Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
File: 0TAReuHNwt8cWIFuAOVFH4fvs3A.mft (raw, json)
Hash identifier: 9FCI7ZsRJaZCJUPU7nMrrjO3de74NygOr/YGXXTan2Y=
Subject key identifier: D5:DE:89:F9:CF:45:11:94:D5:4C:3F:E4:DA:4F:E3:E9:7C:53:C9:7C
Authority key identifier: D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70
Certificate issuer: /CN=d130117ae1cdc2df1c58816e00e5451f87efb370
Certificate serial: 01A0C2FBBF882F630F8C2DF3EABD55EE8668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
Manifest number: 0AF5
Signing time: Mon 21 Sep 2026 08:01:13 +0000
Manifest this update: Mon 21 Sep 2026 08:01:13 +0000
Manifest next update: Tue 22 Sep 2026 08:01:13 +0000
Files and hashes: 1: 0TAReuHNwt8cWIFuAOVFH4fvs3A.crl (hash: VVf81H7WJarpdNAFhotZqIKhmyj+wjliTIfHXEPh59E=)
2: J7yrSEXrlTnnMeUC2XbdaK7bWCA.roa (hash: FD+omFDlJTffjuxE+36nNYtgIdoELzjHmLWeidAPLSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:bf:88:2f:63:0f:8c:2d:f3:ea:bd:55:ee:86:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d130117ae1cdc2df1c58816e00e5451f87efb370
Validity
Not Before: Sep 21 08:01:13 2026 GMT
Not After : Sep 22 08:01:13 2026 GMT
Subject: CN=d5de89f9cf451194d54c3fe4da4fe3e97c53c97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:59:43:a7:c5:c6:33:fa:96:22:4e:da:3b:fa:
06:a1:a7:25:a4:f8:08:a7:f2:91:17:f3:bf:eb:64:
8a:f7:1f:a6:5f:44:4b:19:12:15:28:c6:6f:44:da:
40:45:ec:bc:58:14:3f:cb:90:32:09:19:5a:1d:6f:
7a:0c:c5:b3:99:cf:3d:31:e3:79:98:22:2e:69:b8:
5c:0f:53:78:32:13:db:74:bf:fa:28:3c:b9:6d:9d:
4f:0b:a1:d9:de:3d:28:e3:b3:f3:c6:d1:ca:cd:23:
15:d6:b0:4a:d4:e6:a2:f8:33:a1:6c:e1:dd:56:5b:
9c:c7:11:65:8b:a8:5f:8d:4b:f7:1b:fb:d2:cd:fa:
da:ed:56:e5:00:17:73:4a:6f:b3:e6:b4:3a:fd:3e:
8d:e6:f2:5d:86:ca:e0:cf:61:c6:4b:ca:5d:2b:01:
3b:c2:8e:e3:9d:de:61:8b:58:e6:31:5a:6d:49:2d:
a5:1e:b1:0f:38:88:e8:89:7a:b2:de:af:60:26:7e:
5a:93:85:0b:00:31:db:99:77:b4:4b:e4:9d:75:d5:
83:4a:f8:32:fc:01:d9:fd:ad:67:d1:cf:0e:a0:18:
92:c9:13:eb:a8:9d:4f:9a:b8:f8:8a:86:0b:8e:99:
52:1a:44:1a:45:87:fb:f1:b4:80:7e:9d:61:0c:09:
2b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DE:89:F9:CF:45:11:94:D5:4C:3F:E4:DA:4F:E3:E9:7C:53:C9:7C
X509v3 Authority Key Identifier:
keyid:D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:dc:00:7a:b5:ae:a9:fb:42:17:30:12:fc:51:dc:62:f4:18:
0f:a3:9c:7a:0d:9c:c9:f9:e5:ac:20:4e:80:73:70:6d:8f:fa:
55:8a:90:0b:78:01:47:26:17:3d:bd:0c:f3:89:c1:e9:93:a4:
59:3f:6f:c9:e1:01:83:3e:12:85:1e:92:bb:b3:fa:a2:a9:28:
7e:d4:52:9e:b6:e8:1e:78:0e:ef:be:2a:f8:12:d3:e9:4c:a5:
0a:e4:6a:94:e7:1e:98:eb:79:6e:d7:d6:98:ea:b7:92:1d:5c:
e3:9e:13:da:b4:ca:7a:2d:48:02:2f:1e:d5:35:b4:e4:05:c9:
b4:64:1a:c9:be:16:c8:98:2c:01:43:26:1f:5a:ca:f4:12:c2:
36:22:45:d9:9d:de:29:4f:2f:e9:5a:47:b7:d0:b1:52:3f:f4:
1a:2f:7d:a7:28:c8:0c:a1:1a:d7:4f:97:6d:cd:59:9d:2a:00:
2d:4e:7a:14:77:4d:43:1e:b3:c4:64:2a:4b:5e:65:28:8b:b1:
f4:9a:a0:eb:17:33:18:0f:b1:c5:c1:52:e5:c8:ee:d8:28:61:
69:5c:42:2e:99:a9:99:da:23:c7:a3:de:97:f1:4b:db:27:bc:
f5:9f:ff:47:81:17:1e:40:43:ca:32:0a:9a:77:06:3b:ca:21:
57:95:87:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:42:55 2026 by rpki-client