Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
File: 0vHIhC58-JGyNNOh4OLg73PoQqo.mft (raw, json)
Hash identifier: mPu40J58Um3b1/naIoKpfeG9DIVti1uq9lDtH8+ReOU=
Subject key identifier: FE:C9:8C:F1:4A:BC:6C:05:9F:0E:A5:3B:7D:AE:58:E7:73:19:F9:7B
Authority key identifier: D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
Certificate issuer: /CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Certificate serial: 01A0C6A0FFA085B5CCCA94694374DDFBCF21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
Manifest number: 1A69
Signing time: Tue 22 Sep 2026 01:00:35 +0000
Manifest this update: Tue 22 Sep 2026 01:00:35 +0000
Manifest next update: Wed 23 Sep 2026 01:00:35 +0000
Files and hashes: 1: 0vHIhC58-JGyNNOh4OLg73PoQqo.crl (hash: 5ioe+bbb5Yao0PXOKTMoueO6L8+vA4k1YPD53MryvAU=)
2: l9fT_tPQilc8kDDpXdmC63EbBTU.roa (hash: e0hhcAS9+zmOEL/7aF5yJ1rOw5m87GlUo2fUEzHI/tc=)
3: zZqdbpX91TjBbrVKBU--OsfsNgs.roa (hash: 5bqwY0fuE7qADoXdmI9CeMVMqqLQteAK+rBOtRg2eMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 01:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a0:ff:a0:85:b5:cc:ca:94:69:43:74:dd:fb:cf:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Validity
Not Before: Sep 22 01:00:35 2026 GMT
Not After : Sep 23 01:00:35 2026 GMT
Subject: CN=fec98cf14abc6c059f0ea53b7dae58e77319f97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:84:16:b9:e0:26:19:58:92:41:4b:53:61:c7:
df:89:58:62:34:10:fd:6b:9c:de:af:5a:3e:e4:4b:
04:ec:e0:fa:dd:ef:37:74:51:45:b0:48:bb:bb:cb:
09:ab:4b:03:17:6a:9b:45:e2:ec:4c:77:82:e2:5d:
c0:2d:1f:f0:75:48:70:39:c6:e5:ce:79:41:83:3b:
65:60:81:a4:8c:9f:c1:44:1f:f2:df:be:2a:f4:ee:
1a:d4:6b:e4:5b:df:62:a1:8d:97:df:3e:9d:04:4a:
42:33:30:0b:d6:43:55:72:78:c5:c0:a7:f5:54:59:
59:49:16:69:69:2c:f6:87:3c:c0:dd:b5:76:ed:a6:
37:7b:85:6d:10:46:26:f7:ba:4f:4d:14:34:42:57:
f1:dd:77:6f:aa:78:b8:b0:db:10:c6:90:a5:0f:14:
3f:6f:18:66:60:9c:49:8f:e0:b3:ac:ea:2c:b6:e9:
e8:46:30:01:ab:db:56:44:12:ca:a3:cf:21:f0:f9:
3c:e2:e5:a5:e1:43:61:4d:c2:2e:e0:b2:13:ea:94:
f1:eb:9b:c1:84:9b:1b:b8:e6:73:90:84:25:c2:28:
0e:a7:84:61:bf:69:ab:7e:44:60:8e:63:04:24:e5:
21:2b:3a:4d:ac:51:a4:60:ea:a6:d7:3d:e3:0a:ca:
7d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C9:8C:F1:4A:BC:6C:05:9F:0E:A5:3B:7D:AE:58:E7:73:19:F9:7B
X509v3 Authority Key Identifier:
keyid:D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:29:26:a0:6f:c8:22:ce:3f:28:27:1c:45:45:1d:76:f4:34:
17:21:0a:1e:6f:b0:45:7a:8d:39:81:58:52:eb:69:8e:16:a4:
6f:7a:c9:24:28:6c:a2:74:86:a8:aa:da:f3:ea:22:fa:49:71:
a9:5b:9e:8c:ce:de:a2:52:5b:f2:74:ee:2e:47:24:41:9f:89:
3a:24:d4:58:f6:11:8d:4f:ed:a8:12:30:b5:45:b2:90:ea:28:
b4:02:21:fd:80:60:b5:73:77:43:66:7f:5f:14:53:5f:cf:11:
5b:8c:af:f0:4a:18:31:d5:ad:c2:71:fe:41:0d:5d:9b:13:d6:
8d:3c:d3:46:1b:9f:d4:22:0e:8e:fe:eb:d1:c7:f3:d0:25:33:
2b:d2:12:22:8c:85:94:70:41:c2:50:ad:7f:da:64:98:26:d0:
ab:59:10:b1:fa:1a:ed:78:ad:0e:09:d8:f7:73:e6:d1:2c:1e:
c1:3c:df:fa:63:58:a7:04:f2:64:21:80:c1:3e:41:a3:1a:01:
ac:68:26:7a:0f:79:fd:0c:51:2e:ae:83:bd:ad:3a:95:32:3b:
75:68:20:fd:fe:e3:18:a0:9c:e7:43:97:4c:2d:64:f3:41:bc:
38:7e:1b:c2:5a:6a:bf:51:4a:f7:e0:4a:34:92:f7:5d:e2:95:
c8:4e:4e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:12:13 2026 by rpki-client