Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft
File: 0PMTtkDG3nU1uB7GjEDubsmf_00.mft (raw, json)
Hash identifier: aaNSe9JHNRT/m1kI7oF0qvCRiAulXb4+O199EauRDN8=
Subject key identifier: 48:12:E1:C6:3B:BE:37:B4:87:62:C6:1A:00:F1:6F:D4:85:4F:C9:B0
Authority key identifier: D0:F3:13:B6:40:C6:DE:75:35:B8:1E:C6:8C:40:EE:6E:C9:9F:FF:4D
Certificate issuer: /CN=d0f313b640c6de7535b81ec68c40ee6ec99fff4d
Certificate serial: 01A1DCEFD7A36EC93B77A88B8C30A02B6FC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PMTtkDG3nU1uB7GjEDubsmf_00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft
Manifest number: 0C28
Signing time: Sun 15 Nov 2026 02:01:08 +0000
Manifest this update: Sun 15 Nov 2026 02:01:08 +0000
Manifest next update: Mon 16 Nov 2026 02:01:08 +0000
Files and hashes: 1: 0PMTtkDG3nU1uB7GjEDubsmf_00.crl (hash: bSAKK8YzZSLhyMeSyaCUN8e/VZPnSVTMpgoQlkOkm7o=)
2: hGkf_qyDhU37-o9sEDt63JFfVyM.roa (hash: d3kiFkXGyIU+fZhFKa/d+1Nny2/miOmiUkEEuvkDS5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PMTtkDG3nU1uB7GjEDubsmf_00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:ef:d7:a3:6e:c9:3b:77:a8:8b:8c:30:a0:2b:6f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f313b640c6de7535b81ec68c40ee6ec99fff4d
Validity
Not Before: Nov 15 02:01:08 2026 GMT
Not After : Nov 16 02:01:08 2026 GMT
Subject: CN=4812e1c63bbe37b48762c61a00f16fd4854fc9b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:df:65:83:e0:67:d5:5d:19:dd:bd:85:be:c4:
d6:75:6d:cd:45:42:03:04:18:15:3b:18:7c:20:19:
cc:06:59:18:b5:38:52:00:79:83:36:c8:57:58:20:
9c:d0:c9:48:fa:4f:20:e1:ec:bf:76:39:bf:df:3f:
44:3b:5d:39:8e:ee:99:43:0d:63:7a:e5:84:ab:fc:
3f:dc:a6:e6:eb:c1:ea:38:0f:88:07:75:88:6f:e0:
8a:8d:8a:b7:a8:eb:3e:03:f4:23:80:16:38:f7:2f:
39:ab:fd:fe:ae:af:26:e0:36:34:67:37:03:75:66:
33:47:60:3b:bd:d3:44:7c:82:6c:15:a5:e2:c3:3b:
92:9b:b4:f8:5d:d2:ed:62:d1:c2:b9:c8:25:d7:f8:
36:19:24:64:4c:6a:9b:12:24:70:bd:27:ca:1b:61:
57:1c:06:89:df:87:c9:4e:57:50:e2:d8:91:13:62:
39:4e:01:ab:cd:5d:b8:e6:24:72:86:c1:26:79:40:
05:17:6c:5e:85:bd:d0:66:3d:59:b1:24:88:69:f9:
ee:56:a8:b7:69:bb:2c:79:c7:53:c8:2f:8f:c0:ba:
34:b0:e7:83:b8:3c:11:3b:b5:d9:32:59:f1:8e:cf:
d3:ed:a9:33:fa:91:fb:2e:00:5d:76:da:c4:e1:bc:
4b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:12:E1:C6:3B:BE:37:B4:87:62:C6:1A:00:F1:6F:D4:85:4F:C9:B0
X509v3 Authority Key Identifier:
keyid:D0:F3:13:B6:40:C6:DE:75:35:B8:1E:C6:8C:40:EE:6E:C9:9F:FF:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PMTtkDG3nU1uB7GjEDubsmf_00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9a99f9-2d6c-4a4a-a096-0c73bec5107c/1/0PMTtkDG3nU1uB7GjEDubsmf_00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c2:3d:85:47:a3:e4:44:d3:d3:6f:97:4e:4f:ec:00:c9:9c:
95:0c:d6:ac:4e:38:76:ab:c9:4d:72:3a:6e:61:57:92:df:97:
50:28:62:d2:65:96:01:87:a5:0a:49:87:aa:9c:9a:62:9b:cf:
b7:85:27:90:3d:62:7f:c5:ff:71:87:ed:6d:5b:8a:91:33:d4:
3a:5d:f5:75:bd:3e:ed:2b:30:d1:e5:58:2c:3d:9e:bd:86:29:
fc:b6:76:a9:7e:fa:c5:11:cc:34:82:11:9e:38:0a:3e:63:b0:
f8:5f:47:db:38:b3:ae:3b:22:02:0d:50:37:08:b8:1d:5f:43:
99:9b:3b:13:bd:ea:62:bb:7a:51:35:54:0f:df:44:a7:ab:78:
24:e7:b2:ee:60:bc:c5:53:16:1b:02:20:b3:8c:5c:8d:21:be:
ff:ca:e6:ed:bd:42:f7:21:3c:ae:f4:27:b0:48:03:65:71:96:
c3:89:3f:da:6c:fa:72:c0:93:52:4f:e8:3b:e9:a6:c3:8c:e4:
99:c4:1a:45:13:ef:23:eb:b2:d3:fc:31:e4:7a:3f:0f:06:90:
52:55:1f:00:7d:63:17:75:fa:2e:57:f9:c3:8a:5b:bf:69:44:
d5:9f:b0:66:6c:17:0e:42:e8:a9:ec:66:5e:92:7d:1d:11:e4:
49:99:f2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 09:58:31 2026 by rpki-client