Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
File: 0-2n3wX226CeOefUvex7rg7_urA.mft (raw, json)
Hash identifier: k6lYaQEH9nwPA3Sc0IlrJ70TOzyYOxAFdZevZqriV6g=
Subject key identifier: 7B:0D:B4:01:F3:C4:70:6B:71:53:F2:9B:7E:D7:51:66:03:23:52:5C
Authority key identifier: D3:ED:A7:DF:05:F6:DB:A0:9E:39:E7:D4:BD:EC:7B:AE:0E:FF:BA:B0
Certificate issuer: /CN=d3eda7df05f6dba09e39e7d4bdec7bae0effbab0
Certificate serial: 01A0C821C59889D5C98C7B0F5007002FB3A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
Manifest number: 0770
Signing time: Tue 22 Sep 2026 08:00:51 +0000
Manifest this update: Tue 22 Sep 2026 08:00:51 +0000
Manifest next update: Wed 23 Sep 2026 08:00:51 +0000
Files and hashes: 1: 0-2n3wX226CeOefUvex7rg7_urA.crl (hash: BIDa+PeWrh4oY/NhsacWd9hqSavz7eqLt4TuCWNTUiM=)
2: qTWraqPBRkXUgfYW4gfB3AS-jm0.roa (hash: Rbt0ZTsq9hRwXO+cnDLn20WShDhAg5xFObZyVKiajFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:21:c5:98:89:d5:c9:8c:7b:0f:50:07:00:2f:b3:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3eda7df05f6dba09e39e7d4bdec7bae0effbab0
Validity
Not Before: Sep 22 08:00:51 2026 GMT
Not After : Sep 23 08:00:51 2026 GMT
Subject: CN=7b0db401f3c4706b7153f29b7ed751660323525c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7c:54:1e:7b:7f:84:cc:b6:a5:af:26:8d:2e:
9e:a5:24:46:8c:c7:02:b1:c5:72:28:ef:73:5a:09:
fb:97:8a:68:e3:ff:c7:98:36:3c:79:2a:7e:60:89:
84:e7:2c:e9:a5:95:bc:e6:7f:fc:d7:b8:29:f4:35:
8f:82:79:b3:d2:f7:1d:ec:8d:e6:3f:bb:98:23:2a:
6a:6a:12:be:be:b5:eb:35:ae:41:be:6a:e2:50:2d:
e0:7a:96:ae:34:da:79:7e:57:9e:01:83:7c:ee:8a:
b2:da:f0:6f:68:89:08:43:15:93:8e:13:83:ec:68:
a9:c3:64:c3:d0:7a:5d:cd:70:5b:bf:db:df:52:f1:
d9:de:a7:18:0d:32:bd:e8:45:b3:d7:18:03:fd:91:
32:c9:57:8e:32:90:82:37:6c:a3:52:bf:1d:63:3e:
36:12:87:f5:e8:78:0b:be:1e:00:4d:ef:61:1f:b4:
d7:71:2d:5c:0d:32:e1:a7:45:24:de:aa:b4:90:41:
e9:25:76:ec:8b:c0:83:fc:35:eb:ac:ff:52:46:b9:
de:40:7b:35:11:06:91:e0:3a:79:0e:73:9f:89:b0:
96:7a:c1:f5:ee:f6:54:3b:a8:27:62:b4:37:16:97:
6a:b4:07:12:30:c6:74:44:12:d6:41:c3:12:2e:3a:
fe:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0D:B4:01:F3:C4:70:6B:71:53:F2:9B:7E:D7:51:66:03:23:52:5C
X509v3 Authority Key Identifier:
keyid:D3:ED:A7:DF:05:F6:DB:A0:9E:39:E7:D4:BD:EC:7B:AE:0E:FF:BA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:78:9a:cc:b0:4b:02:48:6b:ab:1c:ee:ba:47:dd:de:b0:8f:
cd:49:ab:59:6b:b3:c4:ee:bc:34:a0:a5:be:bf:17:81:8f:f7:
19:f6:ed:c3:1a:9b:fd:79:76:1b:f2:39:3a:ca:26:3e:4d:6c:
e2:26:17:22:b5:d3:04:b1:81:53:1f:28:b6:db:93:67:a1:e9:
d0:36:3a:f1:b7:74:13:92:e6:64:43:b9:b2:c1:8e:80:c6:8c:
7e:d7:af:4c:03:69:16:ca:fc:5b:fc:83:e2:fb:17:0d:59:37:
0f:c3:55:0f:3e:d5:cd:f1:85:f7:a0:39:3c:d8:51:37:30:9d:
f7:d2:f0:02:4b:4a:14:72:6c:9f:ce:63:16:bd:8b:28:98:c4:
23:80:35:d0:f8:9e:19:a2:e7:e7:6f:f0:31:6e:78:8a:4c:6f:
c1:72:41:2e:c8:2c:91:7b:b0:25:c9:4c:e5:21:ae:fc:1c:b1:
23:7f:24:fb:82:70:2b:66:85:ea:87:2b:ee:fa:4a:5f:8f:80:
ba:8b:c1:c8:d4:9a:a4:37:68:f6:a9:ff:48:49:b5:be:fe:0e:
76:9c:b4:32:2a:ba:bb:97:e3:f2:26:b4:3d:9f:2a:9d:08:4c:
2f:44:54:c0:4f:3b:b8:4e:44:0d:5c:cb:35:92:dc:f6:54:46:
91:fd:eb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:11:13 2026 by rpki-client