Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
File: 0DjDOLEo-Drewvadk8MsU1PKA5g.mft (raw, json)
Hash identifier: kjUsspASgPlHW0X/xBro86F9C1MZDnBllL4Z9lXu2+o=
Subject key identifier: F3:5C:09:DC:9A:7D:C8:FB:66:76:75:3F:7A:20:D0:E7:0F:2B:2B:68
Authority key identifier: D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
Certificate issuer: /CN=d038c338b128f83adec2f69d93c32c5353ca0398
Certificate serial: 01A1DA265FDC2CEAC7D5EDEE098E6DDBE2AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
Manifest number: 1793
Signing time: Sat 14 Nov 2026 13:01:50 +0000
Manifest this update: Sat 14 Nov 2026 13:01:50 +0000
Manifest next update: Sun 15 Nov 2026 13:01:50 +0000
Files and hashes: 1: 0DjDOLEo-Drewvadk8MsU1PKA5g.crl (hash: gct4CV5ODIz/U/7vuLqtm+TaSt7+Nry5OnDfNV1vLNk=)
2: iYtloRWl9kFypd8JJUfmPgfj4cA.roa (hash: S73CmXUZ6HVY4mwA83JVTETkq549rHQpfRMzqNjQiJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 13:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:26:5f:dc:2c:ea:c7:d5:ed:ee:09:8e:6d:db:e2:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d038c338b128f83adec2f69d93c32c5353ca0398
Validity
Not Before: Nov 14 13:01:50 2026 GMT
Not After : Nov 15 13:01:50 2026 GMT
Subject: CN=f35c09dc9a7dc8fb6676753f7a20d0e70f2b2b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:84:60:bf:ea:c4:59:6b:2c:c4:2f:84:64:98:
6b:9f:f3:40:9a:c4:8d:40:fb:3b:9d:d2:b2:ce:ab:
a6:c9:cd:8a:f5:43:91:8d:46:80:44:04:11:41:90:
46:6c:93:90:72:25:44:30:46:e7:a9:61:d3:28:d5:
33:44:53:2c:d7:69:af:de:bb:1a:ab:64:15:24:97:
de:b1:3a:2b:33:78:36:31:fc:98:87:2c:84:bb:24:
93:61:2d:da:72:06:7c:88:2b:c0:7c:99:dc:f4:7c:
a1:6c:f1:15:c7:10:2c:89:b3:58:d8:0b:2d:85:f5:
0a:7d:e4:fe:89:d7:90:8d:58:96:11:65:0d:41:1b:
0b:47:5d:a9:ae:f2:a4:b8:2b:93:fa:27:7e:70:13:
1b:75:e9:b7:fb:9a:1b:e4:34:d5:a2:99:b3:37:dd:
48:70:e6:e5:c9:e8:e6:95:ec:97:91:14:86:63:48:
f3:6a:99:e9:66:2d:cb:da:82:1c:e2:ed:bf:b9:50:
d3:0e:c0:22:d2:31:95:4e:6f:bb:f8:bf:ac:33:be:
cc:f3:ae:0c:6b:50:b8:0a:22:6d:51:ba:2c:98:90:
b6:7a:1e:bb:29:3b:94:53:d7:1a:3b:c8:33:82:82:
3f:eb:4d:8b:a4:5e:9f:40:78:d5:2a:d8:3d:48:3f:
9a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5C:09:DC:9A:7D:C8:FB:66:76:75:3F:7A:20:D0:E7:0F:2B:2B:68
X509v3 Authority Key Identifier:
keyid:D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:78:81:2d:3f:1e:3e:12:93:10:a3:fd:36:9e:08:e0:07:f8:
55:ad:08:d5:83:bb:3d:a9:04:5e:f9:7b:0b:bc:d3:b0:d4:97:
20:33:cc:ce:87:f4:83:ff:b3:73:4a:be:3c:a0:0a:f5:05:d1:
a2:ea:fc:a5:8a:b1:1a:23:77:78:d9:8f:6b:d9:31:10:72:94:
23:84:e6:b0:ed:41:1b:6a:6c:37:4f:df:6a:f6:c5:39:33:1f:
93:62:31:f1:cf:b0:b9:de:28:1d:40:7c:cf:19:42:69:d8:1f:
7c:9b:a4:aa:b9:78:3b:f2:5d:1b:1f:84:7e:18:9c:c5:f3:23:
04:02:13:65:92:9c:31:dc:7c:6e:22:02:88:8e:0f:67:44:c7:
93:4e:25:78:a0:03:dd:41:6b:8e:64:e3:b4:d7:be:53:38:6e:
75:9f:25:7d:cb:c2:89:ee:51:2b:c9:14:00:8a:87:ff:6a:18:
4d:8e:84:1c:2b:97:ca:53:4b:2b:eb:37:90:49:55:6b:cd:c4:
a5:b6:de:8b:94:ac:e9:ca:d6:50:b8:4b:9d:1c:b7:af:c7:2c:
91:93:77:54:66:79:e1:4d:06:3b:9c:5b:07:fc:68:3c:e4:f3:
09:a7:33:f3:47:c6:e5:e8:06:9d:d7:18:bc:18:65:a7:ca:e4:
69:67:92:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:32:00 2026 by rpki-client