Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/0tMrwiV6rw7QfQB1wbXq1ebOVVQ.mft
File: 0tMrwiV6rw7QfQB1wbXq1ebOVVQ.mft (raw, json)
Hash identifier: VK+AJy0+NtqNWWJy1v51iZ2RvejOUmY4cDcZTo3X8kQ=
Subject key identifier: 5C:4F:3B:79:3E:36:CE:60:AF:9E:1E:7F:1C:10:2A:E9:E5:6C:64:9A
Authority key identifier: D2:D3:2B:C2:25:7A:AF:0E:D0:7D:00:75:C1:B5:EA:D5:E6:CE:55:54
Certificate issuer: /CN=d2d32bc2257aaf0ed07d0075c1b5ead5e6ce5554
Certificate serial: 01A0D012F23A838B37387327856FC0716CA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0tMrwiV6rw7QfQB1wbXq1ebOVVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/0tMrwiV6rw7QfQB1wbXq1ebOVVQ.mft
Manifest number: E5
Signing time: Wed 23 Sep 2026 21:01:37 +0000
Manifest this update: Wed 23 Sep 2026 21:01:37 +0000
Manifest next update: Thu 24 Sep 2026 21:01:37 +0000
Files and hashes: 1: 0tMrwiV6rw7QfQB1wbXq1ebOVVQ.crl (hash: MIGXnftFsQT0nmECGwAlZeP77Roc74QLzVcV4zasZxg=)
2: ZBd-GAKowL0zojpkwKhaKC0AJLs.roa (hash: 4hNkeQn4ketgwaQRZcw8b08WLgmlbMExEizGIfxY14s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/0tMrwiV6rw7QfQB1wbXq1ebOVVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/0tMrwiV6rw7QfQB1wbXq1ebOVVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0tMrwiV6rw7QfQB1wbXq1ebOVVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:f2:3a:83:8b:37:38:73:27:85:6f:c0:71:6c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2d32bc2257aaf0ed07d0075c1b5ead5e6ce5554
Validity
Not Before: Sep 23 21:01:37 2026 GMT
Not After : Sep 24 21:01:37 2026 GMT
Subject: CN=5c4f3b793e36ce60af9e1e7f1c102ae9e56c649a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8e:e7:dc:77:76:8a:db:db:fd:3f:e8:ff:a5:
ad:ea:a8:e1:c4:ec:aa:f7:ee:ed:d2:8d:be:3b:a4:
06:6b:ed:06:c3:e2:18:5b:a7:a1:b9:b6:49:0a:8d:
b2:a2:e6:45:1f:86:13:7d:66:5d:8c:0b:bd:01:4a:
00:71:16:e2:b7:05:16:a4:03:51:b3:e9:90:8b:e3:
1e:6e:4b:c2:e4:03:00:f2:88:08:d3:71:e4:02:c1:
12:ff:0d:f2:cf:6a:d4:22:ce:f1:0a:20:68:dd:d6:
64:30:0b:69:bc:3c:34:3c:9d:40:6a:04:60:bb:29:
04:7c:e6:65:08:de:77:d7:82:73:62:45:7f:fd:5d:
3e:29:a8:2e:1d:ad:97:ae:9e:40:1b:d0:35:f3:55:
0c:23:07:4b:fa:4d:1b:8d:2a:0a:42:51:21:93:e6:
52:f8:91:15:62:be:52:d7:71:b4:9b:61:e8:e6:25:
7a:f4:b0:c5:63:58:37:14:27:cf:90:24:c5:26:57:
23:e1:e8:29:d6:0e:32:0b:f5:e7:bf:ad:41:03:24:
02:a7:16:6e:d5:f3:ff:46:9a:79:86:72:4f:ea:9b:
7a:5e:20:14:dd:65:c8:f9:31:62:63:22:a1:55:45:
e0:07:e8:44:03:dd:52:6f:07:33:4c:1e:6a:25:71:
9d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4F:3B:79:3E:36:CE:60:AF:9E:1E:7F:1C:10:2A:E9:E5:6C:64:9A
X509v3 Authority Key Identifier:
keyid:D2:D3:2B:C2:25:7A:AF:0E:D0:7D:00:75:C1:B5:EA:D5:E6:CE:55:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tMrwiV6rw7QfQB1wbXq1ebOVVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/0tMrwiV6rw7QfQB1wbXq1ebOVVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/0tMrwiV6rw7QfQB1wbXq1ebOVVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:4a:87:f9:ad:a8:b3:01:db:d5:1f:d5:a5:44:73:f1:b0:c8:
a3:1c:da:09:39:37:ec:0f:d1:d7:84:17:fb:1d:9c:7b:5f:56:
22:0e:68:0b:ba:b3:80:f6:c8:3f:74:0d:48:71:94:65:3e:ee:
c0:c7:de:4b:28:ae:40:27:0f:0b:7a:52:93:7c:68:c9:e4:17:
fe:90:c3:50:54:de:c3:cd:ea:9a:44:c1:69:16:b7:42:00:c0:
f1:6d:c1:9c:54:49:d6:ad:6b:52:d2:93:a9:c1:af:df:d0:f7:
bd:a9:77:c0:2e:73:ab:71:d2:0d:a8:ef:16:4d:a2:57:32:71:
2f:fd:12:41:ac:b2:7c:fa:5c:a5:4e:9c:07:16:80:a3:ba:b9:
f6:3d:dc:44:98:5b:d7:63:ea:02:3c:fb:1c:1f:07:e5:45:f5:
c5:4b:f3:12:18:c8:40:d6:32:48:17:fa:0b:b5:2d:89:c0:cf:
a8:01:f6:79:97:a2:53:54:60:0f:5c:5d:38:0f:03:a6:00:6a:
c0:65:52:59:4a:f1:a4:15:0e:9c:53:6c:b3:e7:9b:69:37:51:
cb:2d:4d:ea:7f:e8:8a:76:9c:c6:cb:63:e0:4a:b7:9d:9d:46:
d3:de:b6:41:5f:e0:37:6c:d8:ab:ab:cd:d5:0d:e9:6f:d4:f5:
33:e7:16:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:09:06 2026 by rpki-client