Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/964e06-e186-4cb5-aaab-af99cfadacb6/1/0Nela7eOsawUaqeHHn3JaNsczZI.mft
File: 0Nela7eOsawUaqeHHn3JaNsczZI.mft (raw, json)
Hash identifier: rxskLvxZXPAozkp9F9TZZEPvRjDfrfJLjks6EWGCb60=
Subject key identifier: AA:74:FC:57:15:28:FD:D6:2F:FA:BD:2E:F7:A8:3D:CB:2A:51:37:82
Authority key identifier: D0:D7:A5:6B:B7:8E:B1:AC:14:6A:A7:87:1E:7D:C9:68:DB:1C:CD:92
Certificate issuer: /CN=d0d7a56bb78eb1ac146aa7871e7dc968db1ccd92
Certificate serial: 01A0BD9E2A805C6D033FCB2CBE46663139E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Nela7eOsawUaqeHHn3JaNsczZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/964e06-e186-4cb5-aaab-af99cfadacb6/1/0Nela7eOsawUaqeHHn3JaNsczZI.mft
Manifest number: 36
Signing time: Sun 20 Sep 2026 07:00:54 +0000
Manifest this update: Sun 20 Sep 2026 07:00:54 +0000
Manifest next update: Mon 21 Sep 2026 07:00:54 +0000
Files and hashes: 1: 0Nela7eOsawUaqeHHn3JaNsczZI.crl (hash: beGXuW8iDtNib00qiC+wsfU2ihexhpAbPPOGBuXkBXs=)
2: k0-sr1otnLush7BXbOQg3Kr4Zog.asa (hash: W4A6B38EMlC2Mw9enNNdoGrJvQBdROS5L+dxnC72N0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/964e06-e186-4cb5-aaab-af99cfadacb6/1/0Nela7eOsawUaqeHHn3JaNsczZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/964e06-e186-4cb5-aaab-af99cfadacb6/1/0Nela7eOsawUaqeHHn3JaNsczZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Nela7eOsawUaqeHHn3JaNsczZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:9e:2a:80:5c:6d:03:3f:cb:2c:be:46:66:31:39:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0d7a56bb78eb1ac146aa7871e7dc968db1ccd92
Validity
Not Before: Sep 20 07:00:54 2026 GMT
Not After : Sep 21 07:00:54 2026 GMT
Subject: CN=aa74fc571528fdd62ffabd2ef7a83dcb2a513782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d2:ef:67:30:6b:da:c1:4c:ef:96:94:58:a3:
61:85:99:d4:d6:59:df:fd:75:cd:0d:e7:e9:34:99:
d2:22:15:39:35:4e:a6:c7:2c:ff:ef:9c:fe:fb:ab:
45:aa:f4:2c:a7:be:98:06:8a:aa:47:76:5a:8e:68:
9b:86:76:c2:b0:2f:60:67:42:de:f4:5c:12:8b:e7:
13:c0:99:15:3e:05:07:0d:96:16:48:a1:66:21:44:
b2:40:df:80:0d:cc:ff:9e:d7:3a:9e:11:4e:5c:65:
91:3e:3f:32:db:6a:c7:4c:2d:69:97:c1:61:37:9c:
37:aa:4e:5d:1a:6e:74:86:95:bf:01:f4:ad:30:41:
f0:b5:a8:b6:60:84:64:d8:c0:0f:b7:62:35:e0:9f:
69:a8:6d:80:15:d9:7a:c7:41:b3:4c:f8:3e:06:00:
1a:c5:3b:01:7e:cc:1d:6d:04:6c:4c:e0:23:cf:a9:
18:60:ab:63:01:8f:88:d5:5a:f6:ab:89:34:ff:55:
e4:7b:54:9d:4e:c7:d5:38:b6:75:c2:93:a4:d0:b5:
42:4c:df:31:ed:e8:f6:db:0f:59:ff:cd:d4:dd:7b:
0b:5d:95:5d:72:c1:20:15:42:89:51:00:4f:d0:08:
63:bc:89:89:2f:2f:87:26:a0:67:fe:ae:ad:f0:9e:
48:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:74:FC:57:15:28:FD:D6:2F:FA:BD:2E:F7:A8:3D:CB:2A:51:37:82
X509v3 Authority Key Identifier:
keyid:D0:D7:A5:6B:B7:8E:B1:AC:14:6A:A7:87:1E:7D:C9:68:DB:1C:CD:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Nela7eOsawUaqeHHn3JaNsczZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/964e06-e186-4cb5-aaab-af99cfadacb6/1/0Nela7eOsawUaqeHHn3JaNsczZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/964e06-e186-4cb5-aaab-af99cfadacb6/1/0Nela7eOsawUaqeHHn3JaNsczZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:e1:4b:36:08:37:58:38:d2:f2:f8:60:8b:ac:15:6f:b5:55:
43:01:0b:fc:f0:88:38:cf:bf:45:95:22:be:ef:08:af:bf:a9:
bc:62:cd:95:fd:77:fd:e8:31:fb:61:6e:51:1e:7e:90:43:63:
db:1d:dd:67:c9:eb:ca:01:a6:c0:8c:1b:5b:d3:e4:68:c6:44:
03:5d:7f:cc:15:34:9a:01:b2:10:70:ec:cd:84:de:0c:d3:c5:
52:7f:3b:1f:61:c5:e4:2c:49:b7:73:90:80:95:57:37:cf:32:
4e:79:68:e9:6c:31:2f:e9:71:30:22:33:b0:14:62:97:e5:a4:
ae:7f:40:bc:3f:f0:34:cc:ce:72:c5:f7:6d:47:8d:a6:77:5b:
8e:bb:8c:07:54:ab:91:53:84:85:39:aa:1d:0d:71:f1:7f:b4:
62:e4:bb:f6:74:ed:fe:1d:99:bc:35:c4:f0:27:02:00:f2:ef:
67:0b:43:43:41:4a:34:2d:c9:89:53:f6:31:53:40:c5:90:0f:
18:85:cb:34:b5:49:c7:c6:ce:88:d6:02:af:c3:7c:2b:04:30:
3e:35:8c:b0:4b:66:d1:75:fd:16:9c:f1:4a:64:4d:9e:81:c2:
dc:1e:78:c8:cd:b4:08:62:48:e0:9c:ed:e1:75:08:a1:ee:ed:
4d:56:61:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:09:01 2026 by rpki-client