOYzbs6E3hcbtgDpIiLZopSLX6hHbjusoaplqu6V0=
Subject key identifier: 3B:FB:92:E3:75:28:25:AE:2B:7F:95:9A:CB:D6:13:BD:22:66:A1:C4
Authority key identifier: D2:13:4C:72:88:A0:C1:7A:33:B8:B5:FE:8C:58:06:6B:44:42:F1:83
Certificate issuer: /CN=d2134c7288a0c17a33b8b5fe8c58066b4442f183
Certificate serial: 01A0D04912CCE2E148147C6581B809669B9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
Manifest number: 089D
Signing time: Wed 23 Sep 2026 22:00:44 +0000
Manifest this update: Wed 23 Sep 2026 22:00:44 +0000
Manifest next update: Thu 24 Sep 2026 22:00:44 +0000
Files and hashes: 1: 0hNMcoigwXozuLX-jFgGa0RC8YM.crl (hash: GOUDGfiJSMwTKXsos38iUYWISM2p94XGqMwTnPDkD9I=)
2: snrfUjBn7hs_JXI-JDADVPqBfu0.roa (hash: chl5WtQulq1NJ8dnVwRq5DKzxSTQgdztVrgONAQmO1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:49:12:cc:e2:e1:48:14:7c:65:81:b8:09:66:9b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2134c7288a0c17a33b8b5fe8c58066b4442f183
Validity
Not Before: Sep 23 22:00:44 2026 GMT
Not After : Sep 24 22:00:44 2026 GMT
Subject: CN=3bfb92e3752825ae2b7f959acbd613bd2266a1c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cc:31:5c:62:97:aa:5e:52:c4:74:bf:58:be:
42:53:f1:0f:f6:84:d1:9a:d9:75:51:36:1a:dd:a0:
a9:8c:f8:33:77:6f:92:e6:38:19:1f:e3:07:d9:e4:
12:bc:37:ec:d4:4b:d4:13:d2:b2:be:d0:7e:ce:51:
2a:12:cd:9a:b9:84:4c:72:68:83:32:a4:95:03:db:
1a:3f:55:2e:47:32:c2:df:dd:70:93:30:9c:89:d8:
b4:d5:b9:c2:91:dd:34:a6:5e:1c:8f:36:8b:26:ac:
fd:32:95:11:b6:1d:30:34:31:3f:c4:4e:cb:a2:95:
3e:ab:87:33:27:2c:d2:26:9e:c6:34:ba:a3:a1:94:
ed:ab:44:e9:99:90:ea:03:07:28:5e:9a:dc:a0:7c:
8d:09:bd:62:4a:de:76:68:60:07:82:fa:5c:07:a6:
89:51:71:bc:c4:bf:30:d2:99:e4:2e:c4:2a:e8:00:
20:b2:0d:4d:65:10:c8:b6:d5:e5:14:3f:82:a6:36:
53:af:12:8c:22:06:73:b6:cd:7e:fa:44:49:79:2b:
5b:35:b1:8e:23:af:03:73:6f:d0:65:6f:02:a8:fe:
62:a9:06:b0:37:9d:5f:d1:e0:6b:f0:e8:17:fb:d9:
94:92:5f:d7:f6:bf:6d:5b:cf:06:b9:90:a0:87:0d:
13:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:FB:92:E3:75:28:25:AE:2B:7F:95:9A:CB:D6:13:BD:22:66:A1:C4
X509v3 Authority Key Identifier:
keyid:D2:13:4C:72:88:A0:C1:7A:33:B8:B5:FE:8C:58:06:6B:44:42:F1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a0:94:ae:f4:2b:8d:6c:9e:0f:b8:da:c0:6f:6d:f2:9d:3e:
b9:0a:2f:4b:f0:ba:26:ea:26:3b:12:63:90:9b:4c:d2:4e:9d:
eb:58:eb:f6:aa:b9:b9:35:a5:d6:1f:de:49:a8:f4:33:ef:51:
07:11:cc:ed:7c:f8:45:a4:fd:aa:59:56:8f:cd:9d:b3:9e:c1:
d9:03:2a:1d:c4:d7:13:09:1e:93:d4:9f:6b:ac:5a:95:3d:25:
4c:7e:93:ea:98:5e:27:c5:f7:ba:da:36:fd:4b:78:6f:ee:9e:
02:dc:ef:be:ee:31:82:7b:21:b5:31:0d:9c:b1:fc:01:27:28:
85:bc:78:94:8f:8e:4e:27:a1:04:3e:8d:5b:8b:56:36:ea:13:
0a:5b:0d:18:b6:b2:87:de:54:9f:77:cc:79:66:1b:55:a6:89:
74:d5:2f:3e:c4:2f:68:f7:77:32:83:5a:78:fb:29:cc:f3:dc:
46:24:0f:ad:8a:8e:ac:23:2f:7f:58:76:56:45:1b:70:c1:fc:
b6:b1:c1:e5:96:d1:05:60:bf:98:4b:37:c6:3a:e7:f6:59:9d:
a8:48:1f:18:12:95:2d:c6:11:41:8b:ed:67:e4:9f:5f:80:bd:
2c:de:41:44:20:4d:6d:64:e5:df:c9:fe:a5:57:eb:90:07:5f:
c9:7a:3c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:55:07 2026 by rpki-client