Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
File: 0PT6gHWHU7JDohZe3ep12-7oJsQ.mft (raw, json)
Hash identifier: lzZocWYMbbYZq2svupD9tBbDzbFNW0SOj9oieecLP00=
Subject key identifier: AE:59:03:83:36:A4:53:E5:FB:83:A8:DA:CF:F1:56:7F:BD:AE:57:97
Authority key identifier: D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4
Certificate issuer: /CN=d0f4fa80758753b243a2165eddea75dbeee826c4
Certificate serial: 01A0CFA3A5E21484A4D71C7771F3BCF343F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
Manifest number: 1557
Signing time: Wed 23 Sep 2026 19:00:03 +0000
Manifest this update: Wed 23 Sep 2026 19:00:03 +0000
Manifest next update: Thu 24 Sep 2026 19:00:03 +0000
Files and hashes: 1: 0PT6gHWHU7JDohZe3ep12-7oJsQ.crl (hash: mfCu19jPc3iuwnfoRfOoGZavzGvTspOvSb+3Za7p5xA=)
2: pLi1qq2wcSmdgCiUnjjCoQErQdA.roa (hash: 7prO26MADaOtqZ/YBeNHajM4pUEvbdbYtkMA592/T+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a3:a5:e2:14:84:a4:d7:1c:77:71:f3:bc:f3:43:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f4fa80758753b243a2165eddea75dbeee826c4
Validity
Not Before: Sep 23 19:00:03 2026 GMT
Not After : Sep 24 19:00:03 2026 GMT
Subject: CN=ae59038336a453e5fb83a8dacff1567fbdae5797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9b:4d:a1:6d:59:cb:83:cd:4c:52:46:19:2d:
9a:94:c1:fd:72:fa:85:f3:43:28:58:fc:3c:51:53:
94:e1:61:ac:ec:4a:43:0b:6b:69:dd:b6:27:12:56:
f7:52:6e:53:c6:b9:d5:ad:9c:d9:bb:4c:2a:aa:ef:
d9:20:a7:b6:f7:b4:26:34:c8:bf:91:c4:8b:6d:4e:
a4:5d:d1:3c:35:4f:5f:e9:fc:86:94:43:91:02:2e:
53:84:25:d8:19:8e:ac:df:07:f2:af:93:86:dd:76:
d1:fb:eb:fc:6c:b3:8f:a4:cf:a8:dd:c1:7b:e7:38:
71:8b:96:c1:b2:38:be:de:9b:36:f7:19:3f:81:7f:
25:59:84:fd:77:bc:3d:83:82:0e:eb:48:5b:c1:cd:
32:de:3a:52:ac:10:2f:d0:d0:12:14:3c:03:50:9a:
cb:48:93:14:1e:ad:aa:f6:28:15:8f:a8:4e:a2:9a:
54:8e:9c:92:c4:63:01:fe:29:e1:5c:40:50:cb:03:
f7:30:0b:07:28:a8:a7:a8:d7:d6:08:bd:4b:1d:dc:
78:4e:4f:38:00:de:a6:fe:d9:9e:03:89:42:2d:2a:
20:85:0d:16:ed:1b:d1:24:62:ca:c4:99:59:45:60:
b5:e2:70:c7:69:9e:ed:13:28:ee:02:ba:93:37:04:
5b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:59:03:83:36:A4:53:E5:FB:83:A8:DA:CF:F1:56:7F:BD:AE:57:97
X509v3 Authority Key Identifier:
keyid:D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:23:aa:ce:d1:8d:1f:d6:fd:11:7e:9f:d3:26:ef:86:d1:68:
6f:d8:a5:5d:12:b8:41:4d:4f:e3:52:18:ca:85:d6:25:c6:37:
57:e2:5f:ab:b9:e6:59:6b:41:a1:0f:6c:14:f2:09:91:2f:40:
c7:b6:57:e3:ca:ec:81:94:fd:f5:52:bb:5e:37:db:ce:89:18:
eb:dc:60:fb:37:a4:e9:d7:8f:0e:1c:97:ae:92:c6:b0:b2:c7:
df:e0:b6:21:fb:15:0c:0e:50:e9:2a:41:d2:25:06:2c:14:dc:
e6:58:46:24:c8:78:58:91:0c:71:83:e8:21:e8:71:be:5f:2b:
e8:95:c2:a4:7e:c0:d7:89:71:d2:7f:d2:cd:41:25:82:5e:b1:
73:57:d8:ec:69:e5:66:5a:02:26:bb:0c:2c:6e:46:95:22:66:
ea:b5:3b:5b:fd:93:db:5b:a4:5a:a3:f6:11:7b:ae:e4:85:e4:
58:c8:c1:5b:e1:90:a8:6b:f8:46:43:88:e8:20:ae:84:0c:ca:
05:61:e3:fb:49:2e:24:ad:0f:c2:bc:00:27:af:ce:e7:f0:ce:
1c:22:2a:37:13:0e:20:7c:29:df:e3:e5:71:af:8d:a2:a4:9f:
38:ea:56:2d:89:23:99:a7:ea:df:c8:1f:78:ec:7a:03:f6:c5:
78:86:c2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:42:17 2026 by rpki-client