Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
File: 0eAT7IpcVt8kGpslY9ER-OVDv5E.mft (raw, json)
Hash identifier: tnYuNlveuksZUuFzdhorfVOyksdNTfbOi+4RHooOEv4=
Subject key identifier: 98:4F:E4:E4:E1:B5:D0:A4:FA:67:4F:A1:C7:83:B1:F2:1B:04:BF:8B
Authority key identifier: D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
Certificate issuer: /CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Certificate serial: 01A0CE236D77F1A3C3BE7655EBB6B3DBB679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
Manifest number: 1A85
Signing time: Wed 23 Sep 2026 12:00:23 +0000
Manifest this update: Wed 23 Sep 2026 12:00:23 +0000
Manifest next update: Thu 24 Sep 2026 12:00:23 +0000
Files and hashes: 1: 0eAT7IpcVt8kGpslY9ER-OVDv5E.crl (hash: b6BgN5nG5p8gRJPlpzTwVmdfmEAJft5noA8Bi1mb9B4=)
2: HJaqxqktn6jSURWfLmaFrTGw4k0.roa (hash: nCPkWfg8fjBLOL82SkTcjqLkB+FTPueLRpgWHpz5rHo=)
3: X8qnUQA1qg1cnkzl8QaDSyMhQm4.roa (hash: 0vr+LOr1h8ehAYfiW23NLACGpkor4jsJll80Z2l7cCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:6d:77:f1:a3:c3:be:76:55:eb:b6:b3:db:b6:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Validity
Not Before: Sep 23 12:00:23 2026 GMT
Not After : Sep 24 12:00:23 2026 GMT
Subject: CN=984fe4e4e1b5d0a4fa674fa1c783b1f21b04bf8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cc:a7:27:aa:aa:5f:a5:78:33:3e:17:31:b3:
e0:84:05:bc:ad:fb:55:13:78:c7:c7:0a:14:af:c1:
7d:2e:d5:ab:82:f3:51:b8:5e:2c:0c:c8:ce:84:9b:
ac:d4:c5:21:7d:78:c1:5e:d4:73:19:50:3e:d1:3d:
1f:7f:bf:9d:8b:9b:6a:b2:88:49:5e:3b:c9:c3:ef:
31:42:ce:9d:ea:85:c6:8d:7f:ef:db:d9:ad:88:ac:
84:52:c6:a6:1b:8f:37:01:16:98:bb:c4:ca:cc:69:
b6:bb:1e:45:59:48:8f:74:47:34:7c:e0:ed:e5:ef:
72:7f:29:fa:e5:c1:d9:74:66:bc:01:f4:dc:bb:5a:
82:a2:6b:f9:65:fc:5a:a0:09:a6:bf:b0:1c:f0:79:
db:9f:00:9d:40:84:36:4e:55:8e:21:e8:a4:2d:f1:
72:47:5c:31:fd:15:9e:d8:1e:91:c6:1a:a8:26:b4:
cd:f8:47:60:30:33:1e:f1:2f:64:ff:54:3c:18:16:
ad:82:80:05:3d:9c:6c:d5:8f:a3:8f:30:d3:c6:35:
7e:21:13:a2:d7:fd:62:fc:a4:ca:32:bd:37:bf:fc:
f7:98:d1:64:ac:7b:ea:30:b0:6b:d7:7b:cf:07:05:
91:f8:06:80:11:cb:c6:29:c6:ef:ad:a6:ed:cd:9b:
1a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4F:E4:E4:E1:B5:D0:A4:FA:67:4F:A1:C7:83:B1:F2:1B:04:BF:8B
X509v3 Authority Key Identifier:
keyid:D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:b0:91:3d:b0:d7:3e:7e:2d:35:ea:24:7f:d0:72:c6:ff:c6:
03:b6:9a:5f:f8:e0:fb:36:75:82:d6:74:70:71:c4:66:8a:26:
3e:7c:8a:be:2f:58:9b:d6:7a:68:51:1f:22:bb:fa:70:59:61:
71:52:ff:11:93:3c:12:3f:21:9d:8b:36:ee:e1:04:b5:d8:55:
50:89:d9:95:1e:0e:d7:fc:d2:90:ab:8e:11:22:24:9e:07:04:
b1:48:18:fe:9f:d1:27:99:f7:d9:d8:4c:11:07:42:3f:12:6e:
2d:6a:0d:ac:94:6a:d9:d4:02:00:05:4c:66:b1:1e:13:90:ba:
c0:4b:d0:25:a3:b8:af:bb:c3:90:f2:49:a6:bc:72:e8:84:1a:
dd:96:9c:da:ff:f5:38:f4:af:7c:b8:7e:be:72:95:e0:a5:fe:
bc:0f:38:d7:88:0e:d4:de:76:0b:58:d9:1b:3a:eb:24:1a:b8:
61:99:b1:63:f0:91:59:c0:98:ec:09:ed:47:a0:4e:9a:20:71:
dd:6a:99:6f:4a:20:d5:8c:77:c3:ed:af:1f:c5:5b:b9:d8:54:
a8:92:45:59:08:67:4a:85:52:5f:28:b5:22:2f:26:75:72:06:
e3:fb:d5:85:8e:51:df:e9:52:2f:0d:58:21:b4:14:2a:0d:c2:
4a:7e:c9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:24:08 2026 by rpki-client