Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/49f528-e72f-4da7-902e-6975cadb2262/1/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.mft
File: 0nAqOyfOm9BN3KKMIdnQ9f8yqQk.mft (raw, json)
Hash identifier: 9DBLu7ndBu8+keuFbRRih+lWWUJ0dhMk6jgn+M3cYg0=
Subject key identifier: 95:0C:48:A9:67:9F:20:59:D1:50:19:C5:74:4E:CF:D0:C4:17:74:40
Authority key identifier: D2:70:2A:3B:27:CE:9B:D0:4D:DC:A2:8C:21:D9:D0:F5:FF:32:A9:09
Certificate issuer: /CN=d2702a3b27ce9bd04ddca28c21d9d0f5ff32a909
Certificate serial: 01A0DC4E25817F66FA4EC60E07678E6B8EF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/49f528-e72f-4da7-902e-6975cadb2262/1/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.mft
Manifest number: 1A70
Signing time: Sat 26 Sep 2026 06:01:43 +0000
Manifest this update: Sat 26 Sep 2026 06:01:43 +0000
Manifest next update: Sun 27 Sep 2026 06:01:43 +0000
Files and hashes: 1: 0nAqOyfOm9BN3KKMIdnQ9f8yqQk.crl (hash: xLvBZMqnrrufQhFfwozrfEOMO1uQe3CgVLJrINt86Dw=)
2: qB-yYmmoZAETKywXU4O90SMz9p4.roa (hash: zSfrh0GvpLorIoRjiLIdctGLnu0vrYxfcdrku/RI+Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/49f528-e72f-4da7-902e-6975cadb2262/1/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/49f528-e72f-4da7-902e-6975cadb2262/1/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 06:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:4e:25:81:7f:66:fa:4e:c6:0e:07:67:8e:6b:8e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2702a3b27ce9bd04ddca28c21d9d0f5ff32a909
Validity
Not Before: Sep 26 06:01:43 2026 GMT
Not After : Sep 27 06:01:43 2026 GMT
Subject: CN=950c48a9679f2059d15019c5744ecfd0c4177440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f6:a9:08:06:69:46:11:eb:eb:5f:b6:de:b1:
f4:d2:3a:3a:83:59:5f:52:03:39:57:9f:0c:a2:6e:
5a:18:4c:0b:95:c0:ce:59:a8:70:14:d7:0d:98:63:
56:02:ff:5a:1c:c3:6a:f9:31:c0:67:1a:01:06:c9:
7e:c4:7a:f1:eb:b0:f1:52:e6:ab:d7:8c:d6:be:e0:
06:a3:16:f5:95:3b:54:8f:5a:8a:8b:01:11:93:ab:
e6:a9:eb:90:f5:bf:90:0c:b6:3e:2c:2e:0f:13:52:
bc:ce:37:e7:0a:10:a9:83:41:bb:26:a0:27:34:80:
52:3d:95:6d:48:3f:d8:98:4a:e4:21:16:8a:24:02:
1d:7a:9c:5f:7f:16:ea:ca:1c:ab:db:a0:a5:11:f4:
f4:1e:2d:fb:81:30:40:c5:93:66:32:05:c5:04:93:
1a:28:a5:d7:6d:a3:2b:83:18:fe:21:e8:38:e6:5b:
26:1c:54:22:f9:5a:3d:c8:f0:78:de:1e:7a:a7:a8:
cb:7b:57:b7:07:55:08:c7:ca:3b:31:47:6c:8c:a3:
08:7b:54:bd:0b:8c:a0:0f:2c:65:1a:b3:58:25:3d:
a0:cf:f3:9b:51:2d:09:69:81:2f:11:17:90:a3:b4:
98:56:d0:57:a2:b3:0b:07:e6:69:5c:92:05:aa:88:
06:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0C:48:A9:67:9F:20:59:D1:50:19:C5:74:4E:CF:D0:C4:17:74:40
X509v3 Authority Key Identifier:
keyid:D2:70:2A:3B:27:CE:9B:D0:4D:DC:A2:8C:21:D9:D0:F5:FF:32:A9:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/49f528-e72f-4da7-902e-6975cadb2262/1/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/49f528-e72f-4da7-902e-6975cadb2262/1/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:86:e8:36:b1:15:69:7a:bd:3a:08:34:04:04:1f:47:20:09:
f5:a3:d3:70:d4:2f:3c:7b:ad:f3:25:ff:1c:2e:4d:bf:a8:1d:
7b:33:5f:a9:df:86:a8:e9:e5:75:db:c8:47:1d:0d:d1:17:c7:
e6:61:db:f5:f1:99:fb:93:8c:b8:d5:b7:6e:0f:39:d8:4e:6d:
f1:64:ea:b8:af:6d:d6:7a:7e:2b:e4:96:11:4c:de:e6:34:12:
5d:25:f3:2f:b0:42:e9:56:7b:0c:4a:15:54:cf:5c:99:48:30:
38:ac:4e:79:6c:b4:dc:1b:a3:c0:c7:02:26:d1:a1:e1:94:79:
a9:df:85:96:c5:e0:6b:4f:ab:25:ea:17:62:c5:0e:68:41:b4:
41:bf:80:a5:87:8a:53:87:b0:e2:be:0c:af:b5:a8:9b:8d:29:
23:68:c9:76:7a:a2:fd:85:5d:a0:27:35:a9:d6:f0:32:14:33:
26:ec:1c:bd:cf:3e:1f:cc:14:49:3b:ae:b2:9d:c3:25:43:f3:
ae:63:1b:75:a6:3e:4e:fc:4a:f8:29:30:b2:34:05:d0:75:8f:
64:ec:6a:d0:4c:02:8e:ac:29:58:e9:b3:9b:6c:63:67:f3:62:
82:b5:a8:00:b6:ab:4d:fd:44:ac:28:d7:3a:a1:c8:e5:71:42:
a0:42:10:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:06:49 2026 by rpki-client