Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft
File: 0M4bn_suc9LJfwiTBjyrsst0Z5A.mft (raw, json)
Hash identifier: uNB1usOLSfi0ncYrmfowb7oHw9UJ/YJyRtxJQuIf1pI=
Subject key identifier: 3F:BA:9F:67:76:DA:FA:50:A7:53:A3:92:47:E6:55:27:C8:52:21:13
Authority key identifier: D0:CE:1B:9F:FB:2E:73:D2:C9:7F:08:93:06:3C:AB:B2:CB:74:67:90
Certificate issuer: /CN=d0ce1b9ffb2e73d2c97f0893063cabb2cb746790
Certificate serial: 01A0D2DDF2A1B07962BEDD899E147A3C4442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0M4bn_suc9LJfwiTBjyrsst0Z5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 10:02:35 +0000
Manifest this update: Thu 24 Sep 2026 10:02:35 +0000
Manifest next update: Fri 25 Sep 2026 10:02:35 +0000
Files and hashes: 1: 0M4bn_suc9LJfwiTBjyrsst0Z5A.crl (hash: soNBJzBeJNgE/CuBPeiEITn9E9sZ9YP6DA6kOlgXjHs=)
2: KBLYjGsoc6I_Jnk5DngPmO4ePQU.roa (hash: XFoKkPbZxI2pK2o+bv+Ogt5LDh4mQTF9jwqVRi7HCtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0M4bn_suc9LJfwiTBjyrsst0Z5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:dd:f2:a1:b0:79:62:be:dd:89:9e:14:7a:3c:44:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ce1b9ffb2e73d2c97f0893063cabb2cb746790
Validity
Not Before: Sep 24 10:02:35 2026 GMT
Not After : Sep 25 10:02:35 2026 GMT
Subject: CN=3fba9f6776dafa50a753a39247e65527c8522113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d2:00:de:40:41:e3:27:d9:8f:4f:af:de:2a:
79:7d:de:50:b6:43:43:88:01:db:8f:d2:d3:85:10:
99:fd:22:d0:05:1b:41:96:a9:11:43:37:50:1d:3a:
64:60:48:15:bf:23:f7:38:c1:9c:75:3c:e3:75:05:
e8:29:84:21:a4:84:4c:1b:fe:f2:e3:da:45:e6:8d:
76:83:7e:88:e9:17:2b:c7:4f:63:8f:fd:91:ab:50:
c3:78:7c:f7:8b:e3:6b:90:60:32:d8:ef:e1:6f:6c:
6a:78:61:9f:d4:fa:8e:7d:21:00:7e:10:d3:6d:be:
11:6b:4b:b1:d2:1e:ff:53:18:d5:9d:03:4c:b1:2f:
74:98:de:48:66:0e:7b:52:b6:2f:8e:ea:bb:e5:4b:
85:f2:3f:df:61:c1:30:24:3d:1d:e8:24:17:6d:68:
4f:7a:1e:ca:0a:f0:0b:d4:b4:c7:0d:2b:8f:fd:64:
dc:14:e3:6d:03:10:a7:d1:a9:37:65:5e:d5:0b:4f:
97:dc:1a:a4:af:9e:c6:56:18:aa:e1:25:8a:16:81:
67:5e:f9:f1:00:17:d6:c3:f2:d2:1b:ab:10:ae:98:
9b:14:4d:67:34:97:b5:a7:63:12:d3:a8:6b:b3:ff:
d0:e3:2f:eb:71:ee:88:1c:10:d8:53:13:e1:7a:69:
03:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BA:9F:67:76:DA:FA:50:A7:53:A3:92:47:E6:55:27:C8:52:21:13
X509v3 Authority Key Identifier:
keyid:D0:CE:1B:9F:FB:2E:73:D2:C9:7F:08:93:06:3C:AB:B2:CB:74:67:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0M4bn_suc9LJfwiTBjyrsst0Z5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:a2:2c:d6:23:c5:39:b1:a3:2c:33:33:f8:60:70:21:bb:32:
5e:a5:4f:95:65:8a:6a:d9:ef:57:63:86:f6:10:f6:99:e5:03:
b5:81:5a:a1:05:00:d9:de:9a:60:e2:67:17:86:6a:18:d9:bc:
e2:0a:6c:35:c2:34:4f:2d:04:de:9d:19:07:e7:8f:c4:e9:aa:
8e:f7:86:5a:65:7c:0f:72:30:fb:22:83:fe:6a:d4:4d:9f:62:
78:31:80:ab:ef:f9:fb:af:66:0c:05:28:53:13:d8:59:c3:ca:
05:e5:1d:ed:d4:e4:28:8b:70:7f:cc:bc:7f:c0:a2:be:79:04:
06:9c:7a:15:8e:0d:f6:19:96:f4:85:38:05:4b:2d:c1:64:04:
e0:25:e4:f9:f4:16:a4:e8:87:8b:4d:c9:e4:a6:d1:20:ce:f8:
6b:b3:a0:71:45:33:8b:d1:5f:88:09:16:38:a5:24:73:60:4a:
7b:44:c8:75:dc:68:05:8e:6c:72:88:25:e3:08:3b:bf:a9:7b:
24:0f:6c:2f:18:a1:12:92:e8:5e:9d:4e:7e:71:ea:72:34:6c:
bf:1e:f4:2c:bf:d7:66:ff:72:e3:16:7c:01:45:ff:c4:a9:46:
01:53:e3:46:0f:7c:7f:27:88:3f:37:29:f8:cf:bc:ed:02:9f:
6f:58:f3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:24:59 2026 by rpki-client