Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
File: 0luQuJgbWR11p-k14TBKdAdWAv0.mft (raw, json)
Hash identifier: GmRkro9oxszyMxCkmXajSZhBW1y7u8udV5E/pwN6JTE=
Subject key identifier: 3F:49:BD:0D:A0:FA:5E:8C:65:FE:90:A4:41:5F:B9:BE:8F:EE:B9:9F
Authority key identifier: D2:5B:90:B8:98:1B:59:1D:75:A7:E9:35:E1:30:4A:74:07:56:02:FD
Certificate issuer: /CN=d25b90b8981b591d75a7e935e1304a74075602fd
Certificate serial: 01A0D0ED8315958AA7DC2468EA496303BAEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
Manifest number: 1946
Signing time: Thu 24 Sep 2026 01:00:21 +0000
Manifest this update: Thu 24 Sep 2026 01:00:21 +0000
Manifest next update: Fri 25 Sep 2026 01:00:21 +0000
Files and hashes: 1: 0luQuJgbWR11p-k14TBKdAdWAv0.crl (hash: hACbSrg9s/DcuOCxtTOrBmQzZEb01EV9g+Xn0RolYqA=)
2: PzBJvCvuKoLcfTByzdz7KrKT9g0.roa (hash: 3oZ6E/qyPFCkNxJX9IOFDQ5m/aqdqH2CkJ/hq3ptHGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:83:15:95:8a:a7:dc:24:68:ea:49:63:03:ba:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25b90b8981b591d75a7e935e1304a74075602fd
Validity
Not Before: Sep 24 01:00:21 2026 GMT
Not After : Sep 25 01:00:21 2026 GMT
Subject: CN=3f49bd0da0fa5e8c65fe90a4415fb9be8feeb99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d1:ce:ac:02:1d:bd:a9:b0:d8:2c:98:f4:9e:
1a:8c:19:cc:85:d2:0b:80:11:3e:b4:ee:15:3c:7a:
8d:e3:ab:e4:a7:21:b2:f2:4e:c4:98:d8:de:e3:bb:
c6:96:22:0e:62:16:17:00:79:4c:89:9d:5f:c5:b6:
00:80:9b:ff:15:3b:c2:fd:2e:c1:6c:35:c5:2b:24:
31:1b:5b:69:7b:bd:f6:81:ac:8e:e9:6d:3b:81:25:
06:9d:92:1e:2c:69:05:fd:60:f5:2a:5e:cd:14:99:
5c:89:ac:be:02:90:ba:be:10:b9:bb:8a:7a:18:d7:
03:d7:dc:8e:fc:8f:d3:6b:c9:87:be:6d:86:1b:46:
a1:74:9a:7e:bb:df:3f:62:8a:b3:f7:d2:1b:33:fd:
48:db:1f:bc:ba:73:19:80:6c:a5:01:da:f2:cd:bc:
7c:78:71:ea:9d:6c:65:ea:0e:a2:f1:e4:0e:47:5b:
f9:e1:c3:cd:33:42:f1:34:ec:7f:5b:d7:69:d8:b6:
08:41:d0:c5:24:48:35:a4:99:23:d1:a1:1f:01:19:
bd:45:5f:21:35:15:e4:c7:1e:93:96:03:bf:1a:43:
fc:b5:23:83:b7:10:ba:83:8c:e4:ca:d7:15:5e:fb:
c9:49:ab:2f:34:d6:0e:2f:db:bb:b7:ee:7e:dd:97:
1f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:49:BD:0D:A0:FA:5E:8C:65:FE:90:A4:41:5F:B9:BE:8F:EE:B9:9F
X509v3 Authority Key Identifier:
keyid:D2:5B:90:B8:98:1B:59:1D:75:A7:E9:35:E1:30:4A:74:07:56:02:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ec:60:a4:dd:e8:33:58:25:07:7a:b7:5d:62:d4:b9:04:af:
22:ec:16:94:a6:dd:a0:d9:85:07:81:da:15:eb:ae:72:d2:b0:
4d:d7:c8:f8:0b:6e:6d:df:e0:62:85:33:ba:57:a3:d7:b8:95:
c7:21:67:9c:41:40:dc:46:8a:85:48:cb:f4:6e:49:92:a6:09:
90:11:de:1b:3b:a2:c4:98:7e:8f:39:9a:8a:57:ef:90:98:97:
80:ac:19:39:f1:d2:0e:9a:1f:84:7e:e8:08:89:21:ec:f2:57:
e7:00:d3:0c:4c:0e:73:48:3f:fd:1b:17:08:c0:3d:a9:4a:60:
20:e9:d0:61:8e:72:3a:37:e5:68:30:c0:47:4e:51:e1:8a:4c:
c1:3e:e7:71:0a:1a:b3:4d:73:76:3b:a5:f1:6c:da:68:eb:fb:
01:5c:27:99:b5:b5:8a:d8:46:bd:91:ab:e5:ce:78:a1:b1:90:
9e:c0:7c:2b:03:84:dd:94:1c:e4:2d:f2:33:86:6e:c4:ef:dc:
a0:e7:1e:99:29:49:62:a1:c0:54:d1:c3:00:55:e1:f8:18:01:
b4:96:a9:12:e6:d6:84:28:9d:66:dd:d1:b3:67:f8:5c:18:59:
4d:9c:f1:47:37:b4:ff:66:d5:6c:85:37:04:8a:d5:69:00:da:
d5:6e:2c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:10:26 2026 by rpki-client