Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
File: 0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft (raw, json)
Hash identifier: Ftk+jY6Hxa7n5SP8C9NKVvh1X0PCj4X0+I6Lm/sT/+Q=
Subject key identifier: E9:53:19:83:F4:51:DE:5D:CE:07:36:A3:63:CD:0C:B2:A0:8F:48:DD
Authority key identifier: D0:F6:B8:43:6F:66:34:CD:31:D7:09:7C:E2:42:A5:49:93:5B:18:D7
Certificate issuer: /CN=d0f6b8436f6634cd31d7097ce242a549935b18d7
Certificate serial: 01A0DB3BAA1151CF036674F27074859B4B2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
Manifest number: 1A46
Signing time: Sat 26 Sep 2026 01:01:55 +0000
Manifest this update: Sat 26 Sep 2026 01:01:55 +0000
Manifest next update: Sun 27 Sep 2026 01:01:55 +0000
Files and hashes: 1: 0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl (hash: GJf6uESF/oVjH5+NHov1GCxDRpJop+Bm9+yZW2u7ZRE=)
2: 5oT4wQDby08NkKpZXaWKlUX_zBw.roa (hash: UH0KTt9pI8ZDsM/VAmcpjDz5ijVSpSbjaototx0G23E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 01:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:3b:aa:11:51:cf:03:66:74:f2:70:74:85:9b:4b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f6b8436f6634cd31d7097ce242a549935b18d7
Validity
Not Before: Sep 26 01:01:55 2026 GMT
Not After : Sep 27 01:01:55 2026 GMT
Subject: CN=e9531983f451de5dce0736a363cd0cb2a08f48dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:96:8d:52:a2:ec:fd:4f:84:1d:01:17:9c:71:
0b:63:9c:5c:9b:d7:ee:ef:5b:27:f9:ba:c3:b3:00:
3b:a0:ed:a9:9a:76:eb:64:3b:c2:1a:43:1d:14:f8:
1d:a4:0f:c7:e9:3c:05:72:d2:5a:de:f1:6e:72:e0:
93:10:2a:2a:1f:c9:af:1d:a0:b4:6f:4a:a4:25:55:
b2:47:23:a4:ef:4a:43:6f:58:5d:47:ef:6d:a9:4e:
b3:55:f3:fa:7f:10:fc:38:9f:2e:7e:97:05:e3:6e:
60:15:86:26:a3:19:d9:42:ab:33:a2:ac:ee:07:08:
ff:c1:e3:59:1d:38:79:89:83:d7:4e:59:84:46:2b:
09:6f:8f:3f:35:63:60:e8:04:be:65:d1:9e:83:3c:
eb:44:2d:9b:6f:10:91:f7:76:f5:b4:45:fa:47:bf:
73:22:d4:4e:71:aa:91:30:ad:81:25:fe:de:07:8b:
2d:64:90:ec:f6:ce:55:01:1c:09:45:ff:52:eb:c1:
10:17:e6:0f:14:b4:6e:6f:69:87:3b:8d:0a:42:09:
4f:9f:a5:04:ca:ff:09:94:88:7c:36:e4:1b:fa:30:
0f:53:6e:35:d4:98:33:82:5f:bc:5e:75:f0:97:10:
73:50:ca:05:d5:25:2c:b7:00:87:34:44:2d:6e:3b:
33:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:53:19:83:F4:51:DE:5D:CE:07:36:A3:63:CD:0C:B2:A0:8F:48:DD
X509v3 Authority Key Identifier:
keyid:D0:F6:B8:43:6F:66:34:CD:31:D7:09:7C:E2:42:A5:49:93:5B:18:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:04:02:83:fe:d1:fa:f4:e2:b6:55:9b:b2:6e:84:ff:d0:55:
59:b3:27:71:17:d8:80:e2:93:00:61:43:be:fe:4d:61:58:4f:
fb:e0:c7:79:b4:6e:f4:ac:5c:86:58:f2:57:d8:a5:cc:8f:fc:
ed:dc:1f:03:d0:c6:e0:fb:a5:d0:69:0b:91:18:e9:24:33:d8:
fd:e7:86:3c:e9:d7:21:ba:54:af:e6:8a:3a:d3:25:75:c3:51:
81:61:68:3c:35:fa:fa:01:0b:a8:09:0e:97:91:78:8e:22:e9:
34:5c:aa:32:ed:8b:ea:6b:97:83:9b:36:16:92:65:92:f2:f7:
41:ce:20:5a:7f:5d:fb:13:9c:ec:a5:68:ec:ec:2e:c5:e7:19:
51:08:77:36:41:b2:36:f2:5f:66:a6:1b:87:34:ba:0d:04:47:
56:a3:df:bd:73:13:56:2b:a5:ed:b3:84:00:6c:00:01:b8:dd:
05:36:78:8c:52:c7:db:35:3b:31:8a:17:40:c4:cf:87:e0:9e:
e1:cd:9d:d9:42:ef:91:b8:c2:2d:06:aa:a5:91:d7:11:1a:c6:
8c:fc:b4:56:10:24:b8:8e:12:b5:69:f2:77:b1:33:ad:97:04:
8d:b1:49:68:a5:f7:c8:0d:a3:e8:70:75:56:65:78:ec:08:5b:
e8:9e:34:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:07:47 2026 by rpki-client