Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.mft
File: 0d2oMnacMWgfglaFFHNorzoR9vg.mft (raw, json)
Hash identifier: Ei4WiCyWFAB+PiTM7qV5b6Xk6NaYoiPZRdOvVd/wmdk=
Subject key identifier: D0:A3:03:E6:7E:B6:49:62:C6:73:80:C1:9C:2A:E7:D1:4D:CA:9F:10
Authority key identifier: D1:DD:A8:32:76:9C:31:68:1F:82:56:85:14:73:68:AF:3A:11:F6:F8
Certificate issuer: /CN=d1dda832769c31681f825685147368af3a11f6f8
Certificate serial: 01A0C88F1DECEFC367A0C95A177903698FBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d2oMnacMWgfglaFFHNorzoR9vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.mft
Manifest number: 1A69
Signing time: Tue 22 Sep 2026 10:00:17 +0000
Manifest this update: Tue 22 Sep 2026 10:00:17 +0000
Manifest next update: Wed 23 Sep 2026 10:00:17 +0000
Files and hashes: 1: 0d2oMnacMWgfglaFFHNorzoR9vg.crl (hash: yiNMy6jzZIkTS/wzYjWBRfLISJf2aaiqoap2mt37Ug8=)
2: EHzjD2BaSdt6dlWwGmMzrIvaNCg.roa (hash: S94ye2gvt+ykcb3AuWBczPrNA3UQ52LMfEF8Lq+CnR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0d2oMnacMWgfglaFFHNorzoR9vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:8f:1d:ec:ef:c3:67:a0:c9:5a:17:79:03:69:8f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1dda832769c31681f825685147368af3a11f6f8
Validity
Not Before: Sep 22 10:00:17 2026 GMT
Not After : Sep 23 10:00:17 2026 GMT
Subject: CN=d0a303e67eb64962c67380c19c2ae7d14dca9f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c7:34:c5:b9:49:82:9f:1a:fd:1b:13:78:23:
da:e8:98:17:e6:ae:3a:14:f0:56:01:d3:0b:ce:c5:
ce:7c:6c:a8:30:b8:63:cd:35:60:e3:91:4c:9e:31:
46:4f:db:36:46:7d:1a:62:6c:6c:a4:d8:a3:a4:e5:
9e:01:98:dd:23:9e:98:68:17:de:21:a0:c4:94:26:
3b:41:c5:a7:85:78:19:12:34:9b:9c:d4:bb:e6:e0:
79:5b:fd:a2:a4:40:7d:5f:71:2b:d5:69:b2:1a:b7:
03:e5:af:ea:18:6a:89:08:34:2e:84:c8:cc:62:ac:
3d:09:4a:35:f7:2d:23:74:31:c1:9b:11:23:45:52:
86:50:3e:c5:ea:fe:ba:cb:45:3f:d1:0a:ff:f4:08:
06:71:67:d4:9d:06:37:32:76:0e:d5:0f:91:c9:6b:
b7:ff:4b:5f:62:07:51:e1:b9:1a:8a:fd:78:b9:f9:
b8:f7:26:b9:93:78:f9:d9:9f:d6:d3:4d:84:51:ce:
53:d2:3f:98:22:44:7e:0a:84:58:eb:ff:e4:c5:ad:
dd:20:40:25:ea:4d:bd:c8:dc:63:6e:14:50:7c:39:
29:e9:f4:0d:3b:77:5d:25:4b:cc:ab:04:63:40:ad:
d6:3b:0e:56:91:0b:7b:66:61:80:27:b2:45:1b:9d:
ae:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A3:03:E6:7E:B6:49:62:C6:73:80:C1:9C:2A:E7:D1:4D:CA:9F:10
X509v3 Authority Key Identifier:
keyid:D1:DD:A8:32:76:9C:31:68:1F:82:56:85:14:73:68:AF:3A:11:F6:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d2oMnacMWgfglaFFHNorzoR9vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:fd:b2:b3:9f:e0:d7:2b:ea:a1:eb:fa:5b:ee:27:cc:0e:a3:
47:97:bc:91:99:db:a4:f8:74:1a:6c:e1:b7:06:38:eb:f9:9c:
20:53:ca:f7:07:1b:39:5e:d3:70:ea:08:4d:d2:7b:b2:3a:a7:
20:17:5f:c5:9d:cd:1d:c5:53:26:de:ee:c0:e2:73:97:4c:cd:
e8:3f:1e:c4:39:d8:66:b3:9b:42:03:33:d8:69:e6:a4:d8:8d:
a1:b6:fc:65:81:e5:b4:01:2b:f0:58:7e:e4:08:8c:64:30:23:
cf:17:37:ac:ee:6b:0c:ed:77:43:61:74:a0:e0:99:61:06:2f:
98:10:94:26:b9:a7:47:b2:8b:be:f1:07:93:57:d0:a3:25:b8:
29:cf:c3:22:b0:ca:87:f1:4f:5a:86:6b:2d:f5:1e:da:45:01:
e5:98:4f:7c:b6:72:fc:a0:2a:b8:db:21:63:27:03:68:9e:4a:
61:db:15:f8:22:d8:38:e3:0a:33:d1:f0:68:de:c0:d2:fb:8d:
28:bd:7c:06:6a:23:49:66:c2:c7:28:2b:b4:c8:fc:ff:87:4f:
46:5f:65:ff:2e:e2:cb:40:80:80:ab:c9:6c:8b:20:61:86:19:
d3:81:91:14:c9:0e:13:67:c0:bb:b9:9c:9c:4b:10:95:39:73:
1c:99:e8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:56:48 2026 by rpki-client