Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/00OjEG0Kdo2dnS8JFbn2-IYUS5Q.mft
File: 00OjEG0Kdo2dnS8JFbn2-IYUS5Q.mft (raw, json)
Hash identifier: +esYs1lyfmPGThHNjZ3l5jxIIR0LTBqYUE/S69SakEU=
Subject key identifier: 73:F8:FE:4D:86:6A:FE:A9:7A:6C:9A:FE:0A:8D:B8:53:C7:89:06:FB
Authority key identifier: D3:43:A3:10:6D:0A:76:8D:9D:9D:2F:09:15:B9:F6:F8:86:14:4B:94
Certificate issuer: /CN=d343a3106d0a768d9d9d2f0915b9f6f886144b94
Certificate serial: 01A0C96B960235175CC4D834CBF319ABC46C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00OjEG0Kdo2dnS8JFbn2-IYUS5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/00OjEG0Kdo2dnS8JFbn2-IYUS5Q.mft
Manifest number: E1
Signing time: Tue 22 Sep 2026 14:01:06 +0000
Manifest this update: Tue 22 Sep 2026 14:01:06 +0000
Manifest next update: Wed 23 Sep 2026 14:01:06 +0000
Files and hashes: 1: 00OjEG0Kdo2dnS8JFbn2-IYUS5Q.crl (hash: qKkvlv+yiioiMrtFcazwJ80523n6M98dpHCEDGbUoDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/00OjEG0Kdo2dnS8JFbn2-IYUS5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/00OjEG0Kdo2dnS8JFbn2-IYUS5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/00OjEG0Kdo2dnS8JFbn2-IYUS5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:96:02:35:17:5c:c4:d8:34:cb:f3:19:ab:c4:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d343a3106d0a768d9d9d2f0915b9f6f886144b94
Validity
Not Before: Sep 22 14:01:06 2026 GMT
Not After : Sep 23 14:01:06 2026 GMT
Subject: CN=73f8fe4d866afea97a6c9afe0a8db853c78906fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:05:d9:4d:3a:6f:92:ad:07:66:97:5f:48:5f:
7a:8f:6c:1e:93:ac:55:1e:8f:d8:81:06:ec:09:3b:
df:19:f4:22:bc:aa:36:50:f3:5f:e2:5a:57:f5:2b:
9a:e8:d7:4f:f4:08:6c:49:5a:1e:32:5d:92:74:7b:
19:98:e3:f6:b2:ea:64:86:2f:d2:2d:0f:c5:75:2d:
d7:c5:e0:95:3f:52:e2:13:a5:d3:6c:df:51:b0:da:
90:b5:6a:00:6f:13:11:f3:f6:a2:16:7a:c3:ca:78:
64:a7:76:e6:70:0c:ee:03:43:6e:67:f0:bc:f4:bf:
6f:b7:e8:aa:1d:90:c2:d0:ee:4d:e2:77:fd:73:32:
3f:19:3f:59:20:6d:8e:cc:a4:ea:90:48:09:6a:05:
74:28:ac:ba:0e:55:bb:f5:2e:23:be:cb:c4:cd:2a:
af:b4:3b:12:4d:cf:34:fe:61:28:01:e9:7d:91:e9:
96:f2:c5:46:53:22:0a:b8:a6:75:0e:4e:eb:85:15:
f0:8c:03:e0:46:b5:aa:c6:58:8a:21:cc:a3:41:36:
97:28:fb:dc:62:2d:82:21:fe:fd:31:fa:9c:5c:5a:
c5:03:7e:27:dc:01:58:eb:9d:20:43:3a:cd:6e:48:
b4:08:31:3c:9a:33:6f:cd:b8:16:0a:7a:a5:6e:a2:
84:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F8:FE:4D:86:6A:FE:A9:7A:6C:9A:FE:0A:8D:B8:53:C7:89:06:FB
X509v3 Authority Key Identifier:
keyid:D3:43:A3:10:6D:0A:76:8D:9D:9D:2F:09:15:B9:F6:F8:86:14:4B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00OjEG0Kdo2dnS8JFbn2-IYUS5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/00OjEG0Kdo2dnS8JFbn2-IYUS5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/00OjEG0Kdo2dnS8JFbn2-IYUS5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:85:3b:bd:55:d6:1e:f0:48:08:3a:1e:c3:4a:9a:61:11:75:
35:73:22:91:1e:6f:ab:da:ea:d7:e5:f1:20:7f:c5:ed:aa:76:
d0:cb:59:1a:51:1d:9c:73:1d:76:53:54:e8:a5:53:26:4c:44:
47:a1:37:75:5f:e4:48:b4:93:f9:da:cf:10:36:a5:5f:c5:2e:
cd:74:6c:b2:40:4e:5d:38:c7:d3:f8:e0:48:d6:3d:90:9b:2f:
41:b6:d4:c9:b2:45:b1:55:52:1a:d6:1f:0d:51:e1:44:95:51:
a2:a9:9c:3e:2f:0a:70:9f:18:38:cd:5a:7b:75:f4:be:44:2a:
cf:fb:76:4f:da:be:d0:9d:67:c7:6c:ab:55:fb:82:3f:93:3a:
f4:56:c7:ec:e1:6e:22:ff:e8:5d:a4:5a:b9:29:c8:05:28:76:
69:b5:c4:23:5b:79:c5:05:62:d1:27:f0:61:48:6a:91:5c:47:
34:6f:74:25:d0:ed:db:55:9c:51:7c:00:be:b8:d6:35:0e:07:
b7:ac:d3:f0:f6:76:45:72:7d:c0:be:1b:97:3c:07:70:5b:08:
22:d9:72:4f:ca:ba:d2:b4:8d:8f:83:b7:12:b7:2b:2c:fe:6f:
d3:d5:b6:b8:e1:0f:95:db:42:84:bc:24:90:3f:b0:e2:92:73:
87:1e:78:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:45:12 2026 by rpki-client