Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.mft
File: 01VdufbNy92wUqRTSO8Nam1bwcE.mft (raw, json)
Hash identifier: jfoBvK5z+46IeKwcGqoSbljypXAEtlwRy5db+OXiX6g=
Subject key identifier: 46:34:A1:34:14:2E:B0:57:E7:63:D5:17:1C:2D:4D:54:F9:40:25:62
Authority key identifier: D3:55:5D:B9:F6:CD:CB:DD:B0:52:A4:53:48:EF:0D:6A:6D:5B:C1:C1
Certificate issuer: /CN=d3555db9f6cdcbddb052a45348ef0d6a6d5bc1c1
Certificate serial: 01A0C28D729D1C0C8F9015538590F7B315B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01VdufbNy92wUqRTSO8Nam1bwcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.mft
Manifest number: 01BC
Signing time: Mon 21 Sep 2026 06:00:44 +0000
Manifest this update: Mon 21 Sep 2026 06:00:44 +0000
Manifest next update: Tue 22 Sep 2026 06:00:44 +0000
Files and hashes: 1: 01VdufbNy92wUqRTSO8Nam1bwcE.crl (hash: sQ3q6WhYGI/73PRvUPUTFrYfpiAd9h0wJ8AVULKjwkU=)
2: szLd58h9ss7j2xagBuMXF5WP0yk.roa (hash: 8ob8pb7Gxq2C51p/RiIuL1KyizGRkOlyyDDvo7AtTm0=)
3: uXRaOLAunE2UdEOM1lTRedX_8jQ.asa (hash: 5LEXYsw/l0m4ESugD1zDY5cY+ORuB71qGoxgj35oZFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/01VdufbNy92wUqRTSO8Nam1bwcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8d:72:9d:1c:0c:8f:90:15:53:85:90:f7:b3:15:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3555db9f6cdcbddb052a45348ef0d6a6d5bc1c1
Validity
Not Before: Sep 21 06:00:44 2026 GMT
Not After : Sep 22 06:00:44 2026 GMT
Subject: CN=4634a134142eb057e763d5171c2d4d54f9402562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:02:20:8c:31:0b:e8:20:0f:73:2a:b6:1a:43:
db:0c:d6:81:c1:a3:8b:dc:a9:0b:c0:43:5f:6e:22:
93:11:8f:37:62:00:5d:f6:24:93:7e:43:b2:6f:57:
a9:a7:3b:04:3a:c7:8e:58:e4:8b:0a:43:9f:13:46:
1a:41:41:dc:d7:f4:2a:6c:57:a2:c2:4d:23:17:18:
01:bc:97:11:8a:e3:2c:48:a3:5f:37:3b:3e:c6:24:
80:e1:6b:b1:91:e9:fc:24:65:5d:e2:fb:ac:26:b8:
aa:23:02:fc:d4:bb:a4:09:e0:56:3d:dd:af:8b:1d:
3d:a7:7e:89:e4:c4:af:d0:2d:a3:f4:dc:b4:7a:3a:
72:02:a9:74:f3:fc:5f:80:f7:e5:e0:49:ef:25:8c:
a1:36:99:40:75:c6:58:55:60:88:33:23:38:e4:c8:
9f:78:86:b7:11:53:f9:e2:bc:b0:03:21:dc:a2:79:
db:86:e3:dd:5e:43:3c:69:89:e4:0d:f0:3b:40:5e:
0d:ed:b2:f4:4d:d6:a9:94:82:2f:74:5c:6c:64:0d:
2c:7c:07:e8:a6:5b:9a:fb:c8:97:11:01:5b:82:c8:
af:0e:39:c5:3f:0d:c7:ee:fb:e1:d0:eb:74:99:6c:
e3:13:fa:e0:5f:64:15:58:63:c3:47:84:47:2d:1a:
74:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:34:A1:34:14:2E:B0:57:E7:63:D5:17:1C:2D:4D:54:F9:40:25:62
X509v3 Authority Key Identifier:
keyid:D3:55:5D:B9:F6:CD:CB:DD:B0:52:A4:53:48:EF:0D:6A:6D:5B:C1:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01VdufbNy92wUqRTSO8Nam1bwcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:96:86:05:87:fb:45:a7:7b:63:f2:98:4b:b2:58:1d:68:ce:
8a:7d:bc:a4:8d:f6:c1:7f:5f:63:78:59:87:ae:2a:ed:ef:f0:
01:68:86:e5:84:53:4f:28:22:1e:c0:ca:5b:55:ef:c9:3d:66:
a3:b8:e9:03:97:3a:ba:25:f1:0a:0d:d7:b9:55:d7:bf:33:e2:
f4:5a:7d:7e:89:82:22:e6:07:a2:fe:88:84:86:cf:1e:ec:7d:
e5:05:de:40:69:f5:8d:67:b5:c5:f7:7f:83:8a:0d:97:32:8e:
fa:bc:95:4f:0c:f3:2b:53:e1:40:40:78:06:a3:8f:9f:29:23:
8a:ad:6a:a6:ef:6d:2b:11:08:a2:50:07:ef:4a:c5:3e:af:77:
8c:0f:5d:2b:65:27:fa:7a:5b:fb:40:70:2a:2d:9e:ab:56:d5:
dc:a7:2c:fc:67:c9:6b:03:88:4e:a4:0e:b1:6c:9d:67:15:2c:
42:49:b3:5c:63:9d:0f:42:b0:26:a6:05:47:ce:c1:64:68:3d:
fe:7f:94:9f:42:e3:3c:22:92:a7:e5:27:c9:df:69:27:f1:19:
9f:d2:6e:97:7d:09:b9:d8:0d:67:88:a0:9c:93:12:49:a9:f1:
e0:f8:02:7a:18:1b:62:aa:fc:b2:e5:58:a3:fe:49:83:91:05:
a5:d5:e3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:08:53 2026 by rpki-client