Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/bb0509-4e3b-410b-91a0-f46c5640bdcf/1/0D5xe7-QcTgk6mJxktXgJOqB2uk.mft
File: 0D5xe7-QcTgk6mJxktXgJOqB2uk.mft (raw, json)
Hash identifier: dwmxN/kcF25PkT5zuMfAhKwDVNwx7c2tnqScY6qfisc=
Subject key identifier: B4:E3:8F:AA:56:F8:A4:F2:D5:99:D2:61:E5:04:36:07:1E:21:E5:FA
Authority key identifier: D0:3E:71:7B:BF:90:71:38:24:EA:62:71:92:D5:E0:24:EA:81:DA:E9
Certificate issuer: /CN=d03e717bbf90713824ea627192d5e024ea81dae9
Certificate serial: 01A0E1AB72314B67E5CDDEB98954A842CD44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0D5xe7-QcTgk6mJxktXgJOqB2uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/bb0509-4e3b-410b-91a0-f46c5640bdcf/1/0D5xe7-QcTgk6mJxktXgJOqB2uk.mft
Manifest number: A1
Signing time: Sun 27 Sep 2026 07:01:44 +0000
Manifest this update: Sun 27 Sep 2026 07:01:44 +0000
Manifest next update: Mon 28 Sep 2026 07:01:44 +0000
Files and hashes: 1: 0D5xe7-QcTgk6mJxktXgJOqB2uk.crl (hash: SqnlWW3+LWo/tvmLzwuSCc/ETh0oVTE26tAo5/ejpKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/bb0509-4e3b-410b-91a0-f46c5640bdcf/1/0D5xe7-QcTgk6mJxktXgJOqB2uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/bb0509-4e3b-410b-91a0-f46c5640bdcf/1/0D5xe7-QcTgk6mJxktXgJOqB2uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0D5xe7-QcTgk6mJxktXgJOqB2uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:ab:72:31:4b:67:e5:cd:de:b9:89:54:a8:42:cd:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d03e717bbf90713824ea627192d5e024ea81dae9
Validity
Not Before: Sep 27 07:01:44 2026 GMT
Not After : Sep 28 07:01:44 2026 GMT
Subject: CN=b4e38faa56f8a4f2d599d261e50436071e21e5fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:25:7b:bd:0f:2d:4c:38:8b:5a:a2:ea:2b:64:
15:43:e0:79:06:b6:30:f2:1a:8a:f7:a4:08:48:04:
c6:4d:3e:3b:fe:d8:31:bd:c2:b2:c9:4f:d7:41:69:
0e:26:db:f6:0e:0d:03:c4:79:50:84:3b:97:3c:54:
fd:a1:22:1a:4a:f1:ef:93:19:78:af:4e:06:a8:b8:
bf:41:38:f0:86:73:f6:d5:2a:89:1e:bc:05:8c:b9:
e0:20:29:fe:c8:6e:58:02:79:78:8a:c3:50:b8:53:
b1:2c:a0:a1:4f:d7:90:6e:4e:92:56:c6:1c:d7:75:
4c:6e:4b:2d:96:bd:31:04:be:29:35:b7:00:61:90:
21:41:b1:81:39:55:af:e3:25:fd:49:12:90:16:9f:
24:cb:4a:26:bd:96:d3:b6:37:4d:1f:a7:db:47:b0:
7f:0f:0e:fb:d5:8e:3d:77:d0:1f:76:8c:0b:7d:a4:
a1:fb:2a:36:b4:f9:47:81:f4:a6:5e:88:1e:d7:57:
42:b6:11:d1:2f:14:71:16:cb:a3:81:73:23:25:cd:
d3:ad:2f:f9:10:fb:a0:e7:f6:a0:08:2b:60:c0:28:
35:4d:27:b2:fe:62:a3:c0:f2:03:0d:89:b7:da:2f:
1f:cd:b0:7d:52:ad:e7:47:0f:d0:a9:fb:3b:f1:04:
6c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E3:8F:AA:56:F8:A4:F2:D5:99:D2:61:E5:04:36:07:1E:21:E5:FA
X509v3 Authority Key Identifier:
keyid:D0:3E:71:7B:BF:90:71:38:24:EA:62:71:92:D5:E0:24:EA:81:DA:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0D5xe7-QcTgk6mJxktXgJOqB2uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/bb0509-4e3b-410b-91a0-f46c5640bdcf/1/0D5xe7-QcTgk6mJxktXgJOqB2uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/bb0509-4e3b-410b-91a0-f46c5640bdcf/1/0D5xe7-QcTgk6mJxktXgJOqB2uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:07:4b:f0:2d:3a:46:17:ff:8a:6d:fc:39:31:c0:6f:af:58:
84:d9:07:24:fd:fa:cc:f6:a4:8f:b4:89:e3:a2:e3:be:82:a4:
00:d1:f2:1b:85:7e:45:cd:48:ec:e9:72:0b:a4:0d:64:cf:1d:
88:45:5b:07:5f:35:87:5f:50:ad:66:da:41:ce:9b:b9:e6:e7:
45:e0:81:d6:45:1b:d1:f0:29:eb:b6:d0:95:f0:ea:99:1a:94:
05:22:4c:6c:02:41:7f:50:fd:ff:19:a2:a3:eb:a9:c8:13:3f:
be:90:30:0f:d0:43:53:56:5e:99:31:e5:a3:31:91:a8:f3:1e:
52:74:bb:e8:4c:05:11:a5:eb:39:6a:4d:74:da:c5:cd:32:f0:
33:60:73:a7:54:21:d0:04:94:a8:f2:36:ed:33:6f:2c:11:8c:
74:2e:6a:91:1f:a6:5b:dd:25:6c:be:f1:03:4e:d1:0f:1b:93:
38:15:e7:7d:6c:d5:a3:67:b4:52:c4:85:19:0d:a0:db:f1:22:
2c:29:9b:6b:65:19:3e:4f:82:5b:49:f4:25:15:e4:76:95:7b:
f7:99:0a:17:c7:d1:5b:90:06:74:07:de:5a:85:44:37:bd:c0:
e8:55:ec:75:9c:43:ac:fd:56:13:a2:3c:1a:20:cc:e5:b3:db:
7e:d5:5a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:39:12 2026 by rpki-client