Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/8de040-b1af-4d25-8913-4ff919c8530e/1/0thfVZ1q_T99ZB1ZoL-dRAO2gAk.mft
File: 0thfVZ1q_T99ZB1ZoL-dRAO2gAk.mft (raw, json)
Hash identifier: mndP5AFmK/Swf4CRTAPkN1SOzqgCxr5mdS+uMseH77E=
Subject key identifier: B0:C4:66:93:FB:6C:26:18:C3:3A:08:5F:94:7C:C8:EC:C1:BD:B2:74
Authority key identifier: D2:D8:5F:55:9D:6A:FD:3F:7D:64:1D:59:A0:BF:9D:44:03:B6:80:09
Certificate issuer: /CN=d2d85f559d6afd3f7d641d59a0bf9d4403b68009
Certificate serial: 01A1CB1FF50F77E8CB9BF91200DABC2F196F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0thfVZ1q_T99ZB1ZoL-dRAO2gAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8de040-b1af-4d25-8913-4ff919c8530e/1/0thfVZ1q_T99ZB1ZoL-dRAO2gAk.mft
Manifest number: 9C
Signing time: Wed 11 Nov 2026 15:00:31 +0000
Manifest this update: Wed 11 Nov 2026 15:00:31 +0000
Manifest next update: Thu 12 Nov 2026 15:00:31 +0000
Files and hashes: 1: 0thfVZ1q_T99ZB1ZoL-dRAO2gAk.crl (hash: TUJJIws2KsFeStTh9R3TddMwTGJfMoLuVIZ24G1BNHw=)
2: MHgmAaHalMHKwpPJPQFgKqFWdjM.roa (hash: RClo5fDOGBqxAoQCa1Pl8X75q2Nvy7FYruNsUuh0Z+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8de040-b1af-4d25-8913-4ff919c8530e/1/0thfVZ1q_T99ZB1ZoL-dRAO2gAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8de040-b1af-4d25-8913-4ff919c8530e/1/0thfVZ1q_T99ZB1ZoL-dRAO2gAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0thfVZ1q_T99ZB1ZoL-dRAO2gAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 14:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cb:1f:f5:0f:77:e8:cb:9b:f9:12:00:da:bc:2f:19:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2d85f559d6afd3f7d641d59a0bf9d4403b68009
Validity
Not Before: Nov 11 15:00:31 2026 GMT
Not After : Nov 12 15:00:31 2026 GMT
Subject: CN=b0c46693fb6c2618c33a085f947cc8ecc1bdb274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:69:15:01:f6:05:be:ec:18:62:e5:36:be:ce:
2f:07:a8:a7:b1:b1:81:16:52:be:1f:ed:ec:c0:03:
83:f6:d3:58:f9:9f:11:e2:2d:5d:d9:cd:05:c4:75:
97:b5:d6:91:be:8a:c8:d2:b4:c4:08:7b:f7:dd:35:
91:69:76:33:fd:63:26:1e:26:57:0f:5d:07:75:b8:
c7:16:3a:1c:05:11:cf:7a:c3:fb:31:41:f3:83:cb:
6f:ab:79:a2:f2:aa:02:0e:fd:47:b4:e9:5b:8a:55:
fa:72:80:84:fc:d8:2f:65:1f:6b:e7:24:79:8f:56:
a0:b2:9e:d6:a6:9c:d8:7c:1f:52:c9:23:af:81:eb:
0d:50:b0:d9:12:5d:38:06:eb:44:60:b5:a1:47:9d:
7d:28:76:69:89:da:e7:15:f4:b8:c7:17:46:56:b6:
94:32:da:7a:c6:66:6a:51:c7:b6:94:be:32:20:dd:
cd:42:df:91:24:f4:98:27:22:af:63:33:9d:39:2b:
e2:9d:35:3c:f4:42:49:85:70:6d:6b:d4:c7:1a:73:
76:63:97:27:a4:6f:1a:aa:b0:55:14:2c:d3:70:74:
b0:9a:c0:19:0d:05:af:a9:93:65:1d:0f:18:ee:7b:
39:68:a8:96:a6:c3:c8:fd:8b:d7:b0:69:7b:65:05:
44:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C4:66:93:FB:6C:26:18:C3:3A:08:5F:94:7C:C8:EC:C1:BD:B2:74
X509v3 Authority Key Identifier:
keyid:D2:D8:5F:55:9D:6A:FD:3F:7D:64:1D:59:A0:BF:9D:44:03:B6:80:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0thfVZ1q_T99ZB1ZoL-dRAO2gAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8de040-b1af-4d25-8913-4ff919c8530e/1/0thfVZ1q_T99ZB1ZoL-dRAO2gAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8de040-b1af-4d25-8913-4ff919c8530e/1/0thfVZ1q_T99ZB1ZoL-dRAO2gAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:97:8b:cf:24:41:81:17:5c:8d:1f:c9:d7:06:d6:30:90:57:
ba:03:8a:57:6c:4e:cb:5e:5a:de:18:a4:3a:da:d0:d2:2e:0c:
92:53:0c:09:4d:ea:ef:7d:5d:1f:d0:f6:f5:ac:2e:c9:4d:14:
2e:98:e1:25:5d:03:23:dd:48:05:59:e0:49:f1:de:6d:ef:3d:
ba:d7:2f:ef:3e:09:a3:a8:3e:f4:f8:9c:71:e4:44:d1:cb:43:
f4:8c:e0:5b:e1:29:a5:d0:a2:87:e8:7a:93:cb:c3:2e:fe:ed:
c2:68:1e:e9:17:10:63:6d:02:b5:4a:f2:3a:d4:f8:61:a2:1b:
ca:2f:25:4b:a4:87:ed:d3:ba:99:04:d7:0c:b4:88:0a:d2:f7:
ef:07:78:d6:ba:29:a0:d5:2d:4d:42:de:44:38:87:1b:4f:ef:
bf:10:73:1b:86:a0:88:f7:86:f8:8e:e4:e4:32:da:e9:c3:a0:
a1:36:86:48:96:a1:5c:b5:b9:28:a3:47:18:44:e5:19:da:ae:
da:bc:83:50:11:5d:ca:6f:66:43:3c:7a:f3:17:38:1b:5f:90:
70:f8:e4:9f:31:bc:04:e0:32:3e:20:f2:ff:6f:3a:54:21:e3:
51:44:c0:39:9d:e6:29:b0:3b:9b:83:80:0d:6a:61:d2:62:b2:
f3:a1:3e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 20:15:21 2026 by rpki-client