Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
File: 0DjDOLEo-Drewvadk8MsU1PKA5g.mft (raw, json)
Hash identifier: o2yy/zoBKw54PSoWjWA4d750IK4BIXZ7R1cu/sgYvNU=
Subject key identifier: 87:95:D6:F7:58:63:E6:41:50:3C:F2:E9:65:93:45:B7:34:D0:C3:C2
Authority key identifier: D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
Certificate issuer: /CN=d038c338b128f83adec2f69d93c32c5353ca0398
Certificate serial: 01A0BE433DCB6784F23DAC49F3442802EDFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
Manifest number: 1700
Signing time: Sun 20 Sep 2026 10:01:12 +0000
Manifest this update: Sun 20 Sep 2026 10:01:12 +0000
Manifest next update: Mon 21 Sep 2026 10:01:12 +0000
Files and hashes: 1: 0DjDOLEo-Drewvadk8MsU1PKA5g.crl (hash: g3YsHgb1imKizvpGeP6MCPNeOxeNRcivvQIz6zJiabY=)
2: iYtloRWl9kFypd8JJUfmPgfj4cA.roa (hash: S73CmXUZ6HVY4mwA83JVTETkq549rHQpfRMzqNjQiJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:43:3d:cb:67:84:f2:3d:ac:49:f3:44:28:02:ed:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d038c338b128f83adec2f69d93c32c5353ca0398
Validity
Not Before: Sep 20 10:01:12 2026 GMT
Not After : Sep 21 10:01:12 2026 GMT
Subject: CN=8795d6f75863e641503cf2e9659345b734d0c3c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ba:31:63:5d:98:20:a5:26:2d:0d:8e:3b:68:
03:55:48:20:fb:3d:52:6e:ce:66:63:58:31:f3:f0:
da:05:95:6d:e5:95:90:58:ad:c3:b0:57:cf:62:6c:
da:35:83:0d:d5:e8:38:a8:02:67:85:3d:c5:f1:3d:
2b:60:e4:73:3e:88:44:eb:84:a6:17:7f:4f:24:40:
70:d9:ef:ae:57:9a:74:52:ab:19:1e:ed:61:d2:e4:
37:31:11:b7:8d:f1:af:e9:5e:92:bb:99:e8:45:b7:
ff:1b:2b:31:f2:b2:08:53:81:ab:0e:2a:64:6b:3d:
d9:45:f0:53:be:6d:a0:2e:61:52:62:fa:db:ed:bf:
6d:59:1e:61:33:b2:44:1b:bb:38:d4:71:ed:bb:82:
58:b7:20:97:d9:da:9b:cf:6e:57:bf:89:95:10:8e:
08:eb:a7:36:03:e4:19:71:c8:49:00:fc:d9:a4:82:
af:19:40:6d:08:39:4d:83:a7:cf:c4:d8:6f:4e:d4:
b9:9b:73:0f:31:35:b1:a7:f9:cc:17:14:ab:a1:8b:
0d:66:cd:0e:d0:53:65:7f:0b:46:66:5d:54:4b:b4:
8d:94:53:b3:09:6c:bc:7f:f1:55:34:29:ea:1f:e7:
f8:41:24:2b:8d:69:74:a0:f6:21:2f:f0:9c:c1:2b:
bf:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:95:D6:F7:58:63:E6:41:50:3C:F2:E9:65:93:45:B7:34:D0:C3:C2
X509v3 Authority Key Identifier:
keyid:D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:1e:3d:6e:75:d5:03:c3:7c:ca:db:cf:26:e0:ac:26:fa:2d:
29:92:a1:23:74:3b:39:a3:69:3c:35:f1:09:d4:03:68:32:b8:
86:f8:9a:43:35:7f:ab:ce:23:95:ea:64:b5:7d:b8:6b:68:c3:
8a:37:79:a4:24:c0:6c:fe:4d:df:16:e6:23:52:61:65:fc:9c:
f8:84:3a:08:54:a8:30:88:22:84:cf:8b:8d:1d:78:b2:02:2f:
05:36:18:8b:43:73:1d:fa:0f:2f:91:c2:a2:55:cd:ab:21:fe:
05:7a:07:63:f8:07:55:37:81:01:04:3c:ec:0a:33:1f:df:4b:
e5:94:84:51:12:09:3b:47:a1:d4:71:9b:a2:43:a3:3a:a8:2f:
b3:9c:32:3f:3f:33:32:ce:63:81:cd:13:84:50:42:27:2f:87:
9d:8f:0f:d2:55:af:d6:65:f1:1c:49:11:28:29:f4:89:d8:9d:
48:58:19:3a:d8:e4:05:a0:12:a5:d1:a8:89:ef:90:ca:5e:77:
86:3b:27:67:e6:07:78:1d:97:d0:1e:5b:b8:52:66:ef:86:04:
fb:18:eb:25:9b:4b:07:f9:ad:5a:b7:bf:11:e4:20:cc:7f:52:
a0:0c:89:b4:d8:ec:d9:23:d6:05:70:96:c0:e8:07:c4:55:cc:
57:17:fc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:45:03 2026 by rpki-client