Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
File: 0gsI5gdmjgYFAITuN5KKHAsDVJI.mft (raw, json)
Hash identifier: Qzj4ETmfp98yL4KJlaRfYVSvluyMpVHtijRF6jiR2kY=
Subject key identifier: 75:CD:9F:51:43:FC:E3:BF:1E:8F:96:17:54:FB:2D:3F:84:36:D9:6E
Authority key identifier: D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
Certificate issuer: /CN=d20b08e607668e06050084ee37928a1c0b035492
Certificate serial: 01A0DA961F46488DFEA84EDE165C2B76EB3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
Manifest number: 07A0
Signing time: Fri 25 Sep 2026 22:01:06 +0000
Manifest this update: Fri 25 Sep 2026 22:01:06 +0000
Manifest next update: Sat 26 Sep 2026 22:01:06 +0000
Files and hashes: 1: 0gsI5gdmjgYFAITuN5KKHAsDVJI.crl (hash: J7Dr+eWYopUCOCTr2aB0anoOeFDENg6lCFBABlb99Lk=)
2: Gm-t-lh2E0gK3CSrIU-gJkije_Q.roa (hash: Ono4+T4YpgzQm0xFxMzJXZM1mWa8sfDRC5aPTIXlCxg=)
3: HOPT3iuIJW2Ca5RKaQZ_7H8DEUg.roa (hash: Z7lWxJ3V5i6LgJFHNccxxl1xQSA36VYmA9LTVT4CQFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:1f:46:48:8d:fe:a8:4e:de:16:5c:2b:76:eb:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d20b08e607668e06050084ee37928a1c0b035492
Validity
Not Before: Sep 25 22:01:06 2026 GMT
Not After : Sep 26 22:01:06 2026 GMT
Subject: CN=75cd9f5143fce3bf1e8f961754fb2d3f8436d96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:da:34:87:87:ac:d5:c5:cb:15:5d:6f:a0:2d:
83:cb:f3:89:97:60:93:e4:ba:57:8f:fa:d0:62:49:
36:66:ac:6a:d4:f3:68:a8:77:27:37:39:e0:84:d6:
4a:f4:d5:68:30:1e:5d:9f:de:98:6d:b4:42:ea:f1:
a9:ec:f3:4f:69:aa:a1:17:95:dd:c2:76:86:13:a0:
3a:50:20:4c:6b:52:70:74:cc:c1:9d:a8:23:a5:06:
3f:1e:3c:8d:85:92:b9:e1:e7:86:82:a1:61:ac:09:
40:66:99:8d:93:50:90:7e:d9:e7:c0:ec:73:ce:03:
a1:53:1b:90:1b:7a:42:6e:9f:a4:63:ea:3a:48:2b:
96:cb:4d:da:f6:01:11:8c:d6:e9:70:42:3c:ef:fe:
7e:ad:3c:5c:a8:bc:bf:cb:6f:ec:62:bc:61:b2:e8:
5f:a7:61:9c:8e:ee:a3:9d:cc:0c:98:70:95:ec:73:
8f:b0:d3:bc:1c:6b:e5:83:6c:af:74:eb:9b:43:4f:
5b:5d:75:c5:71:73:6d:3a:e3:84:67:32:bc:71:a4:
46:9f:ff:b5:82:ec:b3:60:87:82:f3:25:36:68:a8:
60:68:32:cf:bf:93:24:c3:99:8d:44:b2:38:4f:3d:
17:c6:00:0d:b7:19:26:dd:d9:c0:ff:00:bd:cb:ec:
c1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CD:9F:51:43:FC:E3:BF:1E:8F:96:17:54:FB:2D:3F:84:36:D9:6E
X509v3 Authority Key Identifier:
keyid:D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:4e:9b:e0:e4:c2:f7:2e:06:4b:56:a9:32:a6:a9:80:55:00:
3f:23:c3:5e:9d:9f:36:70:3b:1d:fd:01:d5:dd:fb:a1:03:cb:
05:81:aa:f1:ab:2b:da:e2:22:8f:22:a8:04:9f:45:98:80:a0:
47:26:d7:d2:c0:4f:61:b4:0c:83:f4:c6:22:cb:87:12:06:89:
9f:80:39:28:f9:aa:48:11:20:50:96:c8:6f:e4:62:20:58:3b:
d6:7b:0d:7f:be:61:56:8b:17:82:2f:48:27:96:53:27:55:bc:
32:65:be:f1:9e:8e:7f:aa:81:15:15:07:14:91:fa:ad:5e:80:
4c:ec:fb:6b:ef:6f:a5:9a:66:4a:fc:fe:c2:be:ae:49:de:49:
88:22:5d:a4:05:e7:19:cd:7f:e7:91:19:d6:31:b5:e6:3b:72:
10:ec:cd:e9:1a:ef:ca:3a:e5:7e:1c:32:7c:cd:76:58:14:59:
3f:fb:d8:7d:a8:d9:23:81:07:d6:2b:47:84:66:b6:06:12:ce:
c5:a4:6e:69:77:a1:18:20:86:ba:45:74:32:88:ab:00:98:a7:
e6:63:99:c2:3e:35:75:d4:99:48:f7:8f:5e:c1:13:41:26:18:
16:4b:38:1b:30:3f:1f:83:cf:7c:84:97:f2:23:dd:2f:64:07:
d3:e2:f3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:29:44 2026 by rpki-client