Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
File: 0nXXqLrAR39VCd_xG5GVymDfh9o.mft (raw, json)
Hash identifier: NoF95lgPU/zGeqJtqTSZncC4uJSzmu87z2onr7uaVbg=
Subject key identifier: BE:B1:5C:2C:87:76:7A:4D:AC:5B:C3:AE:86:82:50:7B:A5:E7:F4:6A
Authority key identifier: D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
Certificate issuer: /CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Certificate serial: 01A0E8F6930937D6CB6B27DA6CC4AA605C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
Manifest number: 1A8F
Signing time: Mon 28 Sep 2026 17:01:08 +0000
Manifest this update: Mon 28 Sep 2026 17:01:08 +0000
Manifest next update: Tue 29 Sep 2026 17:01:08 +0000
Files and hashes: 1: 0buhRJjHXTiILzpXwukDNlvcl6A.roa (hash: dS469I3s9ALuc1j5wYrMGtFrrCgHDmpnkp67+jT2dqk=)
2: 0nXXqLrAR39VCd_xG5GVymDfh9o.crl (hash: IZrTnMhySpB/VLomhOblWn7zhh1B+Jt0G3Ju5Ih3oYo=)
3: p-lIpXsmPoQertGg9bQtPqbri4I.roa (hash: +pBtjOXElfoNNS7bSuz70mkJA+YE5+231SNuLb17X3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 17:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:f6:93:09:37:d6:cb:6b:27:da:6c:c4:aa:60:5c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Validity
Not Before: Sep 28 17:01:08 2026 GMT
Not After : Sep 29 17:01:08 2026 GMT
Subject: CN=beb15c2c87767a4dac5bc3ae8682507ba5e7f46a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:57:18:e4:1e:2c:37:63:3f:78:1a:64:40:b3:
fc:53:b3:fe:11:60:ce:72:3e:1e:ab:0a:9b:f5:71:
56:23:a8:51:0b:3b:07:b8:f4:b3:0d:44:fc:ac:b0:
51:5a:fd:68:f2:bb:d5:cd:38:0f:70:d2:19:3f:e1:
bf:c9:57:78:8f:1a:35:98:91:4f:2b:7c:71:cc:1d:
ed:c1:ab:32:d7:23:c2:ac:4a:7d:c0:da:43:9d:9f:
f8:3e:53:8a:9f:b1:73:10:8b:13:7c:8d:24:8b:8d:
09:fe:e3:ec:d7:0b:83:b8:6b:ca:56:af:25:6e:60:
b3:db:ec:49:81:49:aa:30:51:32:bf:19:5e:00:83:
6a:01:32:71:c8:a5:d1:a6:46:4e:e3:e1:ab:81:85:
3f:0d:60:95:c2:67:0a:7c:71:00:0c:6a:2a:56:9b:
8e:f5:3d:d1:a7:fa:66:59:fe:15:5c:bf:ae:df:77:
03:39:c7:e5:ad:71:76:3a:e1:6d:05:75:91:7a:4e:
66:06:af:c9:1a:cf:a0:3c:ab:8a:18:ab:24:1b:8a:
4c:d3:a2:84:1d:ab:2e:5e:e6:37:31:7a:39:8f:50:
4a:33:e9:27:32:49:a3:a4:95:6c:9f:cc:1b:24:55:
92:3e:81:a5:d2:0d:a1:ad:d2:5e:44:56:97:ff:6f:
6a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B1:5C:2C:87:76:7A:4D:AC:5B:C3:AE:86:82:50:7B:A5:E7:F4:6A
X509v3 Authority Key Identifier:
keyid:D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:33:af:aa:e1:31:05:c6:ad:cd:a1:82:80:1a:52:c2:6c:4f:
f9:75:7e:f4:40:a4:96:64:1b:d4:13:7a:24:2e:00:43:a0:90:
33:54:8b:44:29:0d:19:e3:5c:e2:8b:ac:6d:09:d2:80:30:cf:
4c:9e:0e:fb:50:8f:32:c7:2b:20:3e:5e:a6:08:a1:9d:b3:8a:
53:e3:50:4f:a6:d3:f1:e1:e3:2e:6e:88:dd:e6:53:5f:1b:8e:
c0:34:e3:24:97:aa:b9:3a:2d:9f:32:03:3e:97:0f:21:21:d1:
d3:e8:09:f3:a9:30:c3:17:a4:dc:74:ff:a3:7f:23:39:31:c9:
11:69:51:9f:06:fc:43:56:8b:f3:17:6b:78:98:c1:9e:81:96:
30:75:3a:37:17:45:38:35:f5:e3:85:0f:bc:5c:57:80:e3:26:
24:54:cf:84:e5:13:e0:d7:be:9b:05:fe:d5:6d:5e:6c:c2:27:
7a:3c:33:e3:b5:44:c7:d2:7a:bc:c0:ce:ec:4d:6c:23:82:0a:
0a:12:69:8b:e7:81:23:97:bb:29:65:ca:19:46:fd:36:6c:4c:
cc:fc:d9:f4:ed:95:e6:57:18:f3:01:e1:a2:22:72:79:39:72:
8c:ee:7e:20:95:7f:13:a9:68:2f:f6:27:89:ac:09:c2:3f:d0:
e3:e2:af:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 03:48:38 2026 by rpki-client