Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
File: 0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft (raw, json)
Hash identifier: wik78YM4bvhnmzJN2/xeitVDV9XKXa7BIL0vkaiz03c=
Subject key identifier: D7:EC:D2:CD:58:1D:0F:69:3B:F2:38:88:74:36:BA:97:7E:8F:2B:08
Authority key identifier: D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9
Certificate issuer: /CN=d29dc792adfcfe88c79e7958fbfec525630b62f9
Certificate serial: 01A1DEA75165DC71AE5DFC5C43FD2FB992D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
Manifest number: 0EFC
Signing time: Sun 15 Nov 2026 10:01:09 +0000
Manifest this update: Sun 15 Nov 2026 10:01:09 +0000
Manifest next update: Mon 16 Nov 2026 10:01:09 +0000
Files and hashes: 1: 0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl (hash: rjYSy0MokoX12qHCFt95eIvNu3qNmvuxoRpzNSsQJUg=)
2: 1KnU7H_UVe-XpNapFYFQEn0LJJQ.roa (hash: cUtUMg5M4fjhGoVm34BuVn+17rIs5yEOOCki02p10ww=)
3: j5hpz0Ky4wyZsfB5ISUjvlPvrQ8.roa (hash: eXsNvI5c0yl1gppo8mH8F57qlB2x5VSSClL68a+AJ/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:51:65:dc:71:ae:5d:fc:5c:43:fd:2f:b9:92:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d29dc792adfcfe88c79e7958fbfec525630b62f9
Validity
Not Before: Nov 15 10:01:09 2026 GMT
Not After : Nov 16 10:01:09 2026 GMT
Subject: CN=d7ecd2cd581d0f693bf238887436ba977e8f2b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e6:9f:d1:e7:ae:b2:51:45:aa:e4:62:0b:14:
a0:8c:a5:fe:ed:76:a0:30:fa:6b:40:d3:d1:83:7a:
f0:21:e1:9f:85:c6:2d:f6:87:0e:fa:2f:5e:f0:61:
c9:80:e2:5a:88:8e:34:13:f5:f8:45:6c:27:89:fe:
f1:8a:71:f3:e1:0b:be:95:4e:d2:06:d6:cd:2b:f7:
d9:f0:bc:db:cf:c0:a6:d7:c9:78:d4:ab:c2:c3:fe:
b3:2c:5f:f3:13:59:c0:78:01:79:25:e3:47:8b:a2:
a2:54:00:e3:91:61:9c:51:ef:d0:91:c5:17:d8:c1:
cb:10:d2:a7:31:2d:4a:64:fa:a5:89:39:b0:72:01:
6b:ec:52:59:39:63:be:50:e8:f2:bc:16:7c:94:bf:
4c:83:34:1a:ea:d8:14:01:56:4a:7b:22:49:9e:43:
bb:fd:3c:04:3c:a1:0b:9a:57:11:9f:d9:20:da:69:
57:b2:4c:17:ad:08:f0:16:a7:93:c2:6b:3c:df:2a:
38:57:11:3e:ac:9d:b0:e8:da:91:bc:a4:b7:fe:c9:
5f:22:69:84:90:61:87:36:7d:bb:38:a0:1b:0c:1f:
6c:a8:81:8f:a3:e6:39:f5:99:e3:d4:c4:00:0c:4f:
2f:f5:09:1c:88:3a:60:f1:9e:dc:34:33:3b:c2:69:
47:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EC:D2:CD:58:1D:0F:69:3B:F2:38:88:74:36:BA:97:7E:8F:2B:08
X509v3 Authority Key Identifier:
keyid:D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a6:5b:71:68:26:d8:a1:1f:a8:12:87:a9:af:e7:d8:f7:25:
90:65:d5:a2:85:48:1e:99:e4:fd:ba:ee:0c:2b:38:bd:96:72:
a3:50:7c:bf:09:f3:62:36:88:bf:90:aa:e6:09:c1:78:0b:61:
bd:bc:b0:17:fe:c4:81:f3:58:7b:df:54:b0:21:8b:5a:04:5a:
18:81:49:18:8a:15:9f:de:73:30:a8:58:2b:ec:7e:99:c8:58:
68:9d:f1:ba:d8:b0:09:47:d9:8c:2a:35:08:b0:26:e5:04:c4:
19:f3:03:fc:e9:bf:08:5f:89:10:ba:e1:f8:2b:b5:ac:0e:41:
af:dd:7a:cc:b0:b5:fb:51:16:ef:9d:bc:9f:83:08:f1:4d:86:
83:1d:b7:d2:ce:39:11:6e:03:37:d7:e8:af:aa:29:56:fc:1d:
ce:de:52:0d:73:78:98:27:ee:bb:53:4f:a2:82:4e:e0:b6:5c:
a2:7f:19:43:9e:37:87:11:66:33:3e:f5:36:52:71:25:fb:da:
cb:6f:23:92:b7:bf:81:55:66:a6:28:81:57:a3:04:3d:e1:78:
ad:f0:29:02:dc:b0:04:70:23:00:df:3a:44:d6:a7:8b:1a:0a:
7c:a9:6f:49:8c:de:68:0b:2f:0f:99:cd:49:62:75:4d:a0:5d:
d7:f8:16:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:59:00 2026 by rpki-client