Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
File: 0nuHf4mTQSab7GfG46CoiLp66Y0.mft (raw, json)
Hash identifier: 6j4p8meTo9+Z54JCCkKA23Y28jBbz2p0WO4jeOwFABg=
Subject key identifier: 38:93:51:57:C5:02:32:F9:26:24:2F:6F:82:0A:8A:7E:E7:4B:44:18
Authority key identifier: D2:7B:87:7F:89:93:41:26:9B:EC:67:C6:E3:A0:A8:88:BA:7A:E9:8D
Certificate issuer: /CN=d27b877f899341269bec67c6e3a0a888ba7ae98d
Certificate serial: 01A0D83B9E79427454EED57939605CF6E0EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
Manifest number: 0E75
Signing time: Fri 25 Sep 2026 11:03:00 +0000
Manifest this update: Fri 25 Sep 2026 11:03:00 +0000
Manifest next update: Sat 26 Sep 2026 11:03:00 +0000
Files and hashes: 1: 0nuHf4mTQSab7GfG46CoiLp66Y0.crl (hash: i4n9Q1jKuOToizudUzxqYK+urEioW+o45VgkRB00b+8=)
2: ESKSicApbc_Lc7K1oxfrHyvWB2A.roa (hash: 9hp563pGKax4wS0ioE86wmQq8LK8c0yOcQLKfH9tKgk=)
3: GzzDQC3ubi3zt1X18DBGioGRdBc.roa (hash: D/wNKKfIUY9J0S4B/WgJwAFtRjUwUsHpDQtQvyp4Lvk=)
4: a8xxFezDGCmHsEOSRqb1XFyjzzQ.roa (hash: UKvCG+Ut498aH2KrK/T04+U4clxpUw2ygew8dg+YGZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 11:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3b:9e:79:42:74:54:ee:d5:79:39:60:5c:f6:e0:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d27b877f899341269bec67c6e3a0a888ba7ae98d
Validity
Not Before: Sep 25 11:03:00 2026 GMT
Not After : Sep 26 11:03:00 2026 GMT
Subject: CN=38935157c50232f926242f6f820a8a7ee74b4418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2e:c6:0c:bf:f7:96:d2:f4:2d:7b:fe:91:ce:
7c:f1:58:09:ac:12:6a:c2:d6:bc:39:96:e2:7a:0e:
b4:a0:80:2e:3d:e6:ad:46:26:75:e2:93:ab:a8:27:
3f:b7:72:64:97:93:33:0e:06:6e:f4:0d:c4:2b:80:
b1:d3:b3:83:a0:c1:1b:ec:30:df:f1:7f:99:24:4e:
64:53:ac:10:aa:5b:ef:94:41:44:16:a8:01:ad:6e:
26:e9:72:c5:2c:83:2f:ed:f9:fe:2a:58:3e:49:6f:
a3:3d:8b:b1:b5:f6:2c:c6:ad:74:18:b7:51:c6:bf:
51:63:66:c7:5c:99:70:81:b6:1b:1b:4a:6a:e5:e4:
db:60:32:46:cb:78:c4:2e:c1:30:3d:e6:49:60:31:
07:17:ec:0a:40:4e:68:d4:82:bb:e4:c8:b8:f0:28:
3d:11:00:cc:d6:fa:f2:ba:3e:21:e7:dd:b2:0c:b3:
25:29:69:a4:d3:2f:97:85:59:1f:2f:52:9a:ed:02:
2a:3a:45:19:cb:1d:9d:ac:3d:b6:8d:4b:0f:04:1f:
43:15:6a:d4:9b:ca:29:17:22:64:61:72:47:c4:b6:
1d:0e:dd:93:fb:49:44:89:93:ee:90:d5:67:a7:63:
22:19:a8:0b:6d:e6:2c:6d:3b:aa:72:e4:28:e7:fe:
30:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:93:51:57:C5:02:32:F9:26:24:2F:6F:82:0A:8A:7E:E7:4B:44:18
X509v3 Authority Key Identifier:
keyid:D2:7B:87:7F:89:93:41:26:9B:EC:67:C6:E3:A0:A8:88:BA:7A:E9:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:1d:4a:57:24:46:c4:51:1b:5d:e7:7a:7c:7e:7d:a7:cb:33:
55:62:cf:c0:3d:ef:1c:c4:c2:61:6e:43:df:4f:a6:a1:6e:30:
4a:5e:57:99:9e:20:55:6f:4a:50:a2:11:47:2a:59:10:ca:9c:
6c:8b:80:bb:37:61:36:78:9a:d6:cb:f9:eb:f3:e5:11:b7:e7:
eb:f2:ee:92:f7:fd:91:b7:d2:08:0f:be:22:44:48:ce:ac:77:
51:36:77:ca:0f:f6:63:3a:83:8f:b1:5e:5d:f3:c1:76:7f:88:
d1:13:2e:31:78:64:39:f9:74:50:84:3c:d3:e9:ab:eb:03:0e:
08:09:0a:7a:6a:67:21:78:15:24:59:e9:b2:4b:55:cd:e1:e2:
ca:47:5d:eb:9a:a7:44:02:19:47:68:94:dc:75:55:bf:ce:71:
c3:4b:81:35:2e:b3:f5:ba:1a:ec:5d:4e:e4:f8:44:d1:c1:31:
5a:19:c2:40:b3:a5:fa:f5:69:fc:3d:17:6a:ea:1e:77:07:a9:
28:a3:c8:ca:bc:cc:9b:c1:46:da:2c:66:95:03:cd:b1:36:d2:
34:d4:af:83:af:29:b4:52:ba:29:03:c6:b1:50:ee:26:26:74:
84:3f:fd:8f:92:9d:37:3e:93:fb:d9:03:0a:2c:49:3a:e7:09:
cd:37:12:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:27:54 2026 by rpki-client