Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
File: do0jVpP2hnxbOBPaHzb-EHvR14I.mft (raw, json)
Hash identifier: 3X0Ndb74cw2nUATDI9aVva/KZGKNSqmxqyxnXLSBhbo=
Subject key identifier: 0B:25:A3:48:50:C0:E3:1C:A5:D3:ED:1A:53:B2:1D:0F:E9:67:7D:69
Authority key identifier: 76:8D:23:56:93:F6:86:7C:5B:38:13:DA:1F:36:FE:10:7B:D1:D7:82
Certificate issuer: /CN=768d235693f6867c5b3813da1f36fe107bd1d782
Certificate serial: 01A0D0489352084C8BAE0BFAD8B95C53D774
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
Manifest number: 1143
Signing time: Wed 23 Sep 2026 22:00:12 +0000
Manifest this update: Wed 23 Sep 2026 22:00:12 +0000
Manifest next update: Thu 24 Sep 2026 22:00:12 +0000
Files and hashes: 1: KuefoOzdZ9vrXjVoaWqLBNOd8Fc.roa (hash: Tr2+OxM2L2vZYYtrtzp3JmsEgxHYlAlF0KBqV8P0L1o=)
2: do0jVpP2hnxbOBPaHzb-EHvR14I.crl (hash: jM8r+HBWOentR5bCeHZ43G/eKk+KnPb5Yxjt2DypGvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 22:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:48:93:52:08:4c:8b:ae:0b:fa:d8:b9:5c:53:d7:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=768d235693f6867c5b3813da1f36fe107bd1d782
Validity
Not Before: Sep 23 22:00:12 2026 GMT
Not After : Sep 24 22:00:12 2026 GMT
Subject: CN=0b25a34850c0e31ca5d3ed1a53b21d0fe9677d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2b:ed:63:f7:f7:22:8c:73:82:95:d6:c6:ed:
1b:86:a2:48:71:a4:cb:14:46:d9:df:27:cb:bf:8e:
98:3a:61:b4:df:b5:f3:49:2f:07:f6:fc:b2:86:ad:
c3:d9:b2:c5:0a:ef:91:5f:f0:8b:df:61:be:af:7b:
aa:a1:b8:19:fe:f7:e6:fe:ac:65:23:2c:89:16:f4:
8a:c8:0b:be:bf:4f:76:11:4a:aa:57:98:b4:8d:02:
f0:e8:9b:ad:f6:97:d0:6f:06:fa:e7:ce:5a:42:f9:
6b:cd:9a:48:f5:20:95:e7:71:18:f9:e7:8a:2c:4b:
26:6b:09:1c:c0:c3:cb:43:2f:20:aa:db:2b:28:70:
49:ef:8d:d0:55:29:21:5c:9d:72:be:71:a5:45:c2:
40:14:bf:16:eb:44:bd:25:0b:64:d2:10:b9:bc:78:
49:17:8e:5c:5c:b0:9b:c5:e4:6e:6b:79:48:44:25:
c2:af:e0:04:75:fe:7d:51:fe:4d:70:90:76:b9:01:
0e:2d:72:56:1b:c8:7b:cd:7f:ea:81:9a:91:c7:77:
4c:99:e7:af:47:43:3d:b5:3f:7c:fd:5c:5a:ae:54:
33:a5:7f:9b:fb:9f:68:57:b5:81:8b:01:c4:01:15:
68:eb:7d:e6:46:f3:c5:5a:fd:f9:a2:68:1f:e7:85:
06:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:25:A3:48:50:C0:E3:1C:A5:D3:ED:1A:53:B2:1D:0F:E9:67:7D:69
X509v3 Authority Key Identifier:
keyid:76:8D:23:56:93:F6:86:7C:5B:38:13:DA:1F:36:FE:10:7B:D1:D7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:4f:55:d7:21:7d:31:63:3a:fc:a4:8f:3d:cf:c0:19:ef:78:
75:f1:56:62:5c:84:40:6f:e9:24:83:c2:b2:01:12:8f:8d:ba:
2e:12:35:f6:b7:72:d6:d0:af:03:f8:b9:7f:cc:49:d7:9e:f8:
90:c7:86:3e:b9:d2:a1:0d:77:23:94:48:74:c0:dc:44:9b:ce:
33:2e:de:53:12:37:b0:9a:1e:33:81:d9:21:be:5e:ea:7a:81:
ba:f4:ca:35:7b:0f:44:e6:26:5d:c4:57:45:e1:25:d9:e6:24:
7d:38:68:f0:9e:b0:b8:53:17:bf:22:81:f1:9b:19:9d:0b:72:
b2:93:69:7b:9d:a2:4c:e9:a9:74:41:29:3e:85:52:50:40:61:
39:43:f5:32:1d:d6:cb:c2:29:31:1e:e1:60:4d:dc:d7:b4:f0:
80:b3:a2:56:c6:5d:25:e6:f4:35:16:a1:fc:af:d3:5a:7f:71:
47:d4:8b:6f:d1:55:26:4c:48:3d:25:b9:24:b1:b1:df:61:12:
2b:24:f2:07:8b:dd:eb:60:82:2b:48:4f:d7:91:72:95:27:6e:
a0:a7:14:37:64:8e:5a:d8:35:ad:f4:6f:0c:c3:75:4d:60:44:
ae:42:c3:27:a9:28:b4:46:7f:cc:58:73:ed:06:58:e6:e5:a9:
1b:e3:ab:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:54:59 2026 by rpki-client