Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
File: 0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft (raw, json)
Hash identifier: 2zFkr3DcIseqAEZtEJPQDUE9QvOLaKUO/hFAv0erJU4=
Subject key identifier: B2:9A:BC:F9:00:13:50:40:8A:E6:E4:8D:98:9C:C9:60:20:8A:32:09
Authority key identifier: D2:76:C4:1A:21:76:25:4F:23:6D:23:D3:91:FD:56:09:06:19:67:0D
Certificate issuer: /CN=d276c41a2176254f236d23d391fd56090619670d
Certificate serial: 01A1D9811970EC0595B7F5B7C49F80866CE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
Manifest number: 05F3
Signing time: Sat 14 Nov 2026 10:01:18 +0000
Manifest this update: Sat 14 Nov 2026 10:01:18 +0000
Manifest next update: Sun 15 Nov 2026 10:01:18 +0000
Files and hashes: 1: 0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl (hash: o0E0LMXSU8eWiVnas0IYg8/gwMoLHM41FQT1PunTZBQ=)
2: W4cImxro0S1Oqpe5aOmc9Zk1to0.roa (hash: 2C5FiGId1eEcbsSAENT53ABjs4YVPjHtZepjzsteNl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d9:81:19:70:ec:05:95:b7:f5:b7:c4:9f:80:86:6c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d276c41a2176254f236d23d391fd56090619670d
Validity
Not Before: Nov 14 10:01:18 2026 GMT
Not After : Nov 15 10:01:18 2026 GMT
Subject: CN=b29abcf9001350408ae6e48d989cc960208a3209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1b:78:da:fa:67:f4:7f:25:a7:4c:ca:2c:47:
19:8c:50:54:56:c9:c7:81:0f:1b:cf:7c:4e:90:ff:
4c:58:b7:cd:b8:64:7a:b5:d1:e2:80:42:d3:5b:45:
ec:d4:38:1c:69:17:10:3c:95:97:60:b8:7e:54:ba:
30:ff:1d:97:4e:42:87:e6:fe:68:59:d5:0b:a3:d0:
86:ae:dc:4f:c1:90:23:d9:93:4b:69:ba:1d:10:93:
95:54:47:d6:08:f6:ed:58:69:85:67:ae:dc:22:4e:
fa:36:2e:93:85:75:7b:66:2e:4d:47:f0:cf:86:be:
6e:ca:fa:0b:bf:3c:25:23:8a:3e:9c:46:2e:54:3c:
7a:40:fd:b9:98:bf:7c:7e:62:6e:35:eb:ac:75:1b:
5c:d7:1f:e9:f4:40:40:a2:b1:4c:18:22:eb:19:76:
37:fe:83:35:28:b5:ce:d1:48:3f:a5:d2:96:77:1a:
bb:d7:05:0e:8a:47:67:59:88:a4:48:7e:f8:d9:f9:
14:b7:7e:b0:d9:c1:ac:51:2a:88:83:c5:79:19:db:
bc:d9:f2:a6:39:51:7b:0c:8b:13:f8:6c:31:c5:02:
ba:7a:19:6b:25:b1:89:a6:9f:21:a4:a3:3e:b0:e2:
be:ea:3b:cd:fb:35:96:df:ca:21:c2:ed:aa:29:31:
8b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9A:BC:F9:00:13:50:40:8A:E6:E4:8D:98:9C:C9:60:20:8A:32:09
X509v3 Authority Key Identifier:
keyid:D2:76:C4:1A:21:76:25:4F:23:6D:23:D3:91:FD:56:09:06:19:67:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:33:78:bb:3a:20:e7:f3:99:bc:7a:4a:1e:2d:26:43:f1:76:
d9:a0:8d:60:9f:fa:3f:d1:cc:74:47:8a:e9:3e:30:a7:db:cf:
9a:cb:82:41:d2:8c:cd:6b:5a:ea:57:c1:e5:7a:cc:7d:3a:2b:
8d:71:35:6f:6f:7a:02:9f:2d:c1:71:29:59:15:8b:24:f9:08:
ca:42:5b:a0:d6:6f:58:6b:6a:f4:59:27:e9:d3:ea:2b:1f:db:
3a:5c:ea:8a:31:53:42:c3:7f:d8:56:e2:97:7f:e4:26:cc:05:
13:fe:58:6e:25:e1:57:96:9d:92:a7:25:68:da:88:46:c2:20:
a5:7c:e4:d0:b8:c7:a8:00:28:80:96:fb:0c:da:d5:22:cb:a2:
d9:be:69:8f:11:f8:41:67:db:30:4b:d1:90:fa:63:a4:6a:b1:
39:7f:77:59:ae:d8:63:3e:89:67:f0:ce:df:06:ab:83:96:64:
4b:b2:10:40:c4:ff:7f:cf:e6:5b:29:bc:92:cb:f5:ce:53:44:
9e:3a:4b:1c:ff:75:34:76:0a:4a:a5:43:74:f1:75:a5:fd:41:
d6:cf:10:04:84:cd:b7:a8:b0:f5:7a:8a:82:20:54:ad:4f:ed:
c9:35:88:a4:f7:48:e2:17:bd:44:52:a7:5a:01:a2:5f:6a:26:
1d:2a:ce:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:46:54 2026 by rpki-client