Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/00OjEG0Kdo2dnS8JFbn2-IYUS5Q.mft
File: 00OjEG0Kdo2dnS8JFbn2-IYUS5Q.mft (raw, json)
Hash identifier: vOew6w1jfl+zALB1K/oAWF9eT2JmO3NBV7J/hoZTXmQ=
Subject key identifier: F3:5D:AF:5C:EA:2E:EA:90:40:C1:11:1D:DC:58:B1:67:CC:31:C5:C9
Authority key identifier: D3:43:A3:10:6D:0A:76:8D:9D:9D:2F:09:15:B9:F6:F8:86:14:4B:94
Certificate issuer: /CN=d343a3106d0a768d9d9d2f0915b9f6f886144b94
Certificate serial: 01A1DF833C42327FE67CB8949F1C50055B5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00OjEG0Kdo2dnS8JFbn2-IYUS5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/00OjEG0Kdo2dnS8JFbn2-IYUS5Q.mft
Manifest number: 0171
Signing time: Sun 15 Nov 2026 14:01:21 +0000
Manifest this update: Sun 15 Nov 2026 14:01:21 +0000
Manifest next update: Mon 16 Nov 2026 14:01:21 +0000
Files and hashes: 1: 00OjEG0Kdo2dnS8JFbn2-IYUS5Q.crl (hash: nVl7S27knUnCrx0fU6OkA/Yck4a23Pfw/WcAE4PtXq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/00OjEG0Kdo2dnS8JFbn2-IYUS5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/00OjEG0Kdo2dnS8JFbn2-IYUS5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/00OjEG0Kdo2dnS8JFbn2-IYUS5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:3c:42:32:7f:e6:7c:b8:94:9f:1c:50:05:5b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d343a3106d0a768d9d9d2f0915b9f6f886144b94
Validity
Not Before: Nov 15 14:01:21 2026 GMT
Not After : Nov 16 14:01:21 2026 GMT
Subject: CN=f35daf5cea2eea9040c1111ddc58b167cc31c5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cc:46:db:01:34:fb:e8:04:a3:23:f2:65:1f:
58:cd:d9:91:14:f3:42:61:1f:62:2c:01:30:df:2b:
af:ec:7d:8c:6e:53:45:d9:d3:57:70:08:1c:e8:ee:
19:64:54:fc:2a:ec:06:5e:0a:77:47:d5:50:3d:d7:
cd:f1:2a:d3:ed:79:f5:53:1b:bd:ab:51:2f:9e:95:
a4:29:1a:e4:5f:c7:34:91:e3:d3:c7:55:79:71:2d:
97:08:da:86:c5:19:14:41:3f:dd:a4:e6:6b:d6:9b:
d2:f1:27:5e:6b:11:fb:af:b2:c9:50:66:99:d7:f9:
83:d9:ea:89:53:13:63:07:ea:a4:1c:31:58:07:d9:
77:e8:b7:d9:86:40:4f:bd:db:d9:99:d5:da:4d:6c:
82:d4:2c:41:a9:de:3a:29:ca:eb:5b:c2:d5:9d:68:
0d:8d:83:0c:74:95:5b:6c:75:93:75:a2:7d:d6:cf:
a4:40:ee:7f:3a:47:73:6b:09:67:d4:40:59:f7:15:
f7:bf:ed:f2:e2:f5:70:87:97:d1:c5:bb:e5:c4:3d:
6c:63:fb:7f:d6:f1:e4:d3:11:07:3a:6e:e0:6e:95:
2f:15:74:2a:cd:01:fd:45:d3:e9:bf:3e:f4:81:46:
dc:2a:38:15:65:6f:4f:f7:a3:38:cb:36:a1:18:5a:
a8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5D:AF:5C:EA:2E:EA:90:40:C1:11:1D:DC:58:B1:67:CC:31:C5:C9
X509v3 Authority Key Identifier:
keyid:D3:43:A3:10:6D:0A:76:8D:9D:9D:2F:09:15:B9:F6:F8:86:14:4B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00OjEG0Kdo2dnS8JFbn2-IYUS5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/00OjEG0Kdo2dnS8JFbn2-IYUS5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/00OjEG0Kdo2dnS8JFbn2-IYUS5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:09:3d:eb:f7:a5:00:36:d1:37:59:67:3a:d3:e5:1b:6c:bc:
0e:4d:82:a4:d7:64:37:18:9e:1c:77:bd:85:a5:35:8e:08:83:
f1:cc:1d:96:5e:c0:80:66:f9:1f:06:87:33:8c:6b:c9:cc:ad:
6f:33:08:50:ba:4e:8f:d2:4c:04:eb:a2:57:2b:7e:c3:f9:10:
33:61:32:5c:d8:60:f5:65:97:54:58:9f:c9:26:19:19:20:9e:
04:4b:f3:c8:27:26:ce:0a:f8:23:52:77:bd:fa:d5:83:85:b2:
49:d3:3d:f2:91:f0:2b:06:c4:21:b8:d5:6b:67:cc:ed:51:34:
1c:ac:9f:4b:5c:55:30:91:0e:eb:1d:59:86:c4:75:37:45:f2:
4f:ca:48:94:e1:f8:ec:de:65:27:45:d5:2a:47:8c:c9:80:2a:
b1:8c:30:2b:9c:f0:9f:a3:a2:57:00:40:e3:65:3b:72:e1:e9:
59:43:4c:70:7e:8d:b1:13:a8:d1:91:21:4c:a3:ae:fb:7f:08:
91:ca:87:25:7b:46:33:4e:23:62:ad:8a:e2:07:87:b7:34:44:
20:62:2d:bc:63:d8:a9:4e:65:0c:a8:51:12:da:01:97:fa:f2:
b8:ef:3b:51:ee:9f:e5:e6:90:32:20:0c:28:e4:c3:93:27:a7:
17:dd:f2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:45:41 2026 by rpki-client