Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
File: 0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft (raw, json)
Hash identifier: HMpFK9vK2QVwwj6rdmQj1fM2b+rim2UhUzH9mbAm3k8=
Subject key identifier: 5C:B6:38:DD:EB:72:31:52:CF:1B:16:4F:EB:3E:EF:10:B5:CB:4A:4A
Authority key identifier: D0:EE:03:89:68:7D:BD:44:5D:E6:F9:23:9C:1D:02:C3:77:0C:F5:74
Certificate issuer: /CN=d0ee0389687dbd445de6f9239c1d02c3770cf574
Certificate serial: 01A0D8A8C089439EF00C73FC991D7F0D1D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 13:02:12 +0000
Manifest this update: Fri 25 Sep 2026 13:02:12 +0000
Manifest next update: Sat 26 Sep 2026 13:02:12 +0000
Files and hashes: 1: 0O4DiWh9vURd5vkjnB0Cw3cM9XQ.crl (hash: wcFsZ9bHvh0MG8+/A5/0F9raHNlk6nHM/8wXrqffAw0=)
2: ufg8Cy-npLiG4EP7oeE-jAY168k.roa (hash: mWJPH552eZGzUsrCNb54v4U4ffZaIGFDBWjHB1EftzA=)
3: ut5dpGeCvxjJRpLmR_ipxil5ZUA.roa (hash: PaeXiU3oIApbKxkYqCqS8/5Z6kGo2lJVdWVbX8L9K5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:c0:89:43:9e:f0:0c:73:fc:99:1d:7f:0d:1d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ee0389687dbd445de6f9239c1d02c3770cf574
Validity
Not Before: Sep 25 13:02:12 2026 GMT
Not After : Sep 26 13:02:12 2026 GMT
Subject: CN=5cb638ddeb723152cf1b164feb3eef10b5cb4a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:58:18:38:4b:3d:cc:1f:1f:c6:17:bd:5c:45:
06:01:db:7d:5f:60:d9:7b:b1:43:1c:40:03:4a:29:
59:ec:25:1b:3b:24:e3:d7:06:a5:77:66:4b:13:97:
2e:d9:35:82:a7:58:df:48:83:30:53:f0:f8:0b:fa:
e5:28:91:62:d4:14:9f:af:d7:c8:85:ca:e9:06:3d:
a0:49:e9:bb:3d:b7:08:72:fb:a2:df:6d:53:e2:d5:
dd:6c:cc:af:a3:e1:0e:ab:22:ed:99:27:24:21:a2:
9d:2a:11:66:5f:d3:38:36:9c:d4:d9:de:21:e6:b1:
c0:03:fe:76:b8:d2:fe:7d:1e:19:87:c4:71:f4:31:
a1:41:d1:20:47:74:e6:a8:f0:53:73:26:7b:de:7b:
22:17:71:ba:6b:d7:0b:ad:b1:41:c7:e0:57:ad:a6:
e2:52:ea:51:69:45:9f:03:16:47:a4:31:c4:b4:03:
42:97:89:21:eb:22:b1:af:c3:78:88:59:bc:35:fd:
3e:d8:f6:41:63:49:cf:72:cb:aa:2f:e5:72:56:22:
b0:14:78:f7:2b:e9:7e:e0:d8:96:42:3c:27:88:0a:
c2:9c:ce:b9:32:fe:30:d1:2f:43:db:a1:fa:a0:1f:
1b:5b:de:b0:a4:8c:2e:13:08:aa:2a:80:4d:b9:08:
c7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B6:38:DD:EB:72:31:52:CF:1B:16:4F:EB:3E:EF:10:B5:CB:4A:4A
X509v3 Authority Key Identifier:
keyid:D0:EE:03:89:68:7D:BD:44:5D:E6:F9:23:9C:1D:02:C3:77:0C:F5:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b3:53:4a:8c:69:61:fb:43:3e:09:8a:58:cd:25:4b:53:13:
38:8a:fd:48:3d:a1:40:5d:76:50:93:c9:c9:86:9f:e1:d8:2c:
ce:6b:78:a7:93:4e:3e:6d:ff:53:ad:2e:66:3d:3a:3a:f2:9e:
10:37:7a:5b:ff:cb:3e:4d:f0:f3:88:b6:06:b6:8d:83:f2:1d:
e6:81:b6:ca:60:49:a3:a1:a7:be:37:a2:4c:35:97:ab:0f:71:
57:ff:e7:a0:c0:84:d7:4d:95:ce:b7:ef:2f:04:bb:bc:17:1a:
8e:2c:5d:37:0c:01:58:d6:2e:67:61:10:83:35:d9:e0:7a:e9:
4e:f2:15:60:0c:6c:f5:3b:af:3e:d0:8c:1f:02:63:31:e4:ee:
5e:45:84:f2:11:16:e2:61:e2:7e:08:e4:90:20:57:fb:b8:ef:
f4:09:71:61:01:06:05:7b:4a:bd:69:e1:59:0e:06:2b:39:2f:
5f:e7:1a:48:4d:a4:14:9f:01:70:1e:51:aa:fd:d0:28:37:8e:
2d:da:5a:2b:5d:cf:21:91:73:b9:cf:28:ce:a8:e4:a5:d0:11:
8e:a8:46:da:14:fc:86:ae:c1:6d:34:f9:8d:69:ef:7a:df:80:
5f:55:d5:30:53:7c:e2:93:ad:60:2e:24:06:c9:94:d9:bf:60:
70:bd:d6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:00:20 2026 by rpki-client