Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
File: 0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft (raw, json)
Hash identifier: 2UuFMu+ljk3zg0JmyMlrYVrNqdd6j1o+q9KfKZpD8rE=
Subject key identifier: 04:02:77:52:7A:9D:C4:6C:6E:89:63:30:EC:80:FB:80:71:82:48:3E
Authority key identifier: D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9
Certificate issuer: /CN=d29dc792adfcfe88c79e7958fbfec525630b62f9
Certificate serial: 01A0C2C3D60F4B97FAA93BD2CA1F267BE7A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
Manifest number: 0E69
Signing time: Mon 21 Sep 2026 07:00:09 +0000
Manifest this update: Mon 21 Sep 2026 07:00:09 +0000
Manifest next update: Tue 22 Sep 2026 07:00:09 +0000
Files and hashes: 1: 0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl (hash: rU/hC3mFW+8+S7Yt0h8VlHkxrHBSnRgTfnkBU9KdjhI=)
2: 1KnU7H_UVe-XpNapFYFQEn0LJJQ.roa (hash: cUtUMg5M4fjhGoVm34BuVn+17rIs5yEOOCki02p10ww=)
3: j5hpz0Ky4wyZsfB5ISUjvlPvrQ8.roa (hash: eXsNvI5c0yl1gppo8mH8F57qlB2x5VSSClL68a+AJ/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c3:d6:0f:4b:97:fa:a9:3b:d2:ca:1f:26:7b:e7:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d29dc792adfcfe88c79e7958fbfec525630b62f9
Validity
Not Before: Sep 21 07:00:09 2026 GMT
Not After : Sep 22 07:00:09 2026 GMT
Subject: CN=040277527a9dc46c6e896330ec80fb807182483e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b7:ff:9c:d7:4b:de:c0:7f:16:42:a4:a8:27:
98:21:c4:5a:d8:90:57:84:2a:77:76:e3:af:6f:39:
6a:d6:49:96:2f:e8:ab:c9:10:a4:1e:02:8c:17:dd:
08:6e:0d:d2:ff:4c:96:80:a5:18:aa:e8:9e:67:7c:
9b:45:54:59:ec:62:d2:23:c4:17:c4:f8:86:78:55:
8c:4e:82:e4:f2:25:11:97:51:e5:62:65:fc:49:cf:
50:33:3e:f4:d9:a2:3d:ae:af:b9:c2:30:95:ba:fe:
53:ad:ce:c2:75:49:43:0b:dc:9d:2e:d9:a5:78:67:
c9:b4:05:a4:eb:21:84:e7:03:08:e6:4c:31:ed:83:
ff:b3:04:ee:36:4c:c6:99:54:6e:20:aa:19:0f:3b:
d7:8c:64:d6:ea:8f:31:5a:ba:0d:b3:56:1e:f0:f3:
a5:df:da:4c:52:b5:64:a4:7f:d7:5d:75:66:e9:a8:
59:69:41:fd:b0:8d:2b:07:69:a2:61:07:f6:2a:68:
df:8d:e2:a6:5a:b2:e1:f7:fd:5f:1a:9f:5b:b5:1d:
58:b1:50:be:52:88:5c:cd:e5:fe:09:04:b2:45:62:
4c:aa:40:6d:50:b7:1f:25:63:60:33:fb:35:6c:3e:
c9:08:58:a9:0c:b5:86:dd:01:5b:f0:e5:e4:dd:8f:
72:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:02:77:52:7A:9D:C4:6C:6E:89:63:30:EC:80:FB:80:71:82:48:3E
X509v3 Authority Key Identifier:
keyid:D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:5f:e3:a2:1f:ce:2e:67:43:81:07:cd:d6:62:c9:b8:f2:cd:
92:36:05:95:65:35:20:1f:70:0e:8d:fb:99:7a:6f:9e:cd:d1:
16:4c:bf:88:0d:8f:13:1c:ca:9a:12:42:c6:8e:95:30:98:2e:
87:cc:bb:1c:7b:bc:41:a1:12:6c:20:df:ad:b6:ca:5f:bd:47:
07:53:9a:dc:ac:3d:66:9e:2a:c7:d6:22:f1:7b:e5:05:1b:bd:
b2:3d:bb:d0:c5:f3:aa:55:a1:99:d5:1b:03:0f:69:63:51:c6:
ae:51:d4:2c:12:31:81:75:00:ff:98:a8:4f:4e:5b:fe:60:ae:
35:24:17:0b:1e:34:18:b0:d0:51:8b:51:cc:61:38:7d:e3:63:
b4:df:3d:f8:43:23:29:32:a5:60:d8:c9:a4:da:5c:3a:0c:b4:
8a:4d:91:d4:7f:fd:0d:de:e0:be:f4:f2:04:7b:f4:ca:9d:f5:
c3:5f:84:ef:43:d2:fd:68:01:29:4e:3c:01:f7:d1:2e:c4:5d:
bf:84:a9:b7:ac:77:33:f8:85:b1:f8:39:27:be:e9:8b:86:45:
4e:42:1d:bd:02:50:6f:27:40:8f:50:22:4d:c5:7a:45:be:5e:
df:da:29:6d:43:c6:52:a0:4f:a3:e8:83:91:84:6c:be:38:a0:
f8:ff:04:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:45:36 2026 by rpki-client