Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
File: 0u2k-NnkgpUqESsu9aTyObf2JVE.mft (raw, json)
Hash identifier: Ggxv+NXAlYTLJdByiiErjUCvnyeRfAUeXa8xwAIy38M=
Subject key identifier: CD:C0:E1:AE:20:60:54:A5:1B:DD:52:AE:C8:4A:70:29:3D:68:CB:7E
Authority key identifier: D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
Certificate issuer: /CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Certificate serial: 01A0CD485DB2EBDBA399B58D8C2714F13201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
Manifest number: 0EFD
Signing time: Wed 23 Sep 2026 08:01:06 +0000
Manifest this update: Wed 23 Sep 2026 08:01:06 +0000
Manifest next update: Thu 24 Sep 2026 08:01:06 +0000
Files and hashes: 1: 0u2k-NnkgpUqESsu9aTyObf2JVE.crl (hash: 88mFCzf4s641OIuuCimBtmswRSEyjp+2Fyp0OGsSjDg=)
2: cH1uhcXR4yA_j8slffa5H1Hj5PM.roa (hash: 6BjMFM7dbeXnopz6sC8hF0DrckNn2/Fq1fNIhGQIPa8=)
3: vQ3Onh8zAP8fN-K_wTaZqAaUruI.roa (hash: ycldYOHAUvLotQf8PVaaFzvXxeLDOJ2gpiZO/0/3jvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:48:5d:b2:eb:db:a3:99:b5:8d:8c:27:14:f1:32:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Validity
Not Before: Sep 23 08:01:06 2026 GMT
Not After : Sep 24 08:01:06 2026 GMT
Subject: CN=cdc0e1ae206054a51bdd52aec84a70293d68cb7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e8:b0:c1:a1:1a:aa:7e:cd:2f:23:33:13:e7:
3d:f4:74:9d:79:e8:5d:6d:1a:85:a6:d3:7d:8e:11:
e5:f1:4e:2f:2f:72:c2:cb:e2:cf:82:96:bc:62:3c:
69:bf:62:09:da:ff:f1:7c:ce:65:be:d8:59:05:97:
85:91:92:12:08:f7:d5:52:ce:a2:d9:4b:d8:04:6f:
47:ff:1d:25:22:2f:18:b2:e1:da:8c:7a:ac:23:1c:
aa:0b:10:86:20:3a:f8:22:59:04:3d:ed:1e:c5:d0:
c3:ce:74:61:f7:a4:ea:63:af:d3:71:21:53:b6:19:
69:45:95:9d:84:8c:f0:54:ef:bf:f8:7f:6f:f6:ab:
61:8f:3b:19:11:b4:cc:e5:74:4d:cf:8c:b4:f6:8f:
97:9a:47:54:3a:f3:29:14:15:f4:f6:39:c1:cd:ef:
3d:fc:e3:bf:b8:6e:d7:70:2d:f9:97:b4:02:b5:03:
40:30:fd:16:b7:aa:6f:40:2e:cf:34:cb:21:ac:1c:
87:b2:de:dd:3b:29:08:00:85:57:de:29:de:e0:b0:
eb:ea:a2:7d:25:9f:42:48:4f:57:70:d1:38:c1:cf:
17:5c:1e:d5:e1:ef:a0:5c:9f:a4:8e:30:f0:c7:80:
a6:f9:d0:73:98:f8:bb:08:51:64:bf:2b:b5:e8:04:
ab:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C0:E1:AE:20:60:54:A5:1B:DD:52:AE:C8:4A:70:29:3D:68:CB:7E
X509v3 Authority Key Identifier:
keyid:D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:db:2b:d1:fd:00:2a:eb:63:51:58:8f:51:b2:25:18:52:f2:
42:92:53:60:14:3c:98:95:4f:6c:ee:79:78:27:cf:1c:44:e2:
4d:87:50:bb:67:bc:d9:cd:b1:d5:cf:d1:69:6a:c1:49:22:d1:
9c:37:bb:14:95:8a:6b:33:ca:64:48:e2:41:d8:13:c1:6a:32:
0c:63:a2:a9:9d:05:96:6c:18:11:83:54:7b:08:b7:f9:ef:b5:
a1:03:39:49:db:06:ad:78:94:5b:c2:95:c9:f4:6a:94:08:ea:
61:9d:df:50:0f:89:b1:27:3d:50:4f:aa:e3:ca:89:c6:b6:78:
ee:d5:03:d2:0d:ef:a8:e0:01:7e:ea:a7:ac:dd:9c:ce:00:12:
21:e7:6c:98:3b:88:c2:92:d1:9c:cd:28:9d:d0:6d:6e:f3:07:
d4:c8:b0:1f:da:dc:0a:ec:2c:89:28:52:4d:d2:d2:b7:8f:70:
3c:8c:1f:15:7e:80:b4:5a:61:5e:92:96:98:c9:f2:21:d5:d7:
36:d5:28:b3:d8:92:6b:cd:9f:13:ac:c2:50:38:2d:e7:60:94:
ff:65:11:e0:18:97:4f:6e:61:e9:a3:30:72:db:d3:0d:3c:a6:
a1:f0:cd:e9:3b:79:e0:b2:3d:22:50:aa:a2:65:4e:1e:65:49:
99:3b:79:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:45:29 2026 by rpki-client