Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
File: 0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft (raw, json)
Hash identifier: eyFgXijZOI6nI2joa2fAJdbjDH10AXdxLt6/gPw/8As=
Subject key identifier: 20:B1:72:01:11:86:55:AF:0D:4F:3A:DC:B0:37:60:BF:CB:16:E8:78
Authority key identifier: D1:B0:E8:68:6F:7D:AB:1F:64:C8:0D:43:82:C3:C5:94:9F:F1:1D:BF
Certificate issuer: /CN=d1b0e8686f7dab1f64c80d4382c3c5949ff11dbf
Certificate serial: 01A1AC3A4A92E7F7262FF4D5C81CDA0CD2EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
Manifest number: 0934
Signing time: Thu 05 Nov 2026 15:01:03 +0000
Manifest this update: Thu 05 Nov 2026 15:01:03 +0000
Manifest next update: Fri 06 Nov 2026 15:01:03 +0000
Files and hashes: 1: 0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl (hash: Euyoc2b3WduOkHpaVZXFzqa2EC0Lg0A6pGsDuCKqJJ8=)
2: 3csJZekX_cLNjU2Men_fceOPKEA.asa (hash: irrhjgoJp1T9LHez28rBpjrfAsWLiO1IsgQaRVT71is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ac:3a:4a:92:e7:f7:26:2f:f4:d5:c8:1c:da:0c:d2:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1b0e8686f7dab1f64c80d4382c3c5949ff11dbf
Validity
Not Before: Nov 5 15:01:03 2026 GMT
Not After : Nov 6 15:01:03 2026 GMT
Subject: CN=20b17201118655af0d4f3adcb03760bfcb16e878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:cb:5f:19:7f:a3:50:76:c8:bf:b1:c5:a0:8f:
cc:12:89:e0:25:97:8c:d8:41:d6:7d:b3:72:3a:84:
5b:c5:8c:d8:fb:ef:b3:a2:c3:d0:d6:eb:cd:bb:41:
d4:2e:a0:01:17:08:53:16:ce:e5:67:e9:16:98:0d:
38:32:88:12:2d:8c:61:28:bb:90:1c:de:0b:5c:89:
06:11:d5:5c:f9:63:f4:aa:89:39:6a:6c:ac:c1:0d:
f0:be:6f:77:aa:27:8e:5b:5c:3b:63:b0:47:bd:e3:
e1:31:68:0e:a0:32:ab:7a:ea:e3:62:18:b2:27:1d:
83:cc:0e:5b:10:c0:df:5a:dd:f6:e6:60:cf:a4:2b:
94:23:a6:79:27:1d:67:27:cf:aa:f2:62:f5:1e:53:
9b:5c:8b:0b:dc:87:cc:78:4d:d7:86:1e:3a:b2:cb:
f6:e0:1e:12:fa:32:46:80:83:34:6f:71:05:bd:32:
e7:4d:db:bc:f6:07:bb:20:0b:72:ae:e7:fc:78:22:
5a:98:ba:c6:83:b1:06:66:90:e5:10:a5:f4:6c:9e:
f4:c5:f3:0e:68:41:60:6e:db:22:87:82:64:c0:bf:
3f:86:ce:ed:82:c2:10:e2:db:57:a1:68:26:2b:ad:
f3:d2:0b:3d:86:e1:16:5e:db:21:69:3b:5c:3c:08:
e5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B1:72:01:11:86:55:AF:0D:4F:3A:DC:B0:37:60:BF:CB:16:E8:78
X509v3 Authority Key Identifier:
keyid:D1:B0:E8:68:6F:7D:AB:1F:64:C8:0D:43:82:C3:C5:94:9F:F1:1D:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:dd:90:16:15:81:91:29:1c:8e:0b:13:0f:33:0c:da:1f:28:
7e:95:ad:d8:99:2a:e6:25:92:c8:3c:16:5b:f1:e0:f2:a9:25:
7e:14:27:64:6a:ab:04:89:df:4f:fa:e4:23:70:c4:ad:33:bd:
e2:2e:b4:82:69:c9:b4:36:57:6b:c5:4f:a1:33:4f:68:e4:e3:
f7:75:d3:d7:bd:6a:3d:42:3c:e4:50:fe:22:a1:6f:e4:66:44:
41:12:fc:b9:f1:fa:b9:97:68:89:78:f8:f8:67:bc:7b:72:12:
c7:37:cb:52:95:a5:98:63:84:50:b3:ce:e6:3e:d5:a9:9f:c9:
cd:d1:e8:f8:f1:da:0d:a4:c5:e9:4e:ee:29:0f:ef:9e:5b:f2:
58:e3:b6:22:a0:e2:d5:22:0d:47:71:94:09:34:19:fe:8c:0f:
64:8a:f3:08:ef:7a:cd:44:f1:87:d9:2f:2c:83:68:cd:65:2f:
e8:75:33:87:b6:5c:3d:58:2f:7b:66:6c:05:97:61:68:13:92:
43:cf:d4:9a:27:17:b1:d4:04:0b:ce:5d:50:9c:33:27:13:d2:
30:58:1a:3d:42:68:3a:e2:12:c0:de:5c:59:16:7a:5c:21:a4:
2a:54:cc:57:bd:4a:9d:15:9e:63:c4:31:3a:47:dc:37:ee:7b:
0c:fb:9e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:49:39 2026 by rpki-client