Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
File: 0OhNbWqe7eaC7xtcePGz8KMxORE.mft (raw, json)
Hash identifier: E6muCJbnpI6rY6kvIVIgKu5BqSCbpu9CY6wpAQmVYiw=
Subject key identifier: F5:64:05:12:23:D1:BF:FF:96:8F:46:76:74:5A:7E:F3:DC:10:19:11
Authority key identifier: D0:E8:4D:6D:6A:9E:ED:E6:82:EF:1B:5C:78:F1:B3:F0:A3:31:39:11
Certificate issuer: /CN=d0e84d6d6a9eede682ef1b5c78f1b3f0a3313911
Certificate serial: 01A0CBFE72668A91B5FCD26E1B7283803028
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OhNbWqe7eaC7xtcePGz8KMxORE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
Manifest number: 0C3D
Signing time: Wed 23 Sep 2026 02:00:45 +0000
Manifest this update: Wed 23 Sep 2026 02:00:45 +0000
Manifest next update: Thu 24 Sep 2026 02:00:45 +0000
Files and hashes: 1: 0OhNbWqe7eaC7xtcePGz8KMxORE.crl (hash: AR+Vovwc+qJnZJmn73TiI4xf2YJXtK0q7nFOklJ6I6M=)
2: iG53FLKNGEtI7O_-qbJCuOHpkfY.roa (hash: btGtfmg9m2lBCFlLyRHCIrg7YepxRxneqBtZfQH7n/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OhNbWqe7eaC7xtcePGz8KMxORE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:fe:72:66:8a:91:b5:fc:d2:6e:1b:72:83:80:30:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e84d6d6a9eede682ef1b5c78f1b3f0a3313911
Validity
Not Before: Sep 23 02:00:45 2026 GMT
Not After : Sep 24 02:00:45 2026 GMT
Subject: CN=f564051223d1bfff968f4676745a7ef3dc101911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:20:dc:18:eb:8e:cc:36:83:2a:04:fc:84:5f:
7a:41:98:2d:42:d0:27:6e:5d:a4:21:12:fd:2e:c9:
84:83:ce:f9:7c:3a:32:a6:47:46:bd:59:53:25:88:
be:ce:a6:73:77:03:d0:c2:f7:9c:5a:1c:06:7f:77:
db:fe:ca:04:cd:11:65:79:a4:e5:c1:ec:88:9e:c8:
e5:f1:2a:64:74:da:4e:54:56:8e:d5:ef:b5:f8:55:
69:50:b0:61:09:09:f2:68:a3:78:77:a4:2f:2b:35:
03:ef:b7:9b:a6:f7:19:5b:15:b1:e7:a1:b4:bc:b3:
de:44:c7:87:24:a3:80:87:6f:7f:00:71:28:db:7a:
5b:64:2d:ed:cb:9a:20:ee:32:31:c7:26:94:50:ff:
5f:66:64:f6:66:31:f0:4e:36:9a:82:ad:8e:53:59:
8b:56:c9:83:08:0f:fc:f2:23:c4:eb:c5:49:fb:8b:
96:7f:c3:7f:53:6b:de:39:5a:ef:d8:d4:c0:1e:e9:
ff:52:1c:51:86:7d:22:0b:95:65:88:61:33:f8:b0:
7d:32:06:4f:a2:e4:e6:a0:ed:ec:dc:ff:e1:ad:7f:
98:7b:05:59:bb:4d:2a:56:37:b5:56:a8:08:ef:ed:
b3:41:4b:da:89:ba:b7:bf:60:91:bb:34:11:28:11:
b0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:64:05:12:23:D1:BF:FF:96:8F:46:76:74:5A:7E:F3:DC:10:19:11
X509v3 Authority Key Identifier:
keyid:D0:E8:4D:6D:6A:9E:ED:E6:82:EF:1B:5C:78:F1:B3:F0:A3:31:39:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OhNbWqe7eaC7xtcePGz8KMxORE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c0:fe:34:d9:f9:a1:40:4f:4f:c0:97:3e:45:d3:fb:b9:2a:
74:ba:54:8d:00:8e:a3:b3:c9:c5:ee:9c:c1:19:4a:d6:e9:78:
c6:33:6b:9a:07:41:ab:73:d1:bd:64:89:1d:5f:d3:49:a4:e0:
77:6b:05:99:00:e0:b5:44:d3:6c:cb:f1:cd:22:97:b2:00:b0:
84:4f:a8:64:54:2f:1e:c3:57:af:7e:31:9d:f9:3c:53:5e:da:
c0:94:58:8b:22:17:94:4c:be:e1:45:48:c7:dc:86:c0:91:3b:
60:69:92:66:99:23:95:0c:44:d9:4e:98:cc:fb:48:98:29:4f:
b2:1f:34:8e:4e:95:ee:26:8f:fb:d4:a6:4a:14:b1:d4:56:4c:
04:ff:f4:97:15:0f:53:bf:3b:68:d6:a1:c2:5b:a3:d5:f4:34:
f0:6a:d6:7c:df:9d:6f:90:f3:47:1e:a5:b4:d5:6d:3b:61:6a:
34:4d:c4:eb:6e:4b:4f:65:e0:9a:a4:49:37:b0:33:3e:ed:7a:
01:6b:bd:2c:4b:4c:56:15:76:ac:6f:e3:3e:ea:77:cd:8b:b2:
37:b6:df:4d:08:e6:1c:a4:6e:41:d2:d7:49:41:d5:cd:e6:b6:
22:dc:45:f1:1b:8e:89:8a:03:c0:65:2d:29:4b:08:bb:c9:83:
09:61:91:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:53:18 2026 by rpki-client