Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
File: dOgVmhbXKz1s37qgltaROf3p0pA.mft (raw, json)
Hash identifier: NbbvYdUwGKNQEoBVRUrPtoYPJOmqHI7iM8c5qZ068HE=
Subject key identifier: 31:65:42:68:59:A8:7A:4C:1C:6F:85:D8:10:64:D6:A9:3E:8B:D3:B1
Authority key identifier: 74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
Certificate issuer: /CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Certificate serial: 01A0CDECBF1D96B6216C65A6A1A2A2FE8D2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
Manifest number: 0B0A
Signing time: Wed 23 Sep 2026 11:00:39 +0000
Manifest this update: Wed 23 Sep 2026 11:00:39 +0000
Manifest next update: Thu 24 Sep 2026 11:00:39 +0000
Files and hashes: 1: dOgVmhbXKz1s37qgltaROf3p0pA.crl (hash: SowqwQeCrtle5qWKOatcFE95I2jbnLYbZO58S5xCFdA=)
2: qdFP8iSD0Z_J4wvN-DjLd-7BFwQ.roa (hash: 0D/tNJqnYIvzeRQq9p/CHZuxh+SBEqxg5rvNHFpn3cY=)
3: vrCign6erTM1LbQRKP4h0IonXBQ.roa (hash: AQYpWzYbq4r9zz5A/4U8pWZOmJvv2qppgX/OMFbKwks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:bf:1d:96:b6:21:6c:65:a6:a1:a2:a2:fe:8d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Validity
Not Before: Sep 23 11:00:39 2026 GMT
Not After : Sep 24 11:00:39 2026 GMT
Subject: CN=3165426859a87a4c1c6f85d81064d6a93e8bd3b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5d:de:08:3f:83:16:dc:db:7f:64:14:00:bf:
c3:aa:3c:90:95:e8:73:c7:c2:42:c1:e5:17:0e:f1:
38:9c:f2:c3:a3:a6:53:d8:47:f1:ee:98:46:ba:78:
1d:a4:93:e0:97:9f:f6:78:6a:db:21:3d:a1:27:57:
84:83:bc:e6:12:f0:b7:de:43:cf:8e:38:e0:79:f1:
9e:98:6b:d0:34:18:25:e4:ea:5a:2d:7a:b5:85:70:
8c:68:0d:1e:eb:2c:0b:03:9f:26:6c:01:82:46:0b:
b6:0a:d7:e8:93:2d:74:77:da:9c:d6:0c:d0:5f:90:
81:79:43:88:be:7c:9b:dd:90:51:3e:65:a9:3e:87:
38:34:6e:6c:b5:50:ab:74:86:70:b6:04:15:b0:a7:
00:de:06:7c:cc:7d:38:43:63:13:3d:86:7a:6b:9a:
42:df:fe:8d:3f:46:00:9e:cd:13:71:dc:c1:47:8c:
ca:07:7e:ef:5c:f9:24:4f:73:ed:be:76:f7:bc:5d:
e2:d2:d1:b7:6c:f7:6b:c6:18:5e:81:1f:19:7e:ed:
0b:2d:f2:9e:ba:57:4f:07:81:5a:4e:d0:0e:31:8b:
51:29:ec:7f:48:06:73:c0:b4:4e:20:74:c5:e6:48:
c7:58:0f:ab:a8:7b:1f:58:52:82:e0:63:10:6d:02:
d4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:65:42:68:59:A8:7A:4C:1C:6F:85:D8:10:64:D6:A9:3E:8B:D3:B1
X509v3 Authority Key Identifier:
keyid:74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:3c:97:08:04:2b:f1:d3:38:9f:c6:cb:35:03:05:02:58:d3:
db:fb:ff:80:a2:ba:11:00:35:ec:6e:d9:2a:ad:53:3e:51:70:
4f:c4:2b:0e:60:97:55:1c:6b:80:35:6d:e4:a3:1e:2b:fe:e3:
7a:a0:08:45:fe:4c:cd:ed:73:74:b0:ed:e1:27:d4:24:64:0e:
cd:7b:ad:a2:61:d2:b8:9e:9d:89:7a:b7:eb:84:4d:7f:e2:16:
da:22:de:6c:c9:15:35:4a:a5:c0:28:85:38:62:3e:cd:97:84:
eb:2f:0a:6d:3d:08:07:33:5d:32:78:b6:fc:5c:11:6e:9b:fc:
36:96:21:30:f9:cf:b6:1a:9f:90:01:dc:8d:a9:07:0a:38:29:
e2:ce:fa:96:bf:bf:40:3b:b2:3d:0a:36:d7:be:e0:29:63:66:
52:40:ac:cb:2d:ea:6e:e5:93:50:1e:37:58:8f:b6:20:0a:40:
f4:0b:27:97:52:7b:cd:ce:46:7a:1a:4b:76:a5:ed:f3:a4:bd:
ad:cf:e1:cf:bf:30:2b:a8:0c:00:1a:ff:57:79:92:1a:b2:5c:
ca:24:51:6f:55:b7:9c:8f:c1:f2:d4:27:42:10:4a:02:a8:02:
fb:9f:af:b0:0f:e5:49:ce:c0:48:ec:af:3e:a1:26:69:40:52:
ef:55:4b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:28:12 2026 by rpki-client