Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft
File: 0dMLd0soDDfhxe1dimnLmvZIsGU.mft (raw, json)
Hash identifier: M9EkW+3sB1DcK3kMm5p0UMrRIsO/UAxS3acMCBO75Hw=
Subject key identifier: 5E:25:6B:40:FC:0E:59:0A:2D:1B:02:B0:2D:38:88:F4:C6:E8:56:BD
Authority key identifier: D1:D3:0B:77:4B:28:0C:37:E1:C5:ED:5D:8A:69:CB:9A:F6:48:B0:65
Certificate issuer: /CN=d1d30b774b280c37e1c5ed5d8a69cb9af648b065
Certificate serial: 01A0D4268A7D8F696D5912C8AC8511127DFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dMLd0soDDfhxe1dimnLmvZIsGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft
Manifest number: 0EDB
Signing time: Thu 24 Sep 2026 16:01:30 +0000
Manifest this update: Thu 24 Sep 2026 16:01:30 +0000
Manifest next update: Fri 25 Sep 2026 16:01:30 +0000
Files and hashes: 1: 0dMLd0soDDfhxe1dimnLmvZIsGU.crl (hash: LNTtQGy9SRRF273mzN4sUqC6lGvNFw3SKN+rIEq7elQ=)
2: 4uCW8KDL5eygnSjCYi7-Nukptjw.roa (hash: Lz95AsDo4OKSWuKZICMJRolQCwkNIP0tKUYk7qYQ5RA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dMLd0soDDfhxe1dimnLmvZIsGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:8a:7d:8f:69:6d:59:12:c8:ac:85:11:12:7d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1d30b774b280c37e1c5ed5d8a69cb9af648b065
Validity
Not Before: Sep 24 16:01:30 2026 GMT
Not After : Sep 25 16:01:30 2026 GMT
Subject: CN=5e256b40fc0e590a2d1b02b02d3888f4c6e856bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dc:48:00:6b:bb:ac:f6:01:a3:47:e5:f0:b4:
8d:5a:c3:6c:d6:88:f6:c0:ef:95:73:1c:cf:e6:58:
56:44:7b:9a:42:54:b5:f9:c8:4d:f1:11:6e:89:39:
b6:b5:e9:96:de:60:20:75:cd:d4:10:8d:0a:14:e7:
05:72:97:1b:a2:64:c1:7b:eb:37:1d:97:dd:16:61:
9e:e1:ff:b3:cc:0c:d5:e5:3c:2a:92:85:c0:a3:35:
a5:20:b3:0d:ff:4d:cd:d1:0e:e6:87:42:15:21:dd:
25:44:1e:d2:28:11:ac:47:f3:4f:34:13:d4:9f:0c:
07:95:9e:77:36:c2:4c:32:50:04:f6:1f:31:2b:d1:
43:1e:2f:3e:69:d6:d4:9e:3d:38:88:50:df:5d:fc:
6c:df:dc:f3:e9:b9:da:5b:f5:1e:d7:d3:b7:8e:09:
5a:b2:06:3b:37:8a:eb:27:59:c8:2e:f8:be:91:b8:
cf:6e:ae:07:b5:95:dd:1f:20:64:1f:86:21:8d:53:
35:b4:bc:90:b6:64:e6:dd:5c:55:34:30:69:0e:2f:
0b:80:38:be:9a:7a:71:f4:a6:97:0f:c6:89:fe:a6:
c6:71:4d:7d:7f:1d:97:bb:9c:7f:2d:3d:98:e7:bc:
78:cf:e5:25:42:62:0c:f2:d3:34:7a:88:c2:34:a1:
e2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:25:6B:40:FC:0E:59:0A:2D:1B:02:B0:2D:38:88:F4:C6:E8:56:BD
X509v3 Authority Key Identifier:
keyid:D1:D3:0B:77:4B:28:0C:37:E1:C5:ED:5D:8A:69:CB:9A:F6:48:B0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dMLd0soDDfhxe1dimnLmvZIsGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:91:fb:27:a6:04:c0:c7:c0:ae:8d:e5:83:10:ea:ae:00:c0:
dc:5e:c3:f5:40:72:23:9b:bd:b4:89:86:d5:26:95:ce:12:1f:
27:74:b0:41:63:e0:a0:49:6e:05:39:d9:c2:ee:00:93:0d:82:
dd:ec:3b:70:46:66:d7:41:3d:ca:54:c6:58:36:67:44:e1:e3:
62:bc:3b:24:98:a2:48:b4:3d:6f:19:e5:f7:60:fc:e5:5e:90:
84:62:ac:b7:9a:50:0c:c2:36:10:9f:3d:22:97:f5:c6:f7:72:
74:c4:80:b8:4b:1a:93:87:db:ec:72:65:19:c7:4d:0e:4c:89:
6b:e6:17:46:8d:26:ef:98:1d:80:14:5a:44:79:26:c6:cb:0a:
a7:79:77:00:e9:24:4d:d8:df:0e:6b:ef:9d:b8:2c:4e:01:c8:
32:42:1a:dd:c9:90:f1:7f:a0:84:cc:ae:01:bb:89:dc:fd:59:
fb:3f:d0:d8:47:95:7d:2c:5c:54:3e:4d:de:30:12:df:1d:87:
1d:e6:c0:98:b5:72:c4:59:15:c0:2d:b9:b9:ca:9e:e0:9c:0a:
39:20:a3:59:e2:df:06:c6:b9:c0:62:8b:87:a5:6d:93:1a:bf:
12:a6:17:e3:1b:8f:57:cc:3c:86:75:18:bf:1e:37:44:60:f1:
6f:63:86:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:16:58 2026 by rpki-client