Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
File: 0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft (raw, json)
Hash identifier: edLkU3gw3Gmhj6fpwjfS7hi7ps8mc9FL1+EiICBB+Zg=
Subject key identifier: EB:5E:93:12:BF:71:9D:0D:7E:21:83:22:51:33:BA:89:4E:F2:50:9C
Authority key identifier: D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06
Certificate issuer: /CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06
Certificate serial: 01A0C66B0D992DFC78751C9F798BE93136D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
Manifest number: 1A67
Signing time: Tue 22 Sep 2026 00:01:39 +0000
Manifest this update: Tue 22 Sep 2026 00:01:39 +0000
Manifest next update: Wed 23 Sep 2026 00:01:39 +0000
Files and hashes: 1: 0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl (hash: Q9cGyfn81/6Kuqov17UNuHMRx6Ww6n9291FPkl7DQHA=)
2: lNZ8b2GqipxFmFvx0Lw_q8EwfSo.roa (hash: qDLpSNqlibtH6zRBXzlD7tUyev4dQUA/1eIb4IG63oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6b:0d:99:2d:fc:78:75:1c:9f:79:8b:e9:31:36:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06
Validity
Not Before: Sep 22 00:01:39 2026 GMT
Not After : Sep 23 00:01:39 2026 GMT
Subject: CN=eb5e9312bf719d0d7e2183225133ba894ef2509c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f3:55:8a:18:39:9a:ab:cb:2e:55:4a:32:52:
ba:d9:58:55:8d:44:ed:1d:c0:54:02:5c:a3:32:43:
84:37:84:be:59:df:cf:ce:77:fd:45:23:ec:89:6a:
b1:be:50:34:02:8d:79:7b:12:a6:98:1e:b6:0e:21:
01:e7:91:1e:97:35:84:5f:88:7c:61:d3:6e:b1:ac:
6a:3f:ca:34:3e:c1:12:4a:d4:7e:04:1a:07:43:c9:
ba:1d:fa:b1:62:59:01:6a:74:ce:9a:7b:7d:87:32:
45:68:ea:d5:c7:18:23:58:4d:62:e8:1f:cd:c6:85:
35:9b:b4:b9:7b:37:9b:4b:32:7b:b3:47:ba:05:4f:
f7:a8:22:a3:fb:47:41:1f:f1:1c:5d:38:34:32:0f:
ef:1e:12:45:ee:06:0b:9c:67:96:df:4d:b9:cc:de:
e9:ee:ef:5f:37:e4:85:78:a2:60:aa:a7:fd:b0:69:
8d:46:f1:1f:0c:46:94:c3:8b:1c:8b:34:57:52:19:
10:f7:b7:35:13:8c:c7:3d:11:8e:34:0f:90:41:6c:
16:3e:ce:a7:b5:13:d1:98:0f:0b:5c:25:40:50:0b:
2c:0e:ef:1d:6e:1f:3d:ed:da:a3:bf:69:ac:cd:7d:
63:37:4a:d3:24:b4:68:87:9b:26:6d:f9:f3:ae:33:
75:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5E:93:12:BF:71:9D:0D:7E:21:83:22:51:33:BA:89:4E:F2:50:9C
X509v3 Authority Key Identifier:
keyid:D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:64:38:17:c2:0a:28:5a:81:3c:fb:73:0a:53:92:3e:8b:92:
96:cf:b9:2a:00:bb:a6:06:c1:1d:e9:80:b1:d1:81:2a:33:e3:
b8:d0:75:2b:96:9b:61:18:aa:de:c8:d7:6f:16:93:82:59:89:
5b:c0:1a:8c:4b:21:3b:82:c2:dd:d3:ec:91:1a:27:8d:f2:15:
b5:9a:59:94:6f:80:b9:80:96:0d:e1:a8:c6:1f:c1:eb:cc:a9:
6b:9f:41:ec:05:ac:dd:7a:6a:8e:eb:4b:a2:ef:d1:64:17:0d:
6d:0a:49:7d:c3:c2:9f:dc:b0:e5:77:3c:b1:1e:79:b7:d4:29:
62:4d:85:6e:a5:56:b3:78:1f:36:c7:6d:21:60:15:ac:14:00:
8f:dd:c5:b4:da:ae:41:1c:89:1e:aa:95:2b:d2:cc:5a:14:82:
1e:9d:9c:4a:ab:72:98:95:4e:fd:28:f9:64:e2:65:cd:a5:9c:
81:46:d2:3a:15:c0:61:16:e8:27:13:bc:d8:7b:f0:9f:74:bb:
37:9a:0e:b4:33:5b:81:21:2d:21:47:6e:5d:07:ac:77:51:7a:
1a:5b:eb:e3:67:52:cb:23:98:9e:3e:ee:df:88:40:72:e7:1b:
b2:b8:9e:ab:a5:f9:1f:3f:a6:51:53:17:02:77:3a:e7:c8:17:
06:36:73:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:16:42 2026 by rpki-client