Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/ffa187-19ae-4573-abdd-ea74fc747974/1/0GlUz1FOymLFVom9iTCykiF6nnw.mft
File: 0GlUz1FOymLFVom9iTCykiF6nnw.mft (raw, json)
Hash identifier: IhsquOjZm7xBA94D5WuOoJP9GWZUuTxicw3XCfVWfmQ=
Subject key identifier: 68:B7:97:F9:AC:50:8A:A2:D9:0B:86:8F:1B:B4:C3:10:5C:1A:37:1F
Authority key identifier: D0:69:54:CF:51:4E:CA:62:C5:56:89:BD:89:30:B2:92:21:7A:9E:7C
Certificate issuer: /CN=d06954cf514eca62c55689bd8930b292217a9e7c
Certificate serial: 01A1DEA78202A815F8DDEC5A697B3729531E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0GlUz1FOymLFVom9iTCykiF6nnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ffa187-19ae-4573-abdd-ea74fc747974/1/0GlUz1FOymLFVom9iTCykiF6nnw.mft
Manifest number: 02BE
Signing time: Sun 15 Nov 2026 10:01:22 +0000
Manifest this update: Sun 15 Nov 2026 10:01:22 +0000
Manifest next update: Mon 16 Nov 2026 10:01:22 +0000
Files and hashes: 1: 0GlUz1FOymLFVom9iTCykiF6nnw.crl (hash: r6sY2QgsLDb/Y0p9Xy0GJM6rOkYBH9feCmek+r3c9vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ffa187-19ae-4573-abdd-ea74fc747974/1/0GlUz1FOymLFVom9iTCykiF6nnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/ffa187-19ae-4573-abdd-ea74fc747974/1/0GlUz1FOymLFVom9iTCykiF6nnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0GlUz1FOymLFVom9iTCykiF6nnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:82:02:a8:15:f8:dd:ec:5a:69:7b:37:29:53:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d06954cf514eca62c55689bd8930b292217a9e7c
Validity
Not Before: Nov 15 10:01:22 2026 GMT
Not After : Nov 16 10:01:22 2026 GMT
Subject: CN=68b797f9ac508aa2d90b868f1bb4c3105c1a371f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ef:79:1d:4a:e9:81:ca:aa:f0:62:1f:f7:37:
db:5b:42:c7:3b:d5:1b:3a:9f:03:9b:a7:5d:9c:4d:
77:c8:49:a5:4d:38:12:01:84:6b:58:14:59:ec:fa:
a9:83:93:dc:48:10:24:23:46:5a:b8:ef:ce:66:7b:
00:4a:0c:32:ca:2c:70:1e:34:21:23:f6:99:76:68:
ee:b4:f5:ee:5b:f4:18:2b:86:79:83:35:2e:fd:45:
31:5e:b2:be:b5:db:f9:6e:b8:1e:a1:7b:4c:44:d1:
3e:7b:57:34:f7:d7:8d:bd:a4:94:8f:fc:65:77:00:
73:a8:8a:3f:d6:c2:95:cb:fe:fa:25:8e:00:3d:18:
c0:59:6f:9b:c9:75:20:f7:3e:c9:f8:ff:9c:65:14:
cf:f1:e0:e9:93:4e:90:8d:c2:7c:43:d5:59:e1:02:
2d:12:ec:e5:8c:90:2c:25:2d:53:bb:12:4a:b4:6f:
1d:70:80:66:8e:3b:55:e8:24:10:e0:32:59:e7:71:
77:4b:40:37:7e:51:fd:41:7c:c2:23:9d:14:a6:65:
b3:1b:43:2f:a3:7b:53:fb:2b:f8:06:33:79:a8:00:
90:dc:49:76:6f:ec:8b:bd:39:7e:d8:b9:1e:0e:db:
20:2d:63:68:52:3d:8b:e5:0f:d5:78:91:e2:11:7c:
aa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B7:97:F9:AC:50:8A:A2:D9:0B:86:8F:1B:B4:C3:10:5C:1A:37:1F
X509v3 Authority Key Identifier:
keyid:D0:69:54:CF:51:4E:CA:62:C5:56:89:BD:89:30:B2:92:21:7A:9E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GlUz1FOymLFVom9iTCykiF6nnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ffa187-19ae-4573-abdd-ea74fc747974/1/0GlUz1FOymLFVom9iTCykiF6nnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ffa187-19ae-4573-abdd-ea74fc747974/1/0GlUz1FOymLFVom9iTCykiF6nnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5e:8e:5d:73:3a:46:58:6d:9e:84:a9:28:a5:ae:c8:3f:ac:
0f:50:3a:b3:3f:01:25:6d:77:5e:87:4a:a3:fc:26:c2:82:44:
e2:4d:09:3c:ce:ed:84:ce:40:e8:a7:64:11:6b:39:81:07:e9:
a7:92:ed:d2:26:18:2a:c7:71:90:f4:59:c8:04:db:12:38:12:
a5:b3:8d:5f:53:2c:3f:78:24:16:2e:66:71:8d:ff:ed:20:29:
87:2b:b6:5c:fb:ca:3b:1d:a2:24:1f:9d:2c:6e:90:8a:b3:ab:
7d:65:19:b6:44:b7:06:7e:7c:e8:ec:1a:41:de:9b:9c:a2:93:
c4:95:f3:b1:bf:92:30:cf:74:eb:26:cb:15:9b:0c:3a:a2:d8:
36:4e:fa:7e:de:6c:ff:5a:cd:c2:5e:9a:66:ff:97:2e:81:f4:
f3:bc:f1:8d:aa:da:1d:e6:32:38:2d:2a:59:87:49:1b:4a:ca:
6a:17:b0:0f:96:71:06:51:91:ba:b8:24:9d:12:0f:a2:1e:d3:
dd:ee:98:17:76:37:47:c6:99:86:7c:20:50:30:b7:e3:0b:42:
5f:90:4d:d5:f6:94:b1:6a:8f:aa:c6:5a:d0:cf:9c:24:85:9e:
af:70:ec:79:6e:ac:cc:98:a1:d8:3a:05:32:7d:fc:1f:04:81:
d1:1b:4f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:32:58 2026 by rpki-client