Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
File: 0PbNMLTPoZPiJrupKC42aiKjEQ8.mft (raw, json)
Hash identifier: y2oqaXtKRpBn99MDFqF9rrK5pBL/k2RNiDWup+MCsnY=
Subject key identifier: F3:7A:E8:03:DC:AA:5A:26:73:6D:70:30:2D:39:7C:77:DB:ED:13:9D
Authority key identifier: D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
Certificate issuer: /CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Certificate serial: 01A1CFD97B855642DB8F555F7F225535BC23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
Manifest number: 1AF2
Signing time: Thu 12 Nov 2026 13:01:39 +0000
Manifest this update: Thu 12 Nov 2026 13:01:39 +0000
Manifest next update: Fri 13 Nov 2026 13:01:39 +0000
Files and hashes: 1: 0PbNMLTPoZPiJrupKC42aiKjEQ8.crl (hash: /7uan3ctYjh/Q3WSDLSpgMi3vJdfs/Pnz/bPOfj4Pb8=)
2: 0g907WBXD4qZBS5Lv--lVG4AGmY.roa (hash: ADx0uWHqRsIMIEM4zrRsIaFkNMUykkO7aZ3mKfDHgOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Nov 2026 13:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cf:d9:7b:85:56:42:db:8f:55:5f:7f:22:55:35:bc:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Validity
Not Before: Nov 12 13:01:39 2026 GMT
Not After : Nov 13 13:01:39 2026 GMT
Subject: CN=f37ae803dcaa5a26736d70302d397c77dbed139d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:da:08:de:8f:a7:69:c7:02:89:59:57:18:30:
9d:ae:9c:e9:3d:ca:78:5e:13:81:e0:86:ed:2c:73:
b1:d7:6d:08:89:f7:19:8c:c7:74:45:b6:75:7e:ff:
55:17:78:c1:91:0d:7b:b6:55:96:16:67:1b:aa:17:
5c:11:93:c5:48:ed:b0:1c:4b:0f:af:ac:c7:c6:d8:
40:8c:c6:d2:4e:f3:e0:a0:66:a1:3c:86:f9:cc:27:
d0:85:4b:d7:f9:94:f3:e6:a9:56:0d:c3:78:d3:48:
b1:be:cf:2d:47:61:cd:0e:00:df:04:72:e6:f8:cc:
52:be:63:21:1b:9e:c2:66:34:0f:3a:3a:52:b7:da:
a5:b6:e6:7b:e2:da:09:9b:c2:b3:f5:d8:71:89:a2:
6f:7b:78:5f:9d:12:16:6e:e6:e5:1a:f8:12:37:2e:
87:9f:3c:1d:19:e4:70:aa:67:fd:f0:72:2d:de:8b:
0a:91:70:7f:57:4b:b3:ce:6d:53:91:5a:c7:37:dd:
01:d8:93:eb:29:01:3f:07:a1:de:07:1f:d6:26:0f:
00:bf:2f:f3:f4:bc:cc:c8:27:a0:76:db:47:dd:48:
44:e9:1e:be:0e:21:00:21:57:48:f3:38:54:c9:3e:
b6:92:e9:f2:4f:27:cb:30:d7:fe:4d:94:27:5a:e9:
ad:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7A:E8:03:DC:AA:5A:26:73:6D:70:30:2D:39:7C:77:DB:ED:13:9D
X509v3 Authority Key Identifier:
keyid:D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:10:2a:6f:b8:a5:6a:c5:80:7e:53:79:3b:32:3f:ae:12:91:
47:77:aa:75:3b:55:8a:66:c5:97:dc:92:ae:3f:b4:de:66:ba:
ea:ca:e7:9b:71:5f:71:15:ba:d5:b8:2f:79:8b:83:b9:35:51:
56:b3:df:65:73:4f:bb:1e:4d:f9:0a:df:c9:53:e8:56:45:49:
86:42:3d:e7:6d:fb:86:25:c7:2c:c6:41:24:03:6f:f4:ca:49:
ad:98:c2:f0:eb:90:b1:6e:e3:67:22:f6:af:8d:4f:bf:45:43:
97:4a:71:7e:af:d4:b4:33:c8:c1:fd:4b:04:0c:cd:ea:5b:01:
56:51:fb:fb:b7:3c:a2:f4:78:61:b8:71:a4:e4:9a:ba:30:60:
b4:f1:dd:7e:29:e7:3c:fc:30:9d:d1:44:8b:84:a4:1f:76:fd:
89:7c:43:19:d0:31:d9:2b:b1:ea:14:61:cd:1b:f7:b9:5e:79:
48:d7:0a:5b:dd:f7:2a:1a:58:14:93:62:45:e4:d2:ff:ea:84:
d6:74:fc:8a:31:e3:38:29:0c:a5:1c:c3:b5:05:72:96:90:22:
13:04:83:e6:8f:c8:8f:bb:c1:cb:58:fb:eb:3b:61:9b:cc:b4:
23:63:ec:05:2e:54:4d:7d:bf:b6:bd:c2:44:1e:f6:35:55:4a:
2a:77:5a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 20:29:59 2026 by rpki-client