Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
File: 0d4HoaH2W9EW4R-fEQhgS26VzP0.mft (raw, json)
Hash identifier: fBfkgJo9pqqDIxLTinPTwX8uXu5JQqYc/ZlvzwaYj0o=
Subject key identifier: 68:92:76:C2:B9:B9:9F:69:C0:11:2C:62:54:63:27:E2:C7:09:99:90
Authority key identifier: D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
Certificate issuer: /CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Certificate serial: 01A10D397CFAA10CC9F0A4AD87C30DDC0FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
Manifest number: 1621
Signing time: Mon 05 Oct 2026 18:00:33 +0000
Manifest this update: Mon 05 Oct 2026 18:00:33 +0000
Manifest next update: Tue 06 Oct 2026 18:00:33 +0000
Files and hashes: 1: 0d4HoaH2W9EW4R-fEQhgS26VzP0.crl (hash: O4RQM78e0zhncBUUdEUqCMqKpa35b/UoWmWj1Lfq10Q=)
2: 6AcW6a22cinoLIymW2byGAd7uWo.roa (hash: RoxEP6kBPzD8q8xHwCRknSTvIS7/SOyyVCFWMK8wKF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 18:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0d:39:7c:fa:a1:0c:c9:f0:a4:ad:87:c3:0d:dc:0f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Validity
Not Before: Oct 5 18:00:33 2026 GMT
Not After : Oct 6 18:00:33 2026 GMT
Subject: CN=689276c2b9b99f69c0112c62546327e2c7099990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:60:1d:56:68:53:87:6a:29:2f:31:4c:41:1a:
dc:4f:e1:f8:7d:2c:f2:b5:81:03:0e:2e:27:ab:43:
f3:e3:e3:27:4b:d2:ef:cb:a4:de:3e:ff:ac:af:8d:
5b:82:fe:0b:b4:c5:00:c2:17:69:21:54:77:1d:6d:
75:53:f9:ab:d5:d0:4a:42:69:9c:48:56:0b:11:a7:
f6:c5:3c:2a:1e:55:67:ad:87:51:e3:c0:ca:2b:b6:
82:e7:05:b9:8c:43:ae:82:f4:98:14:f3:48:7a:6c:
b6:b7:4d:78:17:a8:fe:58:aa:60:f1:9f:d8:0a:da:
79:2c:75:a9:06:b0:0e:0a:f8:8a:4a:28:b9:9c:fc:
bb:22:e1:05:d4:7b:86:0e:62:9c:2e:b1:75:1d:84:
7b:0f:78:8e:2b:54:87:c4:13:95:b4:e6:f2:d7:d3:
2b:95:7a:95:ab:4b:91:c2:d5:9c:34:cc:75:d5:85:
5a:f1:4d:79:15:d2:54:4e:92:b0:95:a3:d5:3f:85:
1d:5e:d0:c7:ad:76:d9:5a:7c:9a:aa:51:e3:1c:fe:
c1:24:cb:b5:63:27:24:31:b4:c5:4c:98:78:79:e2:
d2:33:a7:a3:50:f6:3b:ee:c1:be:9d:1b:60:33:bb:
9b:74:4b:72:51:37:d4:e8:d8:fe:91:98:78:27:dc:
be:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:92:76:C2:B9:B9:9F:69:C0:11:2C:62:54:63:27:E2:C7:09:99:90
X509v3 Authority Key Identifier:
keyid:D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:bf:fb:14:18:8e:c9:f7:fd:a3:d9:1a:63:18:45:bd:45:6b:
11:54:49:22:8c:aa:b7:2f:da:2e:22:36:d6:6c:d0:21:31:c9:
0f:ec:81:b8:cc:17:4c:76:e3:d8:ab:46:6e:e3:b9:45:98:55:
9c:2e:6f:b9:9e:f8:75:c0:f8:00:81:70:35:0c:e2:d1:76:c8:
63:9a:c7:b7:40:f4:30:37:99:3e:ea:ed:bc:8a:8e:15:c2:5b:
6b:97:af:00:28:04:e6:be:97:32:2c:a5:20:c0:3b:31:ca:28:
aa:d6:c6:dd:cf:09:4a:c0:5d:5d:79:a6:45:3f:e3:bb:07:ae:
95:91:70:cb:6a:43:34:21:99:a6:f2:2c:db:56:f3:98:3c:0d:
40:d0:a1:97:61:06:21:a1:43:de:6a:87:ad:78:75:58:5e:ac:
a7:00:24:ac:6b:e7:0f:29:44:17:77:27:2d:94:e1:08:1d:38:
d3:aa:2b:51:a2:ea:76:b3:c9:c5:a2:07:8a:50:d4:ab:fd:fb:
d7:33:fa:7a:6e:d3:c0:6e:dc:f5:db:f6:d5:ce:30:55:16:73:
19:cb:cd:1c:d3:cf:e0:05:de:90:3b:63:b6:2d:da:18:05:f6:
9c:91:7c:db:f7:72:61:5c:19:73:4d:34:07:1b:9e:5f:26:90:
bd:51:b3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 03:27:48 2026 by rpki-client