Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
File: 0BDueLvUh9OdecsZgIXphPcCogg.mft (raw, json)
Hash identifier: G8KXC1qTG+iuzYxDDoOn6JaLU5hU6ZJhXqmTq13h5X4=
Subject key identifier: 95:37:93:50:0C:EF:DA:FE:9D:B9:D9:DD:4C:91:4E:6C:A5:C2:EE:8D
Authority key identifier: D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08
Certificate issuer: /CN=d010ee78bbd487d39d79cb198085e984f702a208
Certificate serial: 01A0C09F6C091D68C2923008A13C5DB39071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
Manifest number: 0D56
Signing time: Sun 20 Sep 2026 21:01:08 +0000
Manifest this update: Sun 20 Sep 2026 21:01:08 +0000
Manifest next update: Mon 21 Sep 2026 21:01:08 +0000
Files and hashes: 1: 0BDueLvUh9OdecsZgIXphPcCogg.crl (hash: NzFVeL/2QGgSoumRXPeB7CVrXnLs76lBplDEHlXiesg=)
2: i61qYgJt7XASGajQVn7m5dP7IZQ.roa (hash: qGulv8eW7fr9lnRNaCMKhFZd/KxMM/VrsV3Shc1gsjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:9f:6c:09:1d:68:c2:92:30:08:a1:3c:5d:b3:90:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d010ee78bbd487d39d79cb198085e984f702a208
Validity
Not Before: Sep 20 21:01:08 2026 GMT
Not After : Sep 21 21:01:08 2026 GMT
Subject: CN=953793500cefdafe9db9d9dd4c914e6ca5c2ee8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:76:97:1e:cf:6f:c5:70:d2:c4:32:38:47:e8:
ac:48:07:34:a4:2d:37:1f:b3:84:3a:de:d5:07:1e:
51:31:d8:81:e8:25:ad:b3:0a:ae:10:a9:6e:e6:23:
99:64:e2:f4:ee:e0:04:f1:7a:06:26:c1:77:68:d2:
bf:67:ae:09:ce:c9:d5:85:e6:ce:c9:ba:23:5c:88:
66:8b:51:de:5c:77:5f:95:2c:01:98:2b:86:25:1f:
14:7d:7f:29:16:ac:8e:e4:8c:9d:2b:20:42:cd:6e:
b8:62:bd:7a:a9:26:31:89:05:9c:f7:a3:f8:8f:71:
4d:a3:d3:50:1f:a7:bf:0d:fd:68:6a:13:83:bf:90:
df:d3:57:47:e1:7c:c5:e9:f1:57:ba:77:76:87:2c:
bd:66:8c:02:9f:1c:20:52:ec:31:ba:d0:4e:10:e3:
e1:2c:15:5a:64:c0:cf:10:b5:5b:61:86:2e:ce:96:
a6:31:71:12:84:37:53:1d:ba:5f:3a:c2:36:9c:3d:
69:e0:14:f7:c1:f8:d4:6d:aa:c5:8a:49:1e:40:0c:
06:0b:34:22:8c:11:37:94:ff:37:80:5e:22:23:96:
fa:7d:99:ab:bb:ea:f7:37:3f:c4:29:f5:a1:5a:f9:
5d:92:4a:f6:b6:2b:71:87:e0:c3:65:2f:e9:7f:52:
71:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:37:93:50:0C:EF:DA:FE:9D:B9:D9:DD:4C:91:4E:6C:A5:C2:EE:8D
X509v3 Authority Key Identifier:
keyid:D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d6:28:d6:c1:8c:52:ac:15:e1:56:26:9a:8f:d9:c0:da:3d:
40:29:25:0a:34:01:f5:e2:0f:a0:e6:84:ee:bc:13:c1:21:dd:
c5:5f:8f:b0:37:33:0f:82:91:06:78:73:4b:65:34:6d:43:7f:
20:a1:36:f0:16:e4:e0:0c:0a:3d:d4:cd:62:d7:c0:80:02:34:
a0:88:3e:63:cc:be:80:86:43:74:22:93:e7:3e:8a:01:b7:ca:
27:42:41:ad:89:83:02:7f:23:28:09:a7:33:c6:bb:dd:b9:e3:
41:65:df:56:83:85:ce:a3:4e:69:7c:2a:18:eb:77:8a:95:49:
a8:80:3f:59:dc:98:33:ee:17:00:54:a7:3a:7b:43:4f:53:75:
b6:1f:99:97:bc:a9:b7:bf:3b:c3:94:22:ac:04:4e:98:95:db:
a9:1c:1b:c1:21:1f:88:6b:1e:4c:ef:10:ef:cc:28:5d:69:a9:
97:d3:59:3c:e6:ec:ed:99:a6:e0:91:94:8c:9f:32:04:93:af:
6b:48:5b:66:cf:ad:dc:48:04:3a:71:31:a6:17:f4:91:27:ab:
58:a2:53:95:a0:e2:21:e4:b2:54:dc:ba:79:5b:92:f0:dc:74:
d7:1e:7b:2b:24:e3:4b:47:ac:83:13:84:35:f2:a9:78:42:8e:
46:e7:ce:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:38:29 2026 by rpki-client