
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
File: 0PbNMLTPoZPiJrupKC42aiKjEQ8.mft (raw, json)
Hash identifier: bZgYljBxMhuPV3BDZbVnPMGopvPBBsR9biVqepxQNPM=
Subject key identifier: 1F:05:B6:54:F4:30:26:F5:26:71:5B:4A:D6:67:CD:FB:5E:EB:A9:79
Authority key identifier: D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
Certificate issuer: /CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Certificate serial: 01A0CD116E897B8D70813EB0303054223686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 07:01:06 +0000
Manifest this update: Wed 23 Sep 2026 07:01:06 +0000
Manifest next update: Thu 24 Sep 2026 07:01:06 +0000
Files and hashes: 1: 0PbNMLTPoZPiJrupKC42aiKjEQ8.crl (hash: esJa4U/cxm6rcW6h85Kd5MBMetQ+ocQyqIrzjZJGCM8=)
2: 0g907WBXD4qZBS5Lv--lVG4AGmY.roa (hash: ADx0uWHqRsIMIEM4zrRsIaFkNMUykkO7aZ3mKfDHgOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:11:6e:89:7b:8d:70:81:3e:b0:30:30:54:22:36:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Validity
Not Before: Sep 23 07:01:06 2026 GMT
Not After : Sep 24 07:01:06 2026 GMT
Subject: CN=1f05b654f43026f526715b4ad667cdfb5eeba979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:25:7b:f9:f2:fe:ea:1b:86:21:f4:70:41:2c:
15:d1:8d:a0:64:ec:81:e3:eb:5d:b0:64:d4:fc:17:
6d:aa:e3:11:74:71:fe:f1:2f:2b:3f:90:91:4a:55:
19:c6:f2:44:2b:41:91:01:a2:17:f1:bc:55:26:2c:
04:45:74:d2:76:92:18:a8:fb:c3:8a:9f:b4:a6:b1:
85:72:22:4f:0a:3d:39:0a:f4:08:29:36:44:19:97:
5a:9e:29:99:00:5b:7c:c0:83:a7:34:80:77:46:36:
c0:53:c3:c5:60:a9:d7:69:82:67:f5:3e:1b:c8:40:
e3:65:60:1e:db:d3:d9:e1:0f:03:f4:d9:42:e9:9b:
a2:61:b4:17:dc:9f:42:85:56:3d:4e:c8:74:27:48:
84:07:9b:cb:b8:28:e2:27:cc:a4:24:69:15:c5:e7:
7a:d1:98:3c:de:1e:8a:8d:ce:c0:69:ea:d7:63:87:
20:e7:00:c3:f9:9c:6f:36:f7:16:52:4a:3a:f3:83:
f1:5c:8c:6a:0a:c1:19:b1:2b:8c:64:f1:67:50:33:
48:bb:07:2c:2f:a6:e1:47:50:f5:f7:e0:cc:0e:b3:
fc:16:79:8f:ef:3c:0f:0f:e3:93:a5:84:ca:d3:d5:
2f:7d:5c:c7:c9:45:61:8c:83:44:c6:b3:ce:4d:ce:
98:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:05:B6:54:F4:30:26:F5:26:71:5B:4A:D6:67:CD:FB:5E:EB:A9:79
X509v3 Authority Key Identifier:
keyid:D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:7f:2a:41:0f:69:62:60:96:13:a0:3c:31:57:12:73:08:91:
26:bd:e2:7e:62:d2:fb:9b:16:bc:f2:b2:29:17:85:04:f6:ce:
31:62:64:08:f8:10:fd:ca:0f:41:2a:99:95:08:d7:ff:44:57:
09:50:62:88:89:35:cf:76:85:59:7e:ce:6a:1f:e5:d3:0e:c5:
ba:97:a1:8f:b4:50:f0:e2:fb:19:64:37:18:78:7c:35:04:62:
1e:2d:31:8f:40:84:5f:94:fd:38:2c:8e:39:d2:10:4b:69:ea:
0f:25:5e:9b:9c:c6:36:74:ac:24:8a:25:80:97:65:0c:c4:ef:
af:f1:4d:5f:e3:83:da:8c:27:99:f7:7f:45:26:f7:42:f7:71:
3c:0d:dc:3b:ee:12:6c:ba:a6:00:aa:21:55:2c:20:f8:c4:5b:
3b:ad:d6:a5:b7:3d:a1:24:80:c2:c4:be:1e:2d:19:c6:98:ed:
aa:47:82:63:a1:c8:44:91:67:1e:5b:8a:57:f0:a3:07:0a:95:
6a:e4:51:19:52:13:54:29:23:bb:69:0d:c9:d4:31:3d:e7:06:
d8:33:e3:c3:43:7b:4c:2b:e7:d4:f4:63:48:93:be:0b:60:fd:
72:aa:38:7a:ea:d2:c7:b5:ae:03:09:ae:ef:c8:77:d1:5c:79:
04:1a:a3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:49:12 2026 by rpki-client